Real World Serverless - Architecture, Patterns and Lessons Learned

Explore real-world serverless architecture, patterns, and lessons learned in this 46-minute Devoxx conference talk. Dive into the complexities of building serverless applications on AWS beyond basic "Hello World" examples. Examine different scenarios and approaches, including designing a serverless landscape without getting lost in event-driven chaos. Learn about the entire development process, covering testing, debugging, monitoring, and securing serverless applications. Discover essential tools like Claudia.JS that simplify working with AWS Lambda. Discuss potential drawbacks and misconceptions, such as vendor lock-in and the illusion of NoOps. Gain insights on adapting serverless architectural styles while avoiding common pitfalls. Cover topics including monitoring state, frameworks and tools, separating handler and business code, declarative deployments, protecting production environments, measuring performance and user experience, designing with latency in mind, security considerations, and addressing concurrency limitations.

Intro
THINGS ARE MOVING FAST
EMPLOYEE ADMINISTRATION PLATFORM
Monitoring State
FRAMEWORKS, RUNTIMES AND TOOLS
VENDOR LOCK-IN
SEPARATE HANDLER AND BUSINESS CODE
DECLARATIVE DEPLOYMENTS
ALL TOOLS HAVE DIFFERENT DRAWBACKS
PROTECT PRODUCTION
STAGING IS A THING
MEASURE PERCEIVED EXTERNAL PERFORMANCE
MEASURE USER EXPERIENCE
DESIGN WITH LATENCY IN MIND
EVENT INJECTION
BILLING ATTACK
PRINCIPLE OF LEAST PRIVILEGES
BEWARE CRAPPY CODE EXAMPLES
USE A SECURITY WATCHDOG
SECURITY MUST BE PART OF DEVELOPMENT RIGHT FROM THE START
NEW ARCHITECTURES NEW TRAPS
ALWAYS USE CONCURRENCY LIMITS
KEEP AN EYE ON METRIC FOR CONCURRENCY FAILURES
PREFER ASYNCHRONOUS INTEGRATION
ATTACK OF SELF DENIAL
CONCURRENCY IS LIMITED
PATTERNS, SHARING, DEPENDENCIES
EASE OF TRANSITION FLEXIBILITY SECURITY - SIZING DEPLOYMENT COMPLEXITY