Palo Alto Networks Certified Cloud Security Engineer (PCCSE)Cloud Workload Protection Platform (CWPP)Medium
A development team is deploying a new serverless application using AWS Lambda functions. They need to ensure that these functions are protected from common runtime threats, such as code injection and unauthorized data access, without requiring modifications to the function code itself. Which Prisma Cloud component enables this runtime protection for serverless functions?
- AContainer Defender (Sidecar)
- BHost Defender (DaemonSet)
- CCloud Discovery (API Integration)
- DServerless Defender (Wrapper)
Show answer & explanationAnswer & explanation
Correct answer: D. Serverless Defender (Wrapper)
Serverless Defender provides runtime protection for serverless functions by integrating as a wrapper or layer around the function, monitoring its execution and preventing malicious activities without requiring changes to the application code.
Why the other options are wrong
- A. Container Defender protects containers, not serverless functions, and 'sidecar' is a container pattern.
- B. Host Defender protects VMs, not serverless functions.
- C. Cloud Discovery identifies cloud assets and configurations, it does not provide runtime protection.
Prisma Cloud Serverless Defender
Serverless Defender provides runtime security for serverless functions (e.g., AWS Lambda, Azure Functions) by injecting a security layer or wrapper that monitors and protects function execution without code modifications.
- Protects serverless functions at runtime
- Deployed as a wrapper or layer
- No code changes required for the function
Memory trick: Serverless Defender wraps your functions in a security blanket.