Question

A development team migrates a batch-processing job to a serverless Function-as-a-Service (FaaS) platform offered by a major cloud provider. During a security review, the CISO asks which security responsibilities remain with the customer under this consumption-based compute model. Which task is the customer STILL responsible for in a FaaS deployment?

Accepted Answer

Securing the function code and managing the identity permissions granted to the function

Answer

Patching the underlying host operating system that executes the function containers

Answer

Maintaining and hardening the runtime language interpreter provided by the platform

Answer

Physically securing and provisioning the compute capacity that scales the functions