How serverless helps keep your WordPress site secure

1

AWS WAF

If you're using Ymir or just running WordPress yourself on AWS, you can use AWS WAF. This is a full featured WAF with a lot of customizable options. That said, it also comes with a lot of pre-configured rules to help block known threats such as bots. But it also has a WordPress rule to block known vulnerabilities such as XML-RPC.

#Web Application Security #Security Monitoring #Identity And Access Management 27 social mentions

2

AWS Shield

Ymir uses CloudFront to do page caching. If you also use CloudFront this way, you get some DDOS protection for free through AWS Shield. This will protect you against infrastructure layer attacks, but not application layers. (Also known as layer 7.) To protect against those, you need a WAF.

#Web Application Security #Network & Admin #CDN 10 social mentions

3

Amazon S3

That's why it's a common security practice to disallow PHP file execution in the uploads directory. That way, if someone injects a PHP file and requests it, they'll just download the file instead of having PHP execute it. With serverless WordPress, this is the only possible behaviour because your upload directory isn't on a server. It's on S3.

#Cloud Hosting #Object Storage #Cloud Storage 170 social mentions

4

AWS Lambda

With serverless PHP, you can scale from 0 to thousands of connections in a minute. To do that, AWS Lambda and other similar services will always use the same code that you deployed with. And that code will always be read-only on the server that executes it.

#Cloud Computing #Cloud Hosting #Backend As A Service 243 social mentions