A Review on Data Security and Privacy in Serverless Computing: Key Strategies, Emerging Challenges
Bharath Kumar Reddy Janumpally · 2025
Serverless computing has revolutionized cloud-based application development by eliminating the need for developers to manage infrastructure. Cloud providers take care of provisioning, scalability, and security fixes, freeing developers to concentrate entirely on code composition. Serverless architectures, primarily driven by Function-as-a-Service (FaaS) and Backend-as-a-Service (BaaS), offer advantages such as cost efficiency, scalability, and reduced operational overhead. However, these benefits come with significant data security and privacy challenges, including authentication weaknesses, data exposure risks, and vendor lock-in. This paper explores the fundamentals of serverless computing, its key security concerns, and mitigation strategies. Analyzing existing literature and emerging trends provides insights into best practices for enhancing security and privacy in serverless environments. Their study also examines compliance requirements, encryption techniques, and architectural advancements that address these challenges.