In 2023, 66 percent of all serverless organizations on Google Cloud adopted container-based serverless workloads. The adoption of container-based serverless workloads by 66 percent of all serverless organizations on Google Cloud signifies a rapid acceleration across major cloud providers. Azure's year-over-year growth in container-based workload adoption reached 76 percent (as of May 2022), driven by the May 2022 release of Azure Container Apps. AWS also saw an increase, with 26 percent of serverless organizations running fully managed container workloads in 2023, up from roughly 20 percent the previous year, utilizing containerized Lambda functions and AWS App Runner, according to Datadoghq. These figures reveal a clear industry pivot towards containerized serverless, driven by perceived operational simplicity.
However, serverless adoption, while promising simplified operations, often masks complex, distributed security challenges. The explosive growth of containerized serverless workloads transforms developer agility into a critical security liability. Organizations are failing to adapt their defenses to this new, distributed attack surface. Companies embrace serverless for speed and efficiency, yet many unknowingly accumulate significant, hard-to-detect security debt. This debt will likely manifest in future breaches, as deployment speed often overshadows robust security considerations.
What is Serverless Computing?
Serverless computing defines a cloud execution model where the provider dynamically manages all server infrastructure. Elastic confirms that cloud providers provision, manage, and monitor infrastructure, including maintenance, updates, and security. The cloud execution model, where the provider dynamically manages all server infrastructure, liberates developers from backend infrastructure management, fostering a scalable and flexible environment. Developers can concentrate solely on application logic, accelerating development cycles and enabling applications to handle fluctuating demand without effort. The automatic handling of server management, patching, and scaling allows teams to deploy code without provisioning or managing servers. This abstraction, while simplifying development, also obscures critical infrastructure details from the application layer, creating a new security blind spot.
