Serverless computing is changing the way that software systems are being built and operated. Despite being a relatively new area within the IT industry, serverless has the potential to massively alter the way that business value is being delivered with software. In this talk, Rafal will introduce key tenets of serverless computing and compare it to the more traditional technology stack running on top compute instances or containers. He will also explain the programming model of Function-as-a-Service, using AWS Lambda as an example and provide overview of other cloud services, commonly used to deliver serverless architectures.

Moving to microservices requires a new mindset and approach to application design. This is particularly important when it comes to security as in a distributed world even calls from other parts of your application are vulnerable. Security is often discussed in an abstract context and as there are so many existing standards it's difficult to know what methods are appropriate and when to use them. This session will use the text-based microservice adventure Game On! to discuss security in a real-world scenario. It will introduce the security considerations in a microservice environment and the choices we made to secure our application. You will learn how to utilise industry-wide standards such as OAuth2, OpenID Connect and other social sign-on methods and what we have done to work towards dev/production parity.