Firecracker is an open source virtualization technology that is purpose-built for creating and managing secure, multi-tenant container and function-based services.
The Amazon Builders’ Library is a collection of living articles that describe how Amazon develops, architects, releases, and operates technology. The content in The Builders’ Library is written by Amazon’s senior technical leaders and engineers covering topics across architecture, software delivery, and operations.
AWS Lambda SnapStart is a new performance optimization developed by AWS that can significantly improve the startup time for applications.
AWS Lambda is a serverless event-driven compute service, part of a category of cloud compute offerings sometimes called Function-as-a-service (FaaS).
User space often implements PRNGs that use /dev/random as entropy source. We can not expect that this randomness sources stay completely unknown forever.
Research on cache attacks has shown that CPU caches leak significant information. Proposed detection mechanisms assume that all cache attacks cause more cache hits and cache misses than benign applications and use hardware performance counters for detection.
Sharing memory pages between non-trusting processes is a common method of reducing the memory footprint of multi-tenanted systems. In this paper we demonstrate that, due to a weakness in the Intel X86 processors, page sharing exposes processes to information leaks.
AWS Lambda
Run code without thinking about servers or clusters. Run code without provisioning or managing infrastructure. Simply write and upload code as a .zip file or container image.