> ssh login, fail2ban, opened ports, unprivileged user All of these things are extremely trivial to configure. > Would you feel more or less confortable takin

> ssh login, fail2ban, opened ports, unprivileged user All of these things are extremely trivial to configure. > Would you feel more or less confortable taking vacations while having a server or a server less platform? Depends on the SLA of my provider. Most VPS providers have 3+9s these days, then the reliability concern becomes my code, same with serverless. > Would you feel more or less confortable undergoing a security assessment while using a server or a server less platform? It is a common misconception that serverless platforms are inherently more secure. In reality, they just have different security concerns. In my eyes, it takes a practitioner of equivalent skill to properly harden a fleet of servers Vs correctly handle the eccentricities of IAM et al in a large cloud app.