Serverless + making sure the serverless function doesn't have any privileges. More often than not I see people use serverless in the name of security, and then

Serverless + making sure the serverless function doesn't have any privileges. More often than not I see people use serverless in the name of security, and then give the function write access to prod resources.