Can we use plugins like Helmet.js and body-parser to secure a serverless function? If not, any alternatives?

Question

Can we use plugins like Helmet.js and body-parser to secure a serverless function? If we can't how can we implement those features to our serverless functions?

Answer 1

In AWS, you can setup a distributed architecture using other services to filter requests before hitting your serverless functions. You can use AWS WAF to protect your API Gateway Endpoints (Currently you have to proxy your API through CloudFront).

Check the following diagram and refer the AWS documentation for more details.

Diagram Credits: AWS answers for AWS WAF Security Automations