Serverless REST API with DynamoDB

Costmedium

Deployability iac ready

Status cloud lab

Validation terraform -chdir=terraform fmt -check

Node.js Lambda API Gateway DynamoDB SAM Terraform aws terraform sam

Use the guide first.

The full learning guide is on this page. Open the repository files only when a step asks you to inspect code, fork the project, or download raw assets.

Read safety guide Project files on GitHub

Project Guide

Lambda based REST API entirely through code - API Gateway, YAML & Terraform

Serverless Applications with AWS Lambda and API Gateway

🛡️ 2026 DevSecOps Enhancements (What You Will Learn)

Serverless architectures offload OS-level patching to AWS, but they introduce new attack vectors. This project highlights 2026 serverless DevSecOps principles:

1. API Gateway Exploitation Prevention: A public-facing API Gateway must be fronted by AWS WAF (Web Application Firewall) to mitigate OWASP Top 10 API threats (like injection and parameter tampering) before they ever trigger Lambda invocations (preventing DoS billing attacks).
2. Lambda IAM Least Privilege: Each individual Lambda function must be scoped with a granular IAM execution role. A function writing to DynamoDB should only have dynamodb:PutItem on that specific table ARN, not dynamodb:* across the account.

Compilation

sam package —template-file template.yaml —output-template-file deploy.yaml —s3-bucket $SAM_CODE_BUCKET

• terraform init

• terraform plan

• terraform deploy

• terraform destroy