Hey SST community, I’ve a random question for thos...
# helpt
Tonny (sstNerd)
03/10/2022, 5:06 AMHey SST community, I’ve a random question for those who are really experimented into real serverless applications: do you have a way to lock your application if you ever get slammed? (by either some sort of DDOS or “bots” (apparent real-traffic that is not real but is just killing your AWS budget)?
I want to sell SST as a solution in the company I work on but that is my only (and stronger) downside here b/c I’ve no way to guarantee that the billings here are going to stick to our budget as in a traditional cloud. Any input/experience you can share about that?
o
Omi Chowdhury
03/10/2022, 5:23 AMI just chatted with AWS about this earlier this week - they recommended AWS shield advanced, which looks pricy but makes sense for a larger provider
t
thdxr
03/10/2022, 5:24 AMAPIG has rate limits but I'm not familiar with how it works
s
Seth Geoghegan
03/10/2022, 5:31 AMIs this a question about SST specifically, or serverless tech in general?
t
Tonny (sstNerd)
03/10/2022, 5:31 AMgood point… I mean I’m using SST but I guess it’s more AWS setup for SST applications
s
Seth Geoghegan
03/10/2022, 5:32 AMIn other words, is there a question about how much it costs to develop natively in the cloud vs locally in docker?
Seth Geoghegan
03/10/2022, 5:35 AMGotcha. The pay per use model of serverless can be a bit of a paradigm shift
Seth Geoghegan
03/10/2022, 5:35 AMThrow in cloud native development environments like the kind SST supports, and you're breaking another paradigm
Seth Geoghegan
03/10/2022, 5:38 AMYan Cui wrote a good blog post about this topic, I think you may find it useful: https://theburningmonk.com/2019/01/you-are-thinking-about-serverless-costs-all-wrong/
t
Tonny (sstNerd)
03/10/2022, 5:38 AMgot it, ty I am going to take a break to read it now 👍
t
thdxr
03/10/2022, 6:14 AMThe attack vector of spamming an API does exist
thdxr
03/10/2022, 6:14 AMThere are lambda concurrency limits you can set in place
r
Roberto Novelo
03/10/2022, 5:26 PMI’d also look at something like: https://github.com/cdk-patterns/serverless/blob/main/the-waf-apigateway/README.md
s
Seth Geoghegan
03/10/2022, 6:10 PMProbably worth mentioning the existence of Billing Alerts as well