Misconfiguration is one of the most prevalent risks in serverless and container-based environments. Given the complex nature of container orchestration (e.g., Kubernetes), CI/CD pipelines, and ephemeral infrastructure, simple missteps-such as overly permissive roles or exposed ports-can lead to significant vulnerabilities.
These workloads require strict configuration management, automated scanning, and secure defaults to prevent breaches. Unlike traditional servers, containers and functions spin up and down rapidly, making traditional visibility tools insufficient.
This is discussed thoroughly in Domain 8: Virtualization and Containers, where the CCSK guidance identifies misconfiguration as a leading cause of cloud-native exploitation.
Reference:
CSA Security Guidance v4.0 - Domain 8: Virtualization and Containers