Datadog App and API Protection (AAP) now provides in-process security monitoring for Python AWS Lambda functions. Unlike proxy-based WAF approaches, AAP integrates directly into the Python runtime via Datadog's tracing library, enabling detection of injection attacks (SQL injection, SSRF, shell injection, local file inclusion) through runtime application self-protection (RASP) capabilities called Exploit Prevention. It also detects account takeover attempts by capturing authentication events like user logins across distributed serverless invocations. Setup requires setting the DD_APPSEC_ENABLED=true environment variable on instrumented Lambda functions.
Table of contents
Increase visibility in Lambda environmentsDetect successful injection attacks with Exploit PreventionIdentify and respond to account takeover attemptsStart monitoring threats in your Python Lambda functionsSort: