What threat models apply to Serverless?

    // Example of a simple AWS Lambda function with no input validation
    const AWS = require('aws-sdk');
    
    exports.handler = async (event) => {
        // Vulnerable to injection if input is not validated
        const userInput = event.body;
        const responseMessage = `Hello, ${userInput}!`;
        
        return {
            statusCode: 200,
            body: JSON.stringify(responseMessage),
        };
    };