[nerdbeere]

The cool thing about serverless infrastructure is that it does not really concern you. As long as you are on a maintained version of the underlying platform your provider will take care of the updates.

If your software runs on a unmaintained platform there won't be any security fixes and that's why amazon forces you to upgrade at some point.

[ldoughty]

AWS, at least, didn't make any promises for updates for serverless Lambda that I can see in their docs.

[nerdbeere]

Right, because it's not relevant to you. You don't care about the underlying infrastructure in terms of security, amazon does that for you.