Serverless architecture security risk assessment