Securing serverless applications for PCI-DSS is in a lot of ways much easier than the virtual machine or container counterpart. This is due to less overhead and more fully managed alternatives.