From the course: Cloud Security for DevSecOps Engineers: From Security Models to API Protection

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

IaC scanning basics

IaC scanning basics

From the course: Cloud Security for DevSecOps Engineers: From Security Models to API Protection

Start my 1-month free trial Buy for my team

IaC scanning basics

“

- [Instructor] When you deploy resources into the cloud using infrastructure as code, how can you ensure that your resources are indeed secured and hardened? You can achieve this by scanning your code. Let's dive into what IaC scanning means, its benefits, and some tools that you should be aware of. According to Olga from JetBrains, "Infrastructure as code scanning is the process of statically analyzing infrastructure configuration files such as Terraform, CloudFormation, and Kubernetes manifest to detect misconfigurations, security vulnerabilities and policy violations before they are deployed. With IaC security scanning, there are some key benefits that I would like for you to remember. Number one, IaC scanning helps you prevent security risks by identifying security gaps within your infrastructure and providing recommendations on how to fix them. It also helps you reduce the amount of configuration errors or misconfigurations in your code. And lastly, IaC scanning tools help you…

Contents