Identifying Misconfigurations in your Terraform

preview_player
Показать описание
This session with look at the risks associated with misconfigurations in your Terraform code and ways to mitigate them.

Get a hands on approach to identifying potential issues early using tfsec. You'll learn:
- What is a misconfiguration and why does it matter?
- How can these risks be mitigated
- Using tfsec static analysis for Terraform
- Using tfsec in a GitHub pipeline
- Shifting left and discovering issues before they leave the developers' machines

Speaker: Owen Rumney

#terraform #infrastructureascode #tfsec
-

HashiCorp provides infrastructure automation software for multi-cloud environments, enabling enterprises to unlock a common cloud operating model to provision, secure, connect, and run any application on any infrastructure. HashiCorp open source tools Vagrant, Packer, Terraform, Vault, Consul, Nomad, Boundary, and Waypoint allow organizations to deliver applications faster by helping enterprises transition from manual processes and ITIL practices to self-service automation and DevOps practices.

Twitter: @hashicorp
  1. HashiCorp
  2. HashiCorp
  3. Terraform
  4. tfsec
  5. Infrastructure as Code
Рекомендации по теме
Identifying Misconfigurations in 0:14:09

Identifying Misconfigurations in your Terraform

Detecting misconfigurations in 0:05:38

Detecting misconfigurations in Terraform

Detecting and Remediating 0:26:26

Detecting and Remediating Cloud Misconfigurations 101

Secure Your Terraform 0:02:42

Secure Your Terraform Code: 5 Steps to Bulletproof IaC Security!

🔎 Uncover hidden 0:08:31

🔎 Uncover hidden issues in your Terraform code with these 3 powerful static analysis techniques!

Terraform Challenges - 0:00:52

Terraform Challenges - Infrastructure Drift Detection

Identify, Secure, and 0:29:40

Identify, Secure, and Validate Vulnerabilities in Cloud Infrastructures Deployed via Terraform

Identifying common misconfigurations 0:07:52

Identifying common misconfigurations on AWS

Terraform Resource Visualize 0:04:13

Terraform Resource Visualize | Terraform Tutorial

Common Pitfalls When 0:11:16

Common Pitfalls When Using Terraform and How to Avoid Them

Part2 - Ensuring 0:09:41

Part2 - Ensuring Terraform Code Standards and Security with flint and Tfsec in GitHub Actions

Why checking your 0:48:14

Why checking your infrastructure-as-code for misconfigurations is not enough – How ... - Aakash Shah...

Using tfsec to 0:51:36

Using tfsec to scan Terraform Code || tfsec with GitHub Actions

Standardizing Terraform Linting 0:23:32

Standardizing Terraform Linting - Adam Cotenoff

Checkov in Azure 0:04:59

Checkov in Azure DevOps pipelines

Using tfsec to 0:30:06

Using tfsec to Scan Your Terraform Code

Kubernetes Misconfigurations - 0:40:19

Kubernetes Misconfigurations - What are they and how to identify them

Securely developing Terraform 0:38:17

Securely developing Terraform

Use Terraform? You 0:10:09

Use Terraform? You NEED this for security!

Enhance Cloud Infra 0:21:27

Enhance Cloud Infra Security - Essential Terraform Scanning Tools Reviewed #checkov #gcp #terraform

Trivy Terraform Plan 0:11:30

Trivy Terraform Plan Misconfiguration Scanning -- tfplan.json

Automate IaC security 0:04:02

Automate IaC security guardrails directly in Terraform Cloud with Bridgecrew Run Tasks

Introducing env0 - 0:29:23

Introducing env0 - A Terraform Cloud Alternative

Secure your Terraform 0:12:07

Secure your Terraform CI/CD Pipelines with tfsec