Static Analysis of Infrastructure Code Talk
Planning, provisioning, and changing infrastructure are becoming vital to rapid cloud application development. Incorporating infrastructure-as-code into software development promotes transparency and immutability and helps prevent bad configurations upstream. Just like application security, Infrastructure code can be continuously scanned for vulnerabilities and misconfigs. In this session, we cover a simple method to write, test, and maintain infrastructure frameworks like Cloudformation, Terraform and Kubernetes at scale using policy-as-code . We will go over open source projects that analyze those codes and will try to measure it's impact on an organizatinon using the OSS project: https://github.com/bridgecrewio/checkov/