Focusing on Terraform but applicable to any infrastructure as code tool, demonstrate using Checkov OSS to perform SAST scanning for security vulnerabilities in the resulting infrastructure. Touch on Bridgecrew which offers a commercial demo of this capability, and briefly touch on Hashicorp Sentinel, which goes even further and allows security policy as code applied to Terraform.
MSIS UT AustinMS Cybersecurity U Dallas - Fall 2024AWS Security Specialty CertifiedTerraform CertifiedFocusing on public cloud and IaC security.My first conference talk was Puppet Conf 2013.
Thursday October 24, 2024 11:00am - 11:50am CDT
Promon Room (Cypress)2525 West Anderson Lane #365, Austin, TX, USA