Compliance as Code for AWS

Compliance as Code for AWS

Transcript

1. Compliance as Code for AWS Boriphuth Saensukphattraka
2. Who am I
3. Topic Infrastructure as code security Terraform lifecycle Scanning throughout the Terraform development pipeline Demo
4. Infrastructure as code security
5. Infrastructure as code security Why IaC Security is Important • Identifying potential security and compliance gaps earlier reduces risk • Small IaC misconfigurations can become large runtime attack surfaces. • Be aware that some runtime configurations can’t be “fixed.” • Securing IaC templates frees up security teams to focus on runtime issues. • Development security fosters a culture of security.
6. Terraform lifecycle Terraform lifecycle consists of – init, plan, apply, and destroy.
7. How Terraform Works
8. Scanning throughout the Terraform development pipeline
9. Demo 1.Manual run on IDE 2.Run on the github action
10. QA
11. Resource https://www.checkov.io https://www.nexastack.com/en/blog/infrastructure-as-code-security https://geekflare.com/terraform-for-beginners https://www.fugue.co/infrastructure-as-code-security https://bridgecrew.io/blog/terraform-plan-security-scanning-checkov https://github.com/bridgecrewio/checkov