Automating Security Across Cloud Infrastructure as Code
Infrastructure as Code (IaC) is one of the most effective ways to provision and manage cloud infrastructure. It also gives us an opportunity to implement security requirements at code inception rather than at runtime. In this talk, we'll discuss the most common security weaknesses in cloud infrastructure, how to detect/find them using Terrascan (an open source static code analysis tool for IaC), and how this approach would fit into your overall cloud security program.
