Скачать или смотреть Securely developing Terraform

We routinely scan our code for vulnerabilities, but what about our infrastructure? Our infrastructure as code can have as many secrets as our codebase. Many organizations are using Terraform with automated pipelines like GitHub Actions. How do we automatically scan our Terraform modules for misconfiguration or secrets? How can we configure Terraform to store state securely in the cloud for each environment?

During this session we will examine how to leverage open source tools to:
Scan for security and configuration issues using tools like tfsec, terrascan, and checkov
Securely configure Terraform backends like AzureRM
Securely pass variables and input into Terraform
Securely deploy Terraform to clouds like Azure

After this session you will have the tools and examples to securely develop terraform for the cloud.

Speaker: Chris Ayers
Twitter:   / chris_l_ayers  

Subscribe to our YouTube Channel → https://www.youtube.com/c/HashiCorp?s...

For hands-on interactive labs, visit HashiCorp Developer → https://developer.hashicorp.com/

HashiCorp provides infrastructure automation software for multi-cloud environments, enabling enterprises to unlock a common cloud operating model to provision, secure, connect, and run any application on any infrastructure. HashiCorp tools Vagrant, Packer, Terraform, Vault, Consul, Nomad, Boundary, and Waypoint allow organizations to deliver applications faster by helping enterprises transition from manual processes and ITIL practices to self-service automation and DevOps practices.

For more information → https://hashicorp.com
Twitter →   / hashicorp  
LinkedIn →   / hashicorp  
Facebook →   / hashicorp