medium10 pts · first answer countscloud-securityinfrastructure-as-codedevsecops

Catching misconfigurations in Terraform

Several S3 buckets were deployed public through Terraform before anyone noticed. Where is the cheapest place to catch this next time?

A.Wait for the monthly external penetration testB.Ask developers to check the console after each deployC.Scan the Terraform plan in CI with policy-as-code checksD.Delete public buckets manually once a quarter

Discussion 0

Join free to post in the discussion.

Catching misconfigurations in Terraform

Discussion 0

Related questions