Use Terraform? You NEED this for security!

So you’re using Terraform to deploy infrastructure on the cloud, and it all works beautifully…you’re done, right? Well not quite! There’s one more very important step that you need to take to make sure that the infrastructure you’re about to deploy is following best practices and doesn’t have any major security issues.
💬 Chat with me
Discord: cybr.com/discord
Website: cybr.com
LinkedIn: / christophelimpalair
Twitter: / christophelimp
🔗 Links mentioned in the video:
- Repo used in the video: github.com/christophelimpalai...
- Checkov: www.checkov.io/
- Terraform: www.terraform.io/
🎓 Courses
- Introduction to AWS Security: cybr.com/courses/introduction...
- Intro to AWS Pentesting: • intro to AWS PENTESTIN...
🚨 Disclaimer
This video is strictly for educational purposes and to teach you how you can detect and mitigate threats from your or your employer's cloud enviroments. Learning about real threats, ethical hacking, and penetration testing is an important way of protecting ourselves against threat actors.
⏱ Timestamps:
00:00 - 00:16 - Intro
00:17 - 00:47 - What is Terraform?
00:48 - 01:20 - What you need
01:21 - 01:57 - About the demo and tools
01:58 - 02:15 - Install Checkov & Terraform
02:16 - 02:36 - Initializing Terraform
02:37 - 02:54 - Running Checkov
02:55 - 06:09 - Fixing the issues
06:10 - 08:15 - Custom Policies
08:16 - 09:31 - Restricting EC2 instance types
09:32 - 09:39 - Methods for running these checks
09:40 - 10:08 - Outro
#awssecurity #cloudsecurity #sast #iac #checkov #infrastructureascode #terraform #policyascode #policy #cybersecurity #securityassessment #aws

[@adedirangoodness3830]

Insightful walkthrough. Thanks

[@Cybrcom]

Glad it was insightful!

[@jacoumata]

Quick and informative. Thank you.

[@Cybrcom]

Glad you liked it! Thanks for the comment

[@thejaswarup]

Thanks

[@tairocruise6704]

please make a video on Terraform.🙏🙏 pleeeease