Cloud Security 4 commands
Terraform (Security)
Infrastructure as Code tool. From a security perspective, used with tools like tfsec and Checkov to scan IaC for cloud misconfigurations.
iaccloudcompliancemisconfigurations
Installation
# tfsec
brew install tfsec
# Checkov
pip install checkov
# Scout Suite
pip install scoutsuiteCommands & usage
4 entriestfsec .Scan Terraform files for misconfigurations
checkov -d .Scan IaC with Checkov
scout awsAudit AWS environment
prowler awsAWS security assessment
Use cases
Cloud security scanningIaC securityCompliance auditingMisconfiguration detectionCloud hardening