PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What Is IaC Security Scanning? Terraform, Kubernetes & Cloud Misconfigurations Explained

aikido.dev | blog | #cloud | #cloud-security | #kubernetes | #static-analysis | #misconfiguration | #terraform | #iac
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Explains IaC scanning: static analysis of Terraform, Kubernetes and other infra files to catch open storage, permissive IAM, missing encryption and privileged containers before they reach production.
Published
Collected

Related coverage

blog · about.gitlab.com
GitLab's agent orchestration eliminates the wait between development stages
GitLab Duo Agent Platform keeps review, tests, security, and approvals moving without a manual task between every handoff.
blog · wiz.io
Wiz + HCP Terraform: Close the IaC-to-Cloud Infrastructure Security Gap
Wiz's HCP Terraform connector reaches GA: every terraform plan is scanned as a run task, one policy engine governs code and runtime, and live cloud risks are traced back to their IaC source.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · wiz.io
Wiz ❤️ HashiCorp: Wiz’s new integration with Terraform Run Tasks helps customers slash risks and boost developer productivity
Wiz integrates with HashiCorp Terraform Cloud and Enterprise Run Tasks: post-plan or pre-apply checks scan IaC for secrets and misconfigurations, adding guardrails before deployment.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
incident · hackenproof.com
Nokia Data Breach: Exposed etcd Server Leaked Infrastructure Credentials
An unsecured etcd server exposed Nokia's internal passwords, SSH keys, and AWS secrets—what was found, Nokia's response, and why etcd exposures still happen today.
Back