domains / families / security / implementing-infrastructure-as-code-security-scanning

implementing-infrastructure-as-code-security-scanning

separate

'Implements automated security scanning for Infrastructure as Code using

When to use

• When provisioning cloud infrastructure with Terraform, CloudFormation, or Pulumi and needing automated security validation
• When compliance frameworks require evidence of infrastructure configuration review before deployment
• When preventing common cloud misconfigurations like public S3 buckets, open security groups, or unencrypted storage
• When establishing guardrails that block insecure infrastructure changes in pull requests
• When managing multi-cloud environments requiring consistent security policies across AWS, Azure, and GCP

When not to use

• scanning application source code
• monitoring already-deployed infrastructure drift
• container image vulnerability scanning

Skill page

Source