Sachin Chaurasiya

Tag

#Aws

2 items tagged Aws.

All tags

Articles 2

Infrastructure as Code intermediate

Scan Infrastructure as Code with Checkov

Run Checkov against Terraform with a public database, an open security group and an unprotected bucket; read the 22 findings and why they matter; fix them; then record the rest as documented skips.

12 min read
Infrastructure as Code intermediate

Secure Terraform Foundations: Pinning, State, Secrets and Review

The security foundations of a Terraform repository: pinned versions with a committed lock file, remote state with locking and access control, secrets kept out of source, least-privilege plan and apply roles.

11 min read