Tag archive
Learn how to secure Infrastructure as Code (IaC) with automated scanning of Terraform and CloudFormation templates using Checkov, tfsec, cfn-nag, and
JPMorganChase published a 10-point cyber resilience checklist. See how Snyk covers 8 of the 10 actions and where it fits in your security stack.
Protect sensitive data like passwords and API keys with Vault, a powerful secrets management tool for IaC. Securely manage credentials across cloud and
Stop review fatigue. Learn to integrate CodeRabbit and GitHub Actions to automate AI-powered Terrafo
Stop hope-based deployments. Learn to implement a professional IaC testing pyramid using TFLint, ter
Introduction: Why Security Matters in DevOps Imagine launching a new application with a...
Learn about the different types of Values and Rules you can use to build policies in OPA & Rego.
Learn how to use AND and OR rules and custom messages using OPA and Rego in the second part of our beginner's guide to Rego.
Learn how to write your first policy as code rules in Rego. This Rego tutorial for beginners covers the basics of Rego syntax and using OPA.
In this post, we'll walk you through maximizing IAM security with AWS permissions boundaries and Snyk IaC.
Let’s look at the top 5 security concerns for IaC and the best practices we can implement to mitigate them.