Back to articles

Tag archive

#inspec

How to Use CDK Outputs in Your InSpec Tests
Jul 29, 2021

How to Use CDK Outputs in Your InSpec Tests

As a programmer, hard-coding values in my code, even test code, feels dirty and it's usually not a scalable practice. Instead of hard-coding resource IDs in your InSpec tests, you can add Outputs to a CDK app and push those values to a JSON file that your InSpec tests can use.

Jul 29, 20212 min read13 reactions0 comments
Shifting Left Securely With inSpec
Dec 6, 2017

Shifting Left Securely With inSpec

Traditionally, we attempt to ensure stability by reducing the vectors that can make changes to a system. In practice, that means "deployments are executed by trusted individuals with admin access". The trouble with this approach is, people make mistakes. Even admins. And not everyone can understand the implications of every script, command, or function they are asked to execute.

Dec 6, 20176 min read8 reactions2 comments