Infrastructure as code scanning

  • Terraform security checks

  • Kubernetes manifest validation

  • CloudFormation template review

Tools:

  • Checkov

  • Terrascan

  • KICS