Infrastructure as Code Security Issues

Detects security misconfigurations in Terraform, Pulumi, and CloudFormation templates including overly permissive resources and disabled security features.

zakirkun a551ec1 2 files · 3.2 KB Updated

File contents

Infrastructure as Code Security Issues

Overview

Infrastructure as Code (IaC) templates define cloud resources and their security posture. Misconfigurations in Terraform/CloudFormation/Pulumi templates propagate to all deployed environments.

Common IaC security issues:

  • Encryption disabled on storage/databases
  • Public-facing databases without VPC restriction
  • Logging and monitoring disabled
  • Overly permissive IAM and security groups
  • SSH access open to all IPs

Remediation

Use security linting tools (tfsec, checkov, cfn-nag, KICS) in CI/CD pipelines to catch IaC misconfigurations before deployment.

zakirkun/ice-tea/tree/main/skills/cloud/iac-security commit a551ec114c

Frequently asked questions

npx skillmds@latest add zakirkun/infrastructure-as-code-security-issues