 |
Here are some tools that can be used to implement in your cloud in order to be able to detect misconfiguration
Checkov: Tool for analyzing static codes for Infrastructure as code (IaC). To detect cloud misconfigurations, it scans your cloud infrastructure, Checkkov is Python-based, so writing and managing codes, and version-control become simpler.
Terrafirma: Tool for static code analysis used for Terraform plans. It is designed to detect security misconfigurations. Terrafirma provides output in tfjson instead of JSON.
CloudSploit: CloudSploit is an open source project. It can scan the cloud within seconds to detect any misconfiguration. It has the capability to scan more than 95 security vulnerabilities across 40+ resource types consisting of a wide range of AWS products. It can detect risks efficiently and implement security features before launching your cloud infrastructure.
|
IEEE/ICACT20210224 Slide.11
[Big Slide]
[YouTube]