All hands-on labs

Free Hands-on labbeginnerblue teamAzure

Scan and secure Azure Terraform with Checkov

Review a proposed CloudOps Terraform change before it reaches Azure. Find and repair security misconfigurations with Checkov, then write custom policies that encode your organization's requirements as repeatable checks.

  • 9 guided tasks

Scenario

We need you to add a review step before any Terraform change reaches Azure. The first step is to scan for common security issues to make sure that we don't accidentally ship something insecure. After that, we need to implement custom policy checks so that we can enforce our own policies. We'll have you implement this today and run it against our repo to catch any issues that need to be fixed before the DevOps team can deploy.

- Your Manager

What you will learn

  • Scan Terraform files for security misconfigurations with Checkov
  • Repair the misconfigurations so the built-in checks pass
  • Apply custom organizational policies
  • Validate that a custom policy catches a reintroduced violation
Hands-on lab

Scan and secure Azure Terraform with Checkov

Free with a Cybr account.