Streamlining Compliance: Leveraging Open-Source Terraform AWS modules
summary
Claims a concrete shortcut: swap Terraform registry URLs to a curated compliance TF registry and many compliance checks stop failing because modules already include remediations. Demonstrates Terraform + terraform-aws-modules + Checkov running against code, shows an example change that removes a CPVA-174 failure, and reports half a billion provisions for the modules ecosystem. Promises a Q1 release, mentions Security Hub, pre-commit tooling and cloud query integrations, and shows the demo working end-to-end: download, scan, fixed.
AI-written summary · about
chapters (6)
- 0:00Intro. Agenda
- 5:40Compliance
- 13:06Compliance Process
- 16:07How to implement required controls?
- 17:43Demo Time
- 25:31Q&A
related talks
45mStreamlining Compliance: Leveraging OS Terraform AWS modules
50mFrom Code to Compliance: Enforcing Azure Security with Terraform and...
35mReplace Terraform Module Forks with Automatic Policy Transformation Rules
44mHashiConf Europe 2022 Day 1 Keynote
01h 00mGotchas using Terraform in a secure delivery pipeline
54mCompliance-As-Code For API Security
42mHands-on with the Terraform Module for AWS Landing Zone
31mCommodified IaC using Terraform Cloud