Streamlining Compliance: Leveraging Open-Source Terraform AWS modules
summary
Open-source Terraform AWS modules deliver hardcoded secure defaults so common compliance misconfigurations disappear from user parameters, demonstrated by replacing a CloudFront TLS setting and seeing AWS Config report the resource compliant. Tooling used includes checkov, tfsec, Prowler and AWS Config with conformance packs; modules mirror on registry.compliance.tf. The current library targets most AWS services, claims to auto-fix about 80% of checks, leaves ~20% requiring extra input, and the demo provisioning succeeds and shows the compliance score rising.
AI-written summary · about
chapters (7)
- 0:00Introduction and background
- 3:39What is compliance
- 9:19Compliance process workflow
- 14:41Challenges in compliance implementation
- 20:06Demo: Terraform compliance modules
- 23:59Introducing compliance TF project
- 30:23Q&A session
related talks
28mStreamlining Compliance: Leveraging Open-Source Terraform AWS modules
54mCompliance-As-Code For API Security
14mIdentifying Misconfigurations in your Terraform
26mAutomating FedRAMP Security Compliance with Terraform
29mShifting Terraform Configuration Security Left
37mStatic Code Analysis of Terraform based Infrastructure as Code IaC scripts
42mHands-on with the Terraform Module for AWS Landing Zone
33mCompliance as Code - Lessons Learned From Regulated Organizations