Cloud DevSecOps for Terraform and AWS

From scanning infrastructure as code (IaC) for security misconfigurations to implementing automated DevSecOps workflows, this workshop will provide a hands-on experience to automate your cloud security.

We’ll use our AWS Modernization Workshop as a guide to walk through:

• An overview of DevSecOps and Terraform infrastructure as code (IaC)
• Getting started with Bridgecrew to scan for Terraform misconfigurations
• Setting up CI/CD with GitHub and Terraform Cloud to automate security scanning and policy enforcement
• Detecting drift between running AWS resources and Terraform configuration

Know before you go:

To get the most out of this tutorial, please come prepared with the following prerequisites. It will also be helpful to have a basic understanding of git, AWS core concepts (IAM, regions, UI, CLI, APIs), and CI/CD principles. The workshop will utilize AWS Event Engine and Cloud9 IDE, which attendees will get AWS credits to apply to their AWS account to cover the cost of the dev day AWS resources.

This workshop is run in partnership with: