Attacking and Defending Infrastructure with Terraform - How We Got Admin Across Cloud Environments

Explore techniques for attacking and defending Terraform Enterprise and Terraform Cloud in this 43-minute conference talk from Security BSides San Francisco. Learn how to exfiltrate secrets and deploy malicious applications and infrastructure into production cloud environments undetected. Discover the mitigation strategies developed in collaboration with HashiCorp to protect against these vulnerabilities. Gain valuable insights into cloud security and infrastructure management from speakers Mike Ruth and Francisco Oca as they demonstrate both offensive and defensive approaches to Terraform-based environments.