Infrastructure as Remote Code Execution: How to Abuse Terraform

Explore the potential security risks associated with Terraform, a popular infrastructure-as-code tool, in this 36-minute conference talk from HackMiami XI. Discover how malicious actors can exploit Terraform to elevate privileges, exfiltrate sensitive data, and gain unauthorized access to cloud environments. Watch live demonstrations of real-world attack scenarios and learn practical recommendations for securing Terraform implementations. Presented by Michael McCabe, president of Cloud Security Partners and experienced speaker at security conferences, this talk offers valuable insights for professionals involved in cloud security and infrastructure management.