Securely Deploying Infrastructure as Code

Explore secure deployment practices for Infrastructure as Code in this comprehensive NDC Security 2023 conference talk by Chris Ayers. Discover how to protect your infrastructure by scanning Terraform modules for misconfigurations and secrets, especially when using automated pipelines like GitHub Actions. Learn to leverage open-source tools such as tfsec, terrascan, and checkov for identifying security and configuration issues. Gain insights into securely configuring Terraform backends, including AzureRM, and best practices for passing variables and input into Terraform. Master the art of securely deploying Terraform to cloud platforms like Azure. By the end of this one-hour session, acquire the necessary tools and examples to confidently implement secure Terraform deployments in cloud environments.