Secure Terraform on Azure with security tooling, custom rules, and checks integrated into local development and CI/CD. This talk includes practical demos of tfsec, Terrascan, Checkov, Terraform state, and OIDC authentication.
View HTML slides | Download PDF
The HTML slides retain the animated tfsec demo; the PDF and printed slides use a representative scan-results frame.
- Slide source
- Demos and Terraform examples
- Custom check examples, tfsec Rego policies, and Terrascan Rego policies
- Terraform Documentation
- Terraform on Azure
- tfsec
- terrascan
- checkov
- Secure Terraform Part 1: Introduction to tfsec
- Secure Terraform Part 2: tfsec Customization
- Secure Terraform Part 3: Introduction to Terrascan
- Secure Terraform Part 4: Introduction to Checkov
- Secure Terraform Part 5: Terraform State
Chris Ayers, Principal Software Engineer
Azure EngOps AzRel, Microsoft
Blog | GitHub | LinkedIn | Bluesky | Mastodon | Twitter
This project is licensed under the MIT License. See the LICENSE file for more information.