You're reading from Terraform Cookbook Master Infrastructure as Code efficiency with real-world Azure automation using Terraform

Product type Paperback

Published in Aug 2023

Publisher Packt

ISBN-13 9781804616420

Length 634 pages

Edition 2nd Edition

Tools

Azure

Concepts

DevOps

Author (1):

Mikael Krief

View More author details

Table of Contents (20) Chapters

Preface

1. Setting Up the Terraform Environment

2. Writing Terraform Configurations FREE CHAPTER

3. Scaling Your Infrastructure with Terraform

4. Using Terraform with External Data

5. Managing Terraform State

6. Applying a Basic Terraform Workflow

7. Sharing Terraform Configuration with Modules

8. Provisioning Azure Infrastructure with Terraform

9. Getting Starting to Provisioning AWS and GCP Infrastructure Using Terraform

10. Using Terraform for Docker and Kubernetes Deployment

11. Running Test and Compliance Security on Terraform Configuration

12. Deep-Diving into Terraform

13. Automating Terraform Execution in a CI/CD Pipeline

14. Using Terraform Cloud to Improve Team Collaboration

15. Troubleshooting Terraform Errors

16. Other Books You May Enjoy

17. Index

Appendix A: Terraform Cheat Sheet

1. Appendix B: Terraform Resources

Using tfsec to analyze the compliance of Terraform configuration

In the previous recipe, we learned how to use a custom tool to perform an HCL check on the Terraform configuration without running terraform plan and exporting the output of the plan command.

In this recipe, we will learn how to use the popular tool tfsec to analyze the compliance of the Terraform configuration.

tfsec (its documentation is available here: https://aquasecurity.github.io/tfsec/v1.28.1/) is an open source static analysis tool for Terraform code. It is designed to detect security issues, policy violations, and other potential problems in Terraform code, and provides a set of rules that can be used to scan code for these issues.

tfsec works by analyzing the Abstract Syntax Tree (AST) of Terraform code. This allows it to identify security issues and policy violations based on the structure of the code, without executing the code or connecting to any external services.

Some of the benefits of...