infrastructure-as-code
Safeguard articles tagged "infrastructure-as-code" — guides, analysis, and best practices for software supply chain and application security.
30 articles
Comparing Terraform security scanners: Snyk IaC, Checkov, tfsec
Snyk IaC, Checkov, and tfsec take different approaches to Terraform scanning — and one of them stopped getting new checks in 2023. Here's how they actually compare.
How Snyk IaC's Terraform Cloud run tasks gate infrastruct...
How Snyk IaC uses Terraform Cloud's run tasks to scan plan output and block infrastructure changes before apply — the mechanics, enforcement levels, and limits.
How Snyk IaC's custom rule SDK structures resource-attrib...
A technical look at how Snyk IaC's Rego-based SDK normalizes Terraform, CloudFormation, Kubernetes, and ARM into one resource-attribute query model.
How Snyk IaC identifies unencrypted storage resources acr...
Snyk IaC flags unencrypted S3 buckets, Azure Storage, and GCP disks by parsing Terraform and CloudFormation for missing encryption attributes before deployment.
IaC Drift: The Gap Between Declared and Actual Cloud Conf...
IaC drift lets your cloud diverge silently from Terraform state, breaking the compliance guarantees teams assume are still true. Here's how it happens and how to catch it.
IaC Scanning: Catching Cloud Misconfigurations Before Deploy
An IaC scan checks your Terraform, CloudFormation, and Kubernetes files for insecure defaults before they become running infrastructure. Here's how it works and how to wire it into CI.
Terraform Definition: What It Is, in Plain English
A clear Terraform definition for engineers, plus what the tool actually does, how state works, and where the security responsibilities sit.
Infrastructure as Code (IaC) scanning explained
A breakdown of how IaC scanning tools catch cloud misconfigurations before deployment, how Aikido Security's bundled approach compares, and what to look for in 2026.
Snyk and HashiCorp Terraform Cloud partnership
Snyk's HashiCorp Terraform Cloud integration gates IaC risk at plan time — here's what it covers, what it misses, and how reachability closes the gap.
What is Cloud Misconfiguration
Cloud misconfiguration is the top cause of cloud breaches. Learn what it is, why it happens, real-world costs, and how to detect and prevent it.
What is Infrastructure as Code (IaC)
IaC turns infrastructure into versioned code, but one bad Terraform default can replicate a security hole across every environment it touches.
What is IaC Security
IaC security scans Terraform, CloudFormation, and Kubernetes code before deployment—catching misconfigurations before they become breaches.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.