Welcome to Pluralsight and the Risk Management Strategy with
Terrascan course. Terrascan can is an open‑source tool developed
and maintained by Accurics software.
DevSecOps pipelines are set up to scan for code
vulnerabilities alongside unit and integration tests.
If you have your application's infrastructure
defined using a tool like Terraform,
you can use the same principles for your infrastructure code as well.
Terrascan is one tool that scans for infrastructure misconfigurations and
vulnerabilities in Terraform, as well as other Infrastructure as Code solutions
like AWS CloudFormation, Kubernetes manifests, and Dockerfiles. Terrascan can
can help you achieve better coverage in the NIST Cybersecurity Framework in the
Identify Function, specifically with risk assessment, as well as the Protect
Function with access control.
I hope you'll join me on this journey to learn more about Terrascan with the
Risk Management Strategy with Terrascan course, at Pluralsight.