So Terrascan is a pretty versatile tool. Just to go over a few
of the capabilities covered in this course, it does IaC, or
infrastructure as code, scanning.
We showed Terraform here,
but it also has the ability to do AWS CloudFormation and a few others.
Check the documentation page for more information there.
We also showed some CI/CD integration. There are a few of these you
can set up, and we went through each of those in a little bit of
detail. And finally, there's rule skipping.
So if you don't want something to apply to your resource,
you can set Terrascan to skip that rule, but you should definitely provide a
justification so that it's more transparent in a code review.
Some more information about Terrascan, you can go and check out the
Terrascan home page at runterrascan.io. We walked through this a little
bit in the demo. There's also the Terrascan GitHub page here at
accurics/terrascan. And then finally, there's the demo GitHub page for
the code used in this module, so that's under
github.com/devbyaccident/terrascan‑demo.
So that about wraps it up for this course.
There's one more section where I'll actually go through an end‑to‑end
DevSecOps pipeline that takes that repository, deploys it using a GitHub
action, and then scans any changes made to that with Terrascan to make sure
that the infrastructure I'm deploying is free from those misconfigurations.
And if that's something you're interested in,
please stick around. If not,
thank you for watching, and I hope to see you next time.