II.
SkillArea overview
Reference · liveskill-area:iac-security
IaC Security overview
Security analysis of Infrastructure-as-Code configurations — detecting misconfigurations in Terraform, CloudFormation, and Kubernetes manifests using tools like Checkov, tfsec, KICS, and OPA Conftest.
Attributes
displayName
IaC Security
description
Security analysis of Infrastructure-as-Code configurations — detecting
misconfigurations in Terraform, CloudFormation, and Kubernetes manifests
using tools like Checkov, tfsec, KICS, and OPA Conftest.
domains
expertiseLevels
- intermediate
- expert
Outgoing edges
applies_to1
- domain:cybersecurity·DomainCybersecurity
Incoming edges
prerequisite_for_learning1
- skill-area:application-security·SkillAreaApplication Security
requires_skill_area2
- stack-profile:terraform-landing-zone·StackProfileTerraform Landing Zone (Terraform, HCL, Vault, Go, OPA)
- stack-profile:secrets-management·StackProfileSecrets Management (Vault, Kubernetes, Terraform, Docker, Go)
tool_used_by2
- tool:checkov·ToolCheckov
- tool:tfsec·Tooltfsec