Definition
Infrastructure as code describes cloud resources in versioned files. Analysing them on every change blocks a misconfiguration before deployment, when fixing it costs the least.
Glossary
Infrastructure as code scanning
Finding a public bucket in Terraform code before it exists in the cloud, and knowing when what is deployed no longer matches the code.
In Ctadel
GitHub and GitLab repositories are analysed on every push and pull request: Terraform for the six clouds, Kubernetes manifests, Dockerfiles. A comment and a status are posted on the GitHub pull request. For paired rules, Ctadel reports drift between the code and what runs, and connects a cloud finding to its Terraform line.
See it on your accounts
The online demonstration is open to all, on fictitious data. For an instance on your own accounts, request a demonstration.