Securing Northwind's Terraform before it is deployed: a main.tf with an unencrypted S3 bucket, SSH open to the internet, a wildcard IAM policy and an unpinned module; a CI gate where Checkov and Conftest fail those findings and block the merge; and the eight-stage IaC pipeline — author, modules, secrets, scan, policy, review, deploy and drift — with eleven hand-written buckets replaced by one vetted module, secrets moved to a vault, a human plan review with a narrow apply role, and drift checked and reconciled.

CY-MID-093Mid Level · IaC Security

Infrastructure as Code Security — The IaC Pipeline

A hands-on mid-level course that ships cloud infrastructure that is secure by default. Work the IaC pipeline - eight stages: Author, Modules, Secrets, Scan, Policy, Review, Deploy, and Drift - writing Terraform that is scanned, policy-gated, and free of hardcoded secrets, so misconfigurations never reach production. Strictly defensive. Four hands-on activities in every lesson.

15 hours8 chapters32 lessons225 activities8 labs

What you'll learn

Write Terraform with secure defaults and safe modules.
Keep secrets out of code and state.
Scan and policy-gate IaC before it deploys.
Deploy safely and detect and fix drift.

Price:৳8,000