Applying Checkov SAST to Detect Security Issues in Terraform Infrastructure as Code

Introduction Security issues in cloud infrastructure often start as small configuration mistakes. A public network rule, a missing encryption setting, or an overly permissive policy can create serious risk when infrastructure is deployed. This demo project shows how to use Checkov as a Static Application Security Testing tool for Terraform Infrastructure as Code. The goal is academic and practical: detect insecure Terraform configuration before deploying anything to the cloud. Infrastructure as Code, or IaC, is the practice of defining infrastructure using code.