Infrastructure Security Scan

Infrastructure Security Scan is a security scanner for your Terraform code. It performs static analysis of your code and detects potential misconfigurations that could lead to security risks. It supports multiple cloud providers, such as AWS, Azure, and GCP, and has a number of built-in rules.

Usage of Infrastructure Security Scan in Delivery Shield

• SSD now supports Infrastructure Security Scan to scan and manage infrastructure and deployments using Terraform scripts, enhancing security compliance in Infrastructure as Code (IaC).

To Manage Infrastructure Security Scan:

1. Navigate to Setup > Integrations.

2. In the Others panel, click Infrastructure Security Scan.

3. The Infrastructure Security Scan integration page is displayed. Click +New Account.

4. In the popup that appears, enter the following details:

5. Enter the Account Name, Repo URL, Repo Token, Script Absolute Path.

6. Click Save. The tool is connected.

7. You can edit the entered values by clicking the Edit option in the **Actions **column.

8. Re-enter the values and click Update.

The new values gets updated.