Module 10: Prowler in CI/CD
Track 2 · Prowler Open Source CLI · Time: ~55 min · Pass: 8/10
Scenario
Cloudsmiths wants two CI gates: (a) every pull request that changes Terraform must be scanned by Prowler IaC and fail on critical/high; (b) every nightly job scans the AWS sandbox account and posts a digest to Slack. You'll wire both with GitHub Actions, with a GitLab variant for the data team.
Learning objectives
- Configure Prowler in a CI pipeline using
actions/checkout, OIDC auth to AWS, and Docker. - Fail builds on severity thresholds.
- Publish artifacts (HTML/CSV/OCSF) for human review and downstream tooling.
- Send a Slack digest on schedule.
Register to read the full module
The syllabus and each module overview are public. Create a free account to unlock the full lessons, labs, knowledge checks and the final exam, and to track your progress.