Module 19: IaC Security Scanning
Track 4 · Advanced features · Time: ~1h · Pass: 8/10
Scenario
Cloudsmiths just hired three platform engineers. They write a lot of Terraform. Things keep slipping into prod because reviews catch only some misconfigurations. You're going to deploy Prowler's iac provider in two places: a pre-commit hook on engineers' laptops, and a PR gate in CI. Same checks, both sides of the deploy line.
Learning objectives
- Run Prowler IaC on Terraform (including plan files), CloudFormation, Kubernetes manifests, Dockerfile, Helm, Azure ARM templates, and Ansible.
- Use Prowler IaC inside CI/CD (referencing Module 10 patterns).
- Map IaC findings to the same controls runtime findings produce.
- Build a small pre-commit hook.
Register to read the full module
The syllabus and each module overview are public. Create a free account to unlock the full lessons, labs, knowledge checks and the final exam, and to track your progress.