Practice Hub / Tools / Infrastructure as Code Review

Bringing the CI and audit roles under Terraform

Review a Terraform pull request that imports prod's CI deploy role, the cross-account audit role and the prod-data key: find the trust and permission changes that widen who can act in prod.

Included with any paid plan

Open this scenario with any paid plan

Review a Terraform, Bicep or CloudFormation pull request like a security reviewer: comment on the lines that add risk, suggest the fix, tell safe changes from risky ones, and decide whether it merges.

Your work saves to your account as you go, and downloads as files you keep.

From the course

Every course opens with a free module you can read in full, no account needed.