Qualys Infrastructure as Code (IaC) Security Beta

Shift Cloud Security Left

Qualys' new IaC Security capabilities can now detect non-standard deployments to IaC templates. IaC scanning/security assessment analyzes Terraform, AWS CloudFormation, Azure Resource Manager (ARM) templates, and identifies misconfigurations before resources are deployed in the cloud.

IaC scanning will analyze the configuration of each resource and will identify the misconfigurations such as:

• Security Group Allowing Unrestricted Traffic on Management Ports 22/3389
• RDS Accessible to the Public

You can now incorporate cloud security directly into your development workflows and tools.