AWS On Air ft. Checkmarx
summary
Checkmarx explains KICS (Keeping Infrastructure as Code Secure) as an open source CLI that scans IaC templates and flags real misconfigurations — e.g., exposed port 22, HTTP instead of TLS — across Terraform, CloudFormation, ARM, Docker, Helm charts and more. It runs locally or in CI/CD, integrates into pipelines to break builds on findings, and publishes its rules and queries at kics.io so teams can automate IaC security checks early and often.
AI-written summary · about
chapters (9)
- 0:00Intro
- 0:30Welcome
- 1:05What is Checkmarx
- 2:07Cloud Native Development
- 4:45Problems and Risks
- 6:05How to mitigate
- 6:55Kicks
- 8:05How does it work
- 10:25Outro
related talks
05mAvoiding IaC misconfiguration (on multiple platforms)
37mSoftware Supply Chain Aspects in Infrastructure as Code
44mDeep Dive: Infrastructure as Code on AWS
18mInfrastructure as Code Security Best Practices & Strats
48mWhy checking your infrastructure-as-code for misconfigurations is not enough – How ...
37mStatic Code Analysis of Terraform based Infrastructure as Code IaC scripts
36mInfrastructure as Code Done Right: Discovering and Fixing Common Missteps
38mState of Infrastructure as Code (IaC)