Streamlining Compliance: Leveraging Open-Source Terraform AWS modules
summary
Open-source Terraform AWS modules (downloaded more than 200 million times) are forked and patched in a compliance registry that produces drop-in replacements so pipelines and repos don’t need manual fixes. Demo shows running checkov against a CloudFront module, changing nothing in calling code, and moving from a failing viewer-certificate warning to passing 39 checks. Registry enforces safe defaults (no public S3), is backward-compatible, and can be proxied into private registries.
AI-written summary · about
chapters (5)
- 0:00Introduction and background
- 3:55What is compliance
- 7:50Compliance frameworks overview
- 12:29Demo of compliance TF
- 19:16Q&A session
related talks
31mStreamlining Compliance: Leveraging Open-Source Terraform AWS modules
29mCompliance At Scale: Hardened Terraform Modules at Morgan Stanley
33mCompliance as Code - Lessons Learned From Regulated Organizations
01h 00mGotchas using Terraform in a secure delivery pipeline
05mUsing Terraform Safely
47mHow to build scale & maintain 45 pub Terraform mod. with over 100 million provisions
32mGotchas Using Terraform in a Secure Delivery Pipeline
05mCompliance in the Driver’s Seat Is Your Cloud Car Stuck in the Carpark