Securing your AWS Identity Management pipeline with PyTest
summary
A reproducible pipeline validates AWS IAM policies before deployment by building a programmatic spec from scraped AWS docs and running checks against Terraform files. It uses a PyTest plugin plus HCL parsing (PyHCL) to collect Terraform resources, yield per-statement tests, and report file and stanza locations. The system flags overbroad resources (S3 create bucket with "*"), runs in CI, stops bad policies from reaching production, and demonstrates one passing and one failing Terraform example.
AI-written summary · about
chapters (8)
- 0:00Start
- 0:32Securing Your Aws Identity Management Pipeline
- 5:37Requirements
- 6:38Output
- 10:15Report Info
- 15:14External Exceptions
- 15:42Validation
- 17:32Demo
related talks
46mInfrastructure testing - it's a real thing!
22mAutomating the CIS Foundations Benchmark for AWS with Terraform
52mTest Driven Delivery of Infrastructure-As-Code
17mTDD for Infrastructure Code
32mGotchas Using Terraform in a Secure Delivery Pipeline
37mInfraCoding with Terraform: Writing Tests for Infrastructure-as-Code
34mZero trust CI/CD pipeline
36mBuild infrastructure as a code (IaC) using test-later...