Glossary: Vulnerability, Asset and Change Management
checkov
Also written: #checkov:skip, CKV_AWS_21
A free tool that checks infrastructure-as-code files, such as Terraform, against over a thousand security rules. Alex uses it to find the backup bucket's missing public-access blocks and versioning.
Where the book teaches it
Related terms
Infrastructure as codeTerraformCSPM (cloud security posture management)