Skip to content

Glossary: Vulnerability, Asset and Change Management

checkov

Also written: #checkov:skip, CKV_AWS_21

A free tool that checks infrastructure-as-code files, such as Terraform, against over a thousand security rules. Alex uses it to find the backup bucket's missing public-access blocks and versioning.

Where the book teaches it

Related terms

Infrastructure as codeTerraformCSPM (cloud security posture management)