Cloud DevSecOps Workshop with Terraform Cloud, Prisma Cloud by Palo Alto Networks, and AWS
From scanning infrastructure as code (IaC) for security misconfigurations to implementing automated DevSecOps workflows, this two-hour workshop will provide hands-on experience to automate your cloud security.
We’ll use this workshop documentation as a guide to walk through. The workshop will cover:
Part I - Hands-on: Code scanning with Checkov
- Overview of DevSecOps and Terraform infrastructure as code
- Getting started with Checkov to detect Terraform misconfigurations
- Setting up a secure CI/CD pipeline with GitHub and Terraform Cloud
Part II - Demo: Application security with Prisma Cloud
- Automated code fixes in IDE and VCS
- Configuring Terraform Cloud run task integration with Prisma Cloud
- Detecting drift between Terraform definitions and AWS resource configurations
Details
-
To get the most out of this tutorial, please come prepared with the following prerequisites
-
It will also be helpful to have a basic understanding of Git, AWS core concepts (IAM, regions, UI, CLI, APIs), and CI/CD principles
-
The workshop will use AWS Event Engine and Cloud9 IDE, which attendees will get AWS credits to apply to their AWS account to cover the cost of the AWS Dev Day resources
Can't make this workshop? See all of our available recurring sessions for the year here.
Speaker Details
Prakash Manglanathan
Senior Solutions Engineer, HashiCorp
Tom Prenderville
Senior Partner Engineer , Palo Alto Networks
Angelo Malatacca
Partner Solutions Architect, AWS
Event Topic
Cloud Computing, DevOps/DevSecOps, ITRelevant Audiences
All State and Local Government, All Federal GovernmentOther Agency
Other Federal Agencies