Cloud DevSecOps Workshop with Terraform Cloud, Prisma Cloud by Palo Alto Networks, and AWS

From scanning infrastructure as code (IaC) for security misconfigurations to implementing automated DevSecOps workflows, this two-hour workshop will provide hands-on experience to automate your cloud security.

We’ll use this workshop documentation as a guide to walk through. The workshop will cover:

Part I - Hands-on: Code scanning with Checkov

Overview of DevSecOps and Terraform infrastructure as code
Getting started with Checkov to detect Terraform misconfigurations
Setting up a secure CI/CD pipeline with GitHub and Terraform Cloud

Part II - Demo: Application security with Prisma Cloud

Automated code fixes in IDE and VCS
Configuring Terraform Cloud run task integration with Prisma Cloud
Detecting drift between Terraform definitions and AWS resource configurations

Details

To get the most out of this tutorial, please come prepared with the following prerequisites
It will also be helpful to have a basic understanding of Git, AWS core concepts (IAM, regions, UI, CLI, APIs), and CI/CD principles
The workshop will use AWS Event Engine and Cloud9 IDE, which attendees will get AWS credits to apply to their AWS account to cover the cost of the AWS Dev Day resources

Can't make this workshop? See all of our available recurring sessions for the year here.