Cloud DevSecOps Workshop with HCP Terraform, Prisma Cloud by Palo Alto Networks, and AWS

From scanning infrastructure as code (IaC) for security misconfigurations to implementing automated DevSecOps workflows, this two-hour workshop will provide hands-on experience to automate your cloud security.

We’ll use this workshop documentation as a guide to walk through. The workshop will cover:

Part I - Hands-on: Code scanning with Checkov

• Overview of DevSecOps and Terraform infrastructure as code
• Getting started with Checkov to detect Terraform misconfigurations
• Setting up a secure CI/CD pipeline with GitHub and HCP Terraform

Part II - Demo: Application security with Prisma Cloud

• Automated code fixes in IDE and VCS
• Configuring Terraform Cloud run task integration with Prisma Cloud
• Detecting drift between Terraform definitions and AWS resource configurations