An organization is migrating workloads to a public cloud. The security team wants to ensure that infrastructure changes are reviewed for security misconfigurations before they reach production. Which approach integrates security checks directly into the CI/CD pipeline?

Question

Accepted Answer

B. Integrate infrastructure-as-code (IaC) security scanning into the CI/CD pipeline. Integrating IaC security scanning (such as static analysis of Terraform or Ansible templates) into the CI/CD pipeline allows misconfigurations to be detected and rejected before infrastructure is provisioned in production. The CAS-005 V5 objectives list CI/CD pipeline security, Terraform, and Ansible under cloud capabilities in Security Architecture.

An organization is migrating workloads to a public cloud. The security team wants to ensure that infrastructure changes are reviewed for security misconfigurations before they reach production. Which approach integrates security checks directly into the CI/CD pipeline?

Related Questions

Discussion