WEBVTT

00:00:02.940 --> 00:00:06.750
So Terrascan is a pretty versatile tool. Just to go over a few

00:00:06.750 --> 00:00:10.630
of the capabilities covered in this course, it does IaC, or

00:00:10.630 --> 00:00:12.320
infrastructure as code, scanning.

00:00:12.600 --> 00:00:13.820
We showed Terraform here,

00:00:13.820 --> 00:00:17.720
but it also has the ability to do AWS CloudFormation and a few others.

00:00:17.720 --> 00:00:20.660
Check the documentation page for more information there.

00:00:21.040 --> 00:00:24.630
We also showed some CI/CD integration. There are a few of these you

00:00:24.630 --> 00:00:27.970
can set up, and we went through each of those in a little bit of

00:00:27.970 --> 00:00:30.900
detail. And finally, there's rule skipping.

00:00:30.910 --> 00:00:33.770
So if you don't want something to apply to your resource,

00:00:33.770 --> 00:00:38.910
you can set Terrascan to skip that rule, but you should definitely provide a

00:00:38.910 --> 00:00:42.500
justification so that it's more transparent in a code review.

00:00:42.960 --> 00:00:46.080
Some more information about Terrascan, you can go and check out the

00:00:46.080 --> 00:00:50.660
Terrascan home page at runterrascan.io. We walked through this a little

00:00:50.660 --> 00:00:55.500
bit in the demo. There's also the Terrascan GitHub page here at

00:00:55.510 --> 00:01:00.660
accurics/terrascan. And then finally, there's the demo GitHub page for

00:01:00.660 --> 00:01:04.550
the code used in this module, so that's under

00:01:04.560 --> 00:01:08.560
github.com/devbyaccident/terrascan‑demo.

00:01:08.730 --> 00:01:11.070
So that about wraps it up for this course.

00:01:11.270 --> 00:01:14.650
There's one more section where I'll actually go through an end‑to‑end

00:01:14.730 --> 00:01:20.420
DevSecOps pipeline that takes that repository, deploys it using a GitHub

00:01:20.420 --> 00:01:24.880
action, and then scans any changes made to that with Terrascan to make sure

00:01:24.880 --> 00:01:29.050
that the infrastructure I'm deploying is free from those misconfigurations.

00:01:29.050 --> 00:01:31.050
And if that's something you're interested in,

00:01:31.050 --> 00:01:32.520
please stick around. If not,

00:01:32.520 --> 00:01:34.710
thank you for watching, and I hope to see you next time.