01 - Introduction to IaC Security & Threat Landscape
Understand the foundational security concepts, threat landscape, root causes of misconfigurations, and Security as Code (SaC) principles in Infrastructure as Code.
02 - Terraform Hardening & State Security Masterclass
Master Terraform security: state file encryption, remote backend hardening, secrets elimination, OIDC provider authentication, and supply chain protection.
03 - CloudFormation and Bicep Hardening Masterclass
Master security hardening for AWS CloudFormation and Azure Bicep: dynamic secret references, NoEcho parameter protection, Stack policies, @secure decorators, Key Vault integration, and Managed Identities.
04 - IaC SAST and Policy as Code Masterclass
Master Static Analysis (Checkov, tfsec, Terrascan) and Policy as Code (OPA/Rego, custom Checkov Python rules) integrated into CI/CD security pipelines.
05 - Drift Detection and Continuous Compliance Masterclass
Master infrastructure drift detection using terraform plan, driftctl, and AWS Config. Learn automated event-driven remediation architectures and CSPM integration.
06 - Hands-On Lab: IaC Vulnerability Audit, Exploitation & Remediation
Self-contained hands-on security lab featuring vulnerable Terraform manifests, automated Checkov SAST scanning, adversary credential harvesting exploit simulation, and production-grade secure remediation.
07 - References, Standards and Tooling Index
Comprehensive catalog of industry security standards, NIST controls, CIS benchmarks, OWASP cheatsheets, open-source security tools, and Cloud provider security documentation.
Infrastructure as Code (IaC) Security Masterclass
Master Infrastructure as Code (IaC) security across Terraform, CloudFormation, Bicep, state files, Policy as Code (OPA/Rego, Checkov, tfsec), and automated drift detection.