DevSecOps · hands-on lab
DevSecOps Lab 05: Infrastructure-as-Code Security with tfsec
Scan Terraform with tfsec and fix the high-severity findings — SSH open to the world and an unencrypted bucket.
- 35 minutesTime in the lab
- intermediateLevel
- 2 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Scenario. A Terraform change opens SSH to 0.0.0.0/0 and creates an unencrypted S3 bucket. You catch it with tfsec before it reaches cloud, and fix the high-severity issues.
What you will do
- Scan the Terraform
- Fix the high-severity issues
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.