This repository contains several sample IaC modules representing several technologies (Terraform, CloudFormation, and CDK) used to convey IaC security scanning principles leveraging Lacework's Soluble tool.
Contains an example Terraform configuration that deploys a cluster of web servers
(using EC2 and Auto Scaling) and a load balancer
(using ELB) in an Amazon Web Services (AWS)
account. The load balancer listens on port 80 and returns the text "Hello, World" for the
/
URL.
There are several policy violations from low to critical, including lack of best practices, etc. Lacework's Soluble captures these in the compliance evaluations and in some cases provides one-click remediation.