iac.terraformTerraform configuration
Flags public S3/GCS/Azure storage, open security groups, unencrypted storage, public databases, wildcard IAM, hardcoded credentials, disabled logging and committed state files.
- Engine
- Built-in
- Targets
- Infrastructure as code
- Areas
- Security
- Runs
- By default, when the target applies
- Network
- Only the target itself
Run only this auditor
bunx openaudit . --only iac.terraformBuilt into openaudit; nothing to install.