The security scans are conducted on cloud resources after deployment in the current continuous integration and continuous deployment (CICD) environment. As a result, you secure your cloud resources post-deployment to respective Cloud accounts.
With an introduction of the Infrastructure as Code (IaC) security feature by Qualys TotalCloud, you can now secure your IaC templates before the cloud resources are deployed in your cloud environments. The IaC Security feature helps you shift cloud security and compliance posture to the left, allowing evaluation of cloud resources for misconfigurations much earlier during the development phase.
TotalCloud offers an integration with Bitbucket to secure Git repositories using a pipeline script that can be used to scan your IaC templates from Bitbucket repositories. It continuously verifies security misconfigurations against TotalCloud security controls and displays the failed checks for each run. You have continuous visibility of the security posture of your IaC Templates at Bitbucket Pipeline and plan for remediation. Follow this guide for more details.
For supported templates, other integrations, and features of Cloud IaC Security, refer to TotalCloud Online Help and TotalCloud API User Guide.
The Bitbucket integration allows you to perform IaC scans on the pull and push requests at the Bitbucket repositories. We provide you with a pipeline script and options that can be configured to run based on various triggers.
You can perform IaC scan on either of the following:
The results are generated within Bitbucket pipeline output that provides you with proactive visibility into the security of your IaC templates residing in Bitbucket repositories.
Next step: