This Qualys IaC Security version supports following template files:
- AWS, Azure, and GCP Terraform Templates: The .tf template files - IaC Security scan supports over 100 terraform resource types.
- AWS, Azure, and GCP Terraform Plan: The .json plan files - To scan the plan files, you need to make those files available in JSON format. Refer https://www.terraform.io/docs/internals/json-format.html
- AWS Cloudformation Template: We support the file types:.json, .yaml, .yml, .template
- Compressed Template File Formats: We are supporting following compressed template file format:
.zip
.7z
.tar
.tar.gz
.gz
Users with a non-expired paid/trial version of Cloud Security Assessment (CSA) subscription that has API access enabled. The following users with required permissions can access IaC:
- A user with Manager access
- A sub-user with the TotalCloud API Access