Infrastructure as Code (IaC) Security automatically analyzes your Terraform files for security misconfigurations. Findings appear in the Code Security Vulnerabilities tab, where you can group, filter, and triage them by severity, status, and other attributes. For each finding, Datadog provides detailed remediation guidance and a code snippet showing the affected resource and file location.

Key capabilities

With IaC Security, you can:

• Scan Terraform files for security misconfigurations
• Surface IaC misconfigurations in the Code Security Vulnerabilities tab
• Group and filter findings by severity, triage status, and other facets
• View detailed remediation guidance and code snippets for each finding
• Track finding status and history for triage and resolution
• Configure scanning exclusions

Getting started

1. Set up IaC Security in your environment
2. Configure scanning exclusions if needed
3. Review and triage findings in the Code Security Vulnerabilities tab

Further reading

Additional helpful documentation, links, and articles:

Set up IaC SecurityDOCUMENTATION Configure IaC Security ExclusionsDOCUMENTATION