Advanced Recommendations for Security in Infrastructure as Code (IaC)
Reinforced practices for contexts of greater maturity or regulatory requirements in IaC projects.
Reinforced practices for contexts of greater maturity or regulatory requirements in IaC projects.
Canonical catalogue of security requirements for IaC projects (IAC-001 to IAC-013), organised by risk level, with acceptance criteria for the governance of repositories, pipelines, state, modules and configuration drift.