cyber.hendryadrian.com
Security News · wiz.io

Wiz Adds IaC Inventory and Pulumi Scanning for Code-to-Cloud Security

· Original article ↗

Summary

Wiz introduced IaC Inventory to connect infrastructure modules, deployments, and live cloud resources, and added Pulumi scanning across AWS, GCP, and Azure to identify misconfigurations before deployment.

Key points

  • IaC Inventory uses state files to map infrastructure modules to deployments and live cloud resources.
  • Teams can trace cloud findings to the defining module, file, code line, and author.
  • The inventory highlights module origins, unused modules, outdated deployments, and drift between declared and live resource states.
  • Wiz added native Pulumi scanning through Wiz CLI for AWS, GCP, and Azure.
  • Wiz says its policy engine can identify misconfigurations during development and support targeted remediation.

Article Details

Event Type
Product feature announcement
Impact
Wiz announced IaC Inventory, which connects infrastructure-as-code modules to deployments and live cloud resources to help teams trace misconfigurations, assess their blast radius, identify drift, and remediate issues. The announcement also adds native Pulumi scanning through Wiz CLI across AWS, GCP, and Azure.

Vendors

Pulumiconnecting every module to every deployment it created and every live resource it manages. And with new Pulumi support, Wiz extends IaC scanning to developer-first languages putting infrastructure authorship in theWizToday, Wiz addresses both sides of that problem. Our new IaC Inventory gives security and platform teams a unified view of how code becomes cloud, connecting every module to every deployment it created and every live

Products

AWSto developer-first languages putting infrastructure authorship in the hands of application teams across AWS, GCP, and Azure. meeting application teams where they already work across AWS, GCP, and Azure.Azurelanguages putting infrastructure authorship in the hands of application teams across AWS, GCP, and Azure. meeting application teams where they already work across AWS, GCP, and Azure.BicepWiz already secures IaC across several frameworks such as Terraform, CloudFormation, and Bicep. Today, that coverage expands to include Pulumi. CloudFormationWiz already secures IaC across several frameworks such as Terraform, CloudFormation, and Bicep. Today, that coverage expands to include Pulumi. GCPdeveloper-first languages putting infrastructure authorship in the hands of application teams across AWS, GCP, and Azure. meeting application teams where they already work across AWS, GCP, and Azure.Green Agentcan make informed architectural changes, reducing risk while preserving intended functionality. Our Green Agent orchestrates fixes by understanding the context of the code, cloud, and runtime environment. DevelopersIaC InventoryToday, Wiz addresses both sides of that problem. Our new IaC Inventory gives security and platform teams a unified view of how code becomes cloud, connecting every module to every deployment it created and every liveTerraformWiz already secures IaC across several frameworks such as Terraform, CloudFormation, and Bicep. Today, that coverage expands to include Pulumi. Wiz CLIWith Wiz CLI support for native Pulumi scanning across AWS, GCP, and Azure, misconfigurations are caught before they ever reach production. Whether that is a developer inadvertently leaving public access enabled on aWiz CodeWiz connects these worlds. With Wiz Code, policies are enforced directly in development using a unified policy engine. Teams can use Wiz's built-in best practice rules, for example "Bedrock Agent should be associated

Related Articles