Wiz Adds Terraform Run Tasks to Scan Infrastructure Code Before Deployment

· Original article ↗

Summary

Wiz’s new preview integration scans Terraform configurations for secrets and misconfigurations at the post-plan or pre-apply stage. Workspaces can make failed checks advisory or mandatory, with mandatory failures stopping deployment.

Key points

  • The integration adds Wiz security checks to Terraform Cloud and Terraform Enterprise workflows.
  • It scans Terraform infrastructure-as-code configurations for secrets and misconfigurations after planning or before applying changes.
  • Terraform workspaces can set run-task enforcement to advisory or mandatory; a failed mandatory check stops deployment.
  • Wiz gives a publicly exposed storage bucket as an example of a configuration its task could block before deployment.
  • The feature is available in preview.

Article Details

Event Type
Product integration announcement
Impact
Wiz announced a preview integration with HashiCorp Terraform Cloud and Terraform Enterprise Run Tasks. It scans Terraform Infrastructure as Code configurations for secrets and misconfigurations at post-plan or pre-apply stages, enabling security checks to block deployments when a mandatory run task fails. The article describes a publicly exposed storage bucket as an example of a deployment the integration could prevent.

People

Vendors

Products

Related Articles