Infrastructure as Code

Most modern software systems are using Infrastructure as Code (IaC) tools. Using IaC tools, DevOps can describe their infrastructure in a declarative and structured way, enabling easy and consistent provisioning and deployments.
Keeping your infrastructure described through code enables you to easily consume it - review, fix and track changes. Mistakes can still be made using IaC, but at least it's easier for automatic tools to find them, which is where we come in.

Spectral IaC scans your IaC files and notifies about misconfigurations that expose your infrastructure in any way. We support a variety of platforms - AWS, Google, Azure, Kubernetes and more. For each misconfiguration we provide details such as the resource being misconfigured and remediation advice.
To run Spectral IaC:

spectral scan --engines iac