What are the Key Features of Terrascan?
Numerous features of Terrascan can be used to your advantage. Key features are mentioned below:
1. Integration Support
One of Terrascan’s greatest features is its ability to integrate with any type of IaC framework and comply with its policies. These frameworks are:
- ArgoCD
- Atlantis
- GitHub
- Kubernetes
The ability to test IaC with different types enables freedom of using the framework of your choice.
2. Cross-cloud Policy Support
Terrascan provides support for different Cloud infrastructure policies enabling infrastructures spanning cross-platform. There is no need to use different software to check the policies of different cloud service providers. Terrascan provides support to the following Cloud service policies:
- AWS (Amazon Web Services)
- Microsoft Azure
- GCP (Google Cloud Provider)
- GitHub
- Docker
- Kubernetes
3. Scanning Automation
Instead of manually checking policy compliance in your IaC, you can integrate Terrascan into your preferred CI (Continuous Integration)/ CD (Continuous Deployment) pipeline. This automates the scanning of Infrastructure code in various formats without any prompts.
4. Monitoring 24/7
With Terraform being an open-source software, you can build your own instance locally which can run 24/7. This means, your infrastructure in the cloud will be monitored at all times and its logs, and vulnerabilities will be noted by Terrascan and provide you with the report.
5. Detailed Reporting
One of Terrascan’s most useful features is to explain the problem in your IaC in Layman’s terms. It will provide detailed reports about the policy violations, the severity of them, and how it will affect your code. Not only that, it also provides tips on how to mitigate this problem and provides any possible solutions.
Now that you know how useful Terrascan is, how do you use it, how do you install it? There are well-established ways for the different OS used out there.
What is Terrascan? Features, Installation and Use Cases
Terrascan is a popular software used to detect any possible vulnerabilities in IaC (Infrastructure as Code) structures. With its predefined built-in policies, Terrascan can detect any vulnerabilities in your code and let you know about the policy violations in detail, including their severity. The violations can range from minor infractions to severe structural compromises detected in the code. Before we go into detail, let’s see more about Terrascan.