IaC Wishlist

Hello all. For those that deal with implementation and auditing of infrastructure code, such as terraform, have you noticed any areas that could use improvement?

I know of static analysis tools like tfsec and checkov, but I'm not sure where or if they fall short. Looking into interesting areas to explore/research and hopefully improve!

Thanks!

analysis auditing checkov code cybersecurity deal hello iac improvement infrastructure research static analysis terraform tools