Terraform on Mazin Ahmed

Scan Terraform plans and changes with tfquery, an SQL-powered framework

Thu, 27 Oct 2022 00:00:00 +0000

New Release: tfquery now supports SQL queries for Terraform Plan Scanning

In case you’re an infrastructure security engineer and have not tried tfquery yet, this will be a great blog post for you.

Tfquery is a framework that allows running SQL queries on Terraform code. It’s made to analyze your Terraform infrastructure, locate resources, run security compliance checks, spot misconfigured resources, develop CI benchmarks, and much more.

Attacking Modern Environments Series: Attack Vectors on Terraform Environments

Sat, 29 Jan 2022 00:00:00 +0000

I have given a talk about my latest research, “Attack Vectors on Terraform Environments”.

About the talk #

Have you ever encountered an environment in an engagement that uses Terraform for IaC (infrastructure-as-code) management? Almost every modern company does now.

In this talk, I will share techniques and attack vectors to exploit and compromise Terraform environments in engagements, along with patterns I have seen that achieve successful infrastructure takeover against companies. I will also cover detection and prevention methods for each attack vector discussed in my talk.

Interview With the AppSec Podcast: Terraform Security

Sun, 17 Oct 2021 00:00:00 +0000

I interviewed with the AppSec Podcast to talk about IaC and Terraform. We discussed Terraform, why IaC is important to your organization, the technical risks introduced when running Terraform in your environment, and a few discussions related to my DEFCON talk about Attack Vectors on Terraform Environments.

Listen to the Podcast #

Watch on YouTube #

Listen on Spotify #

Listen on Apple Podcast #

tfquery: Run SQL queries on your Terraform infrastructure

Wed, 28 Apr 2021 00:00:00 +0000

Have you ever tried analyzing a Terraform environment with thousands of cloud resources for security and DevOps? It used to be hard, until now!

I’m open-sourcing my newest project, tfquery: a framework that allows running SQL queries on Terraform code. It saved me dozens of hours in analysis.

tfquery helps answer questions that are hard to answer about your infrastructure-as-code. It allows querying resources and analyzing their configuration using a SQL-powered framework.