Static Analysis of Terraform code with Checkov
by Pedro Santos
April 23, 2022

In the previous post about terraform, I make a case for testing your Terraform code with Go and Terratest. For this post, I’ll be making a case for static analysis tools. Static analysis tools for Terraform are a powerful mechanism to help your team follow industry best-practices. Conversely, your organization’s infrastructure team can leverage static analysis tools and custom checks to document and enforce company-wide policies. These tools operate on the Terraform code or in the Terraform plan.