[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_28":-5,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58},"routes/_store+/_readers+/email_author.$slug/route",{"_9":10,"_11":-5},"book",{"_12":13,"_14":15,"_16":17,"_18":19,"_20":21,"_22":23},"currentUser","id","Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6Qm9va1Byb2R1Y3QvODI5ODI","title","Infrastructure as Code for Security Engineers","state","published","contactAuthorMethod","email","aboutText","

Infrastructure is no longer a place you visit. It's text in a repo. A single Terraform file can spin up a hundred servers, open a network to the internet, or hand a service the keys to a database, and the only record of it is a pull request merged on a Friday afternoon. That's moved a huge share of your attack surface into version control, and most security teams aren't reading it.

Infrastructure as Code for Security Engineers teaches security engineers, architects, and GRC/compliance professionals how to critically read, review, and audit Terraform, without becoming IaC authors themselves. It covers just enough of the mechanics to make you a competent reader, then focuses on the judgment: where secrets leak, why the state file is a liability, how to threat-model the pipeline, what policy-as-code can't guarantee, supply-chain risk in modules and providers, and how to turn a review into evidence an auditor will accept.

By the end, you should be able to sit down with someone else's infrastructure code under deadline and know exactly what to look for, what to ask, and what to refuse to sign off on.

Not for you if your goal is to become a Terraform practitioner. No coding background required.

","authors",[24],{"_12":25,"_26":27,"_28":29},"Z2lkOi8vbGVhbnB1Yi9TdG9yZTo6UHJvZHVjdEF1dGhvci84ODYzNA","name","Joshua Phillips","user",{"_30":31},"avatar",{"_32":33,"_34":35,"_36":37},"url","https://d39qdlcrvnra4b.cloudfront.net/avatars/3766478/medium/avatar.jpg?1787116923","styleName","medium","exists",true,"shoppingCartId","shoppingCart",{"_12":71,"_72":73,"_74":37,"_75":76,"_77":78,"_79":80,"_81":37},"locale","en","readerTheme","light","constants",{"_69":70},"publishers",{"_65":66,"_67":68},"learnerOrganizations",[],"needsLocaleCookieSync",false,"announcements",{"_59":60,"_61":-5},"sentryEnvironment","production","sentryRelease","3ca0d2062537d6274ad6ab24f3c6e910cc8fccbd","announcement_store",{"_62":52,"_63":64},"announcement_authors","flag","text","

Kick off your book project, get started with GhostAI, get better at marketing, or spend the day doing all three! Free live workshops on Zoom. Saturday, June 27, 2026.

\n","companies",[],"universities",[],"paypalClientId","AX53Cwz8jR6rVVzzZiZNWWXl0dGagi-GZrjG-S3Ua14E5nrKMn7DxDQ730O4R8LusLPp49ALn6aRVaEy","no-cart","count",0,"free","updatedAt","","paymentGateway","STRIPE","cartItems",[],"loading"]

Email the Author