thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Checkov

An open-source IaC static analysis tool (from Prisma Cloud by Palo Alto Networks) that scans Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and more.

Definition

Checkov ships with hundreds of built-in policies mapped to benchmarks such as CIS, supports custom policies in Python or YAML and analyzes resource relationships through graph-based checks.

Example

Checkov flags an S3 bucket without block-public-access settings in a Terraform plan.

Exam tip

Example of an IaC scanning tool for shift-left cloud security.

Related terms