Recap: Automating Compliance - The birth of InSpecīefore InSpec, Dominik Richter and I developed SaaS services that had to comply with German regulations.

continuous release: automation in combination with infrastructure testing allows you to have a build pipeline that sets up testing and staging environment to ensure that your system keeps working as intended.This cannot easily be achieved with provisioning tools negative testing: ensure things that should not be in your stack e.g you may want to ensure that all your machines are not reachable by unknown ip addresses.teams working together on a tech stack, are able to prevent changes that break your environment safety at velocity: you can deploy changes to all parts of your infrastructure with confidence since testing is included.To ensure quality and reliability during rapid change, testing is required to establish trust for the automation: By doing configuration management over the past decade, we learned that we need to think about the development and deployment lifecycle. This allows us to replicate complete environments automatically, consistently and very rapidly. Besides pure configuration management of instances, those stacks include all pieces required to run our application like dns and firewall configuration. With the rise of IaaS/cloud infrastructures such as VmWare, AWS, Azure or GCP, we started to automate complete infrastructure stacks. When we think about infrastructure automation, most likely we think about configuration management like Ansible, Chef and Puppet. Why do we need to test provisioned infrastructures Equipped with its new features, we are enabled to verify our infrastructure provisioned with Terraform, AWS CloudFormation or Azure Resource Manager Templates. A few days ago, InSpec 2.0 has been released and it adds support for cloud resources. to verify security groups or IAM permissions. While InSpec 1.x is great at covering your operating system configuration and runtime, it was lacking native support for cloud environments e.g. Until today, it was not easy to verify that all your provisioned infrastructure is working properly. We are going to explain why it is important and how you can use Terraform with InSpec. We want to bring the same testing experience known from configuration management to provisioning and InSpec 2.0 is making it happen.

Unable to access terraform plugins