Snyk Cloud and Integrated IaC

Feature availability Integrated Infrastructure as Code (IaC) is a new version of Snyk IaC that - together with Snyk Cloud - secures cloud configurations across the entire SDLC, from code to deployed cloud environments. Integrated IaC is currently in closed beta. Please reach out to your account team if you would like access.

Snyk Cloud help users find, prioritize, and fix cloud misconfigurations by scanning and testing deployed cloud resources with a library of predefined security rules, generating a record of issues that can be filtered and triaged.

Integrated Infrastructure as Code (IaC) is a new version of Snyk IaC that - together with Snyk Cloud - secures cloud configurations across the entire SDLC, from code to deployed AWS, Azure, and Google Cloud environments. Integrated IaC shares the same interfaces, workflows, policy engine, and data model with Snyk Cloud.

Features

Developer-first security for cloud configurations

With Snyk Cloud and Integrated IaC, Snyk extends its focus on developer security to enable developers to build and deploy secure cloud configurations from IaC in the IDE through to production. Snyk has the same interfaces across the UI and API for cloud configurations in code and in deployed environments.

Code to cloud with unified policy engine

Snyk’s unified policy engine, enables consistent security testing across (IaC) files and deployed cloud resources, giving your security teams assurance that misconfigurations are correctly identified. In combination with the other Snyk products, this enables you to find and fix issues throughout the entire software development lifecycle (SDLC).

Connect Cloud back to IaC for faster fixes

Fix Cloud issues directly in the IaC source code that was used to deploy the misconfigured Cloud resources, by viewing the underlying SCM source code link for a given Cloud issue. With Snyk, you can view resource configurations alongside IaC-specific remediation guidance.

Security and compliance posture for security teams

Snyk Cloud and Integrated IaC provide visibility into an Organization’s entire cloud footprint, allowing security teams to easily identify and investigate issues. Users view reports and focus on issues that impact compliance - with support for more than 10+ compliance standards including CIS Benchmarks, PCI-DSS, SOC 2, and more.