Infrastructure as Code (IaC) scanning tools detect security misconfigurations before deployment.
- True
- False
Answer: True
IaC scanners (Checkov, tfsec) analyze Terraform/CloudFormation for misconfigurations: public storage, weak IAM, unencrypted resources. Critical for shift-left security in DevOps.