liveBook · Manning

Misconfiguration

As explained in Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform

An infrastructure or system configuration whose settings create unintended security exposure or violate required security controls.

An insecure configuration sets infrastructure or system controls in ways that create unintended exposure. Common failures include public object storage, default database passwords, and firewall rules that permit unknown inbound sources. section 1.4.4

Infrastructure as code makes configuration reviewable and testable before deployment. Security checks can verify that storage is not public, access policies grant only required reads, and firewalls accept traffic only from known sources. section 1.4.4

Reduce exposure through a practical workflow:

  • Audit configuration and access control before production deployment. section 1.4.4
  • Use standardized, hardened infrastructure modules approved by the security team. section 10.0
  • Assess external modules for functionality, security, and lifecycle, then reassess them after releases. section 13.1
  • After a breach, examine configuration, assess blast radius, and remediate affected infrastructure. section 1.4.4

How Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform covers it

How deep it goes
Explains concrete failure modes, policy checks, module review, and breach response without detailing specific scanning implementations.
Examples
Uses public object storage, default database passwords, permissive firewalls, and unapproved database modules as concrete examples.
What it assumes
Assumes familiarity with infrastructure configuration and introduces security validation through infrastructure-as-code practices.
What you can do after
Diagnose exposure by auditing configuration and access control, then assess blast radius and remediate breaches.
How it connects
Connects insecure configuration with infrastructure as code, access control, security policies, infrastructure modules, and blast radius.
Cover of Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform
liveBookmanning.com
Read Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform on liveBook Get the book at manning.com

Also explained in

Compare how 2 books explain misconfiguration →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Infrastructure as Code, Patterns and Practices: With examples in Python and Terraform. The section links point to the parts of the book it draws on.