Learning Center

Datadog Code Security scans your first-party code and the open source libraries your applications depend on, in both your repositories and your running services.

This course focuses on Infrastructure as Code (IaC) Security, which catches misconfigurations in Terraform, Kubernetes manifests, and CI/CD pipeline definitions.

You'll connect your repos to Datadog and triage real findings such as open security groups, unencrypted storage. From there you'll remediate the most critical issues and tune the ruleset in configuration as code. You'll also scan a CI/CD pipeline definition for sort of mistakes that let someone outside your team run code or read secrets through your own pipeline. You'll finish by expanding Datadog's default IaC ruleset to enforce practices specific to your organization.

• Connect the Datadog source code integration and enable IaC Security scanning
• Triage Infrastructure as Code findings in the Vulnerabilities Explorer
• Interpret IaC misconfiguration findings in Terraform and Kubernetes manifests
• Remediate a critical misconfiguration and verify the fix on the next scan
• Tune the IaC ruleset so one rule reports differently by environment
• Scan a CI/CD pipeline definition and fix the misconfigurations it surfaces
• Write, test, and publish custom IaC rules in Rego