> For the complete documentation index, see [llms.txt](https://docs.aquilax.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.aquilax.ai/user-manual/scanners/iac-scanning.md).

# IaC Scanning

Infrastructure-as-Code (IaC) allows developers to define and manage infrastructure using code, but this can also introduce security risks. Misconfigurations, such as overly permissive access controls or unencrypted storage, can leave your infrastructure vulnerable to attacks.\\

AquilaX AI’s IaC Scanning helps identify these risks early by scanning IaC templates (e.g., Terraform, CloudFormation) for misconfigurations and vulnerabilities. By integrating IaC scanning into the development pipeline, organizations can ensure secure cloud infrastructure from the start, minimizing the risk of exposure.

**Why IaC Scanning Matters:**

• Prevent misconfigurations in cloud infrastructure.

• Secure infrastructure from the codebase level.

• Automate security in DevOps practices.