Terraform IaC Audit
devsecops · medium · +45 XP
Target
GET /api/lab/iac-audit-101/tf (the .tf module source)
POST /api/lab/iac-audit-101/submit body {resource_name, fix} (the misconfig'd resource + suggested fix)
Goal: one of the resources sets cidr_blocks = ["0.0.0.0/0"] on a security group attached to a DB. Submit the resource name + a fix string mentioning either internal_subnet or 10.0.0.0/8.
// AI hint · first is free · then 1 credit or 5 XP
// attack console
/api/lab/iac-audit-101/
// reuse on the cli
// submit flag
// no solves yet
5 of 12 · devsecops