Mazin Ahmed -- Terraform Security

Mazin Ahmed is a security engineer that specializes in AppSec and offensive security. He is passionate about information security and has previously found vulnerabilities in Facebook, Twitter, Linkedin, and Oracle, to name a few. Mazin is the developer of several popular open-source security tools that have been integrated into security testing frameworks and distributions. Mazin also built FullHunt. io, the next-generation continuous attack surface security platform. He is also passionate about cloud security, where he has been running dozens of experiments in the cloud security world. Mazin joins us to introduce Infrastructure as Code and TerraForm and discuss the security benefits IaC brings to our cloud environments.The Application Security Podcast is brought to you by Security Journey.About Security JourneyMazin Ahmed is a security engineer that specializes in AppSec and offensive security.→ Learn more about Security JourneyConnect with Mazin Ahmed:→ Terraform→ FullHunt.ioMentioned in this episode:→ Terraform→ FullHunt.io→ Terraform→ BugcrowdFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Mazin Ahmed: Terraform Security03:25 Were you doing bug bounties while you were in high school05:31 Curious, Mason, that you have mentioned pen tests and working on07:50 Just a follow-up question. When you said that, you know, more09:22 You think cloud security issues, I'm curious as a pentester, What14:46 We call it infrastructure as code, but is it better to16:49 Very cool. What are the security benefits of IaC20:02 Got to do step 75. And so, when I think about23:38 Are the attack vectors on Terraform environments then27:17 As an attacker then, if you can get into the infrastructure30:00 That's helpful to understand how, you know, what IaC is, security