Cybersecurity definition
What is IaC?
IaC stands for Infrastructure as Code.
By Cyber Tool Stack Editorial TeamUpdated
Definition
Defining and provisioning infrastructure — servers, networks, cloud resources — through version-controlled configuration files like Terraform or CloudFormation instead of manual setup, which also means a misconfiguration can be scanned and caught before anything is ever deployed.
Where IaC fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
CSPMCloud Security Posture ManagementContinuously checks cloud account configuration against best-practice benchmarks — an exposed storage bucket, an overly permissive security group — and flags drift before it becomes a breach.SBOMSoftware Bill of MaterialsA formal, machine-readable inventory of every open-source and third-party component that makes up a piece of software, so an organization can quickly tell whether a newly disclosed vulnerability affects anything it runs.