Detect errors in as-Code and Serverless environments Yor tags cloud resources in IaC frameworks
Manual tagging of cloud resources is tedious, the open source tool Yor is designed to automate this task. With the release, Palo Alto Networks follows the acquisition of Bridgecrew in March.
Companies on the topic
Yor is able to identify and tag cloud resources in IaC frameworks.
(Picture: Yor / Palo Alto Networks)
Yor is able to identify and tag cloud resources in IaC frameworks.
(Picture: Yor / Palo Alto Networks)
Yor automatically tags cloud resources within the IAC, i.e. infrastructure-as-code frameworks Terraform, AWS CloudFormation, and Serverless Framework YAML. The open source tool helps security teams track security-related misconfigurations from code to the cloud and supports GitOps processes across all major cloud providers.
Corresponding manual processes for developers, which are mapped differently for each cloud provider, could now be eliminated, Barak Schoster, Chief Architect at Palo Alto underlines the importance: “Effective infrastructure tagging is crucial for tracking cost allocation, access control, operation and, of course, security in the cloud.“
Yor can run across all infrastructure resources to retroactively assign property rights and other meaningful tags based on IAC and Git history data. The tool also integrates with the Continuous Integration and Delivery (CI / CD) lifecycle to improve traceability while modifying and building infrastructure.
If the security team identifies a misconfiguration, the presence of tags for the developer’s owner simplifies triage so that tickets can be automatically assigned to the right developer. Yor’s use cases also go beyond the realm of security by making it easier to tag resources for cost allocation from a finance and budgeting perspective.
Yor was developed by Bridgecrew, the team behind the open source IAC scanner Checkov. Only in March 2021 had Palo Alto taken over the provider. Together, the two companies want to invest in new and existing open source projects.
(ID:47448030)
