THE HIDDEN DANGERS OF TERRAFORM’S REMOTE EXEC PROVISIONER

Summary from the TLDR InfoSec newsletter

Terraform’s remote-exec provisioner is a powerful tool that allows for executing commands on a remote server to configure it. However, without proper guardrails, this can pose security risks such as data exfiltration. This article features an example and discusses some mitigations.