Mazin Ahmed -- Terraform Security

Mazin Ahmed is a security engineer that specializes in AppSec and offensive security. He is passionate about information security and has previously found vulnerabilities in Facebook, Twitter, Linkedin, and Oracle, to name a few. Mazin is the developer of several popular open-source security tools that have been integrated into security testing frameworks and distributions. Mazin also built FullHunt. io, the next-generation continuous attack surface security platform. He is also passionate about cloud security, where he has been running dozens of experiments in the cloud security world. Mazin joins us to introduce Infrastructure as Code and TerraForm and discuss the security benefits IaC brings to our cloud environments.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Mazin Ahmed is a security engineer that specializes in AppSec and offensive security.
→ Learn more about Security Journey

Connect with Mazin Ahmed:
→ Terraform
→ FullHunt.io

Mentioned in this episode:
→ Terraform
→ FullHunt.io
→ Terraform
→ Bugcrowd

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Mazin Ahmed: Terraform Security
03:25 Were you doing bug bounties while you were in high school
05:31 Curious, Mason, that you have mentioned pen tests and working on
07:50 Just a follow-up question. When you said that, you know, more
09:22 You think cloud security issues, I'm curious as a pentester, What
14:46 We call it infrastructure as code, but is it better to
16:49 Very cool. What are the security benefits of IaC
20:02 Got to do step 75. And so, when I think about
23:38 Are the attack vectors on Terraform environments then
27:17 As an attacker then, if you can get into the infrastructure
30:00 That's helpful to understand how, you know, what IaC is, security