Identity
- ✓ Least privilege and no shared accounts
- ✓ Privileged access is time-bound
- ✓ Workload identities replace embedded secrets
Terraform Academy · Production operations
Security Baseline
Apply minimum identity, network, data, supply-chain and audit controls before production use.
Cloud, DevOps and platform engineersOperational evidence required
Platform controls
- ✓ Encryption in transit and at rest
- ✓ Network exposure is intentional
- ✓ Dependencies and images are scanned
Evidence
- ✓ Audit logs retained
- ✓ Exceptions have expiry dates
- ✓ Security ownership is documented
Evidence standard
Do not mark this guide complete because a document exists. Completion requires reviewed configuration, test evidence, named ownership, known-risk decisions and a repeatable operating procedure.