Aplicações de tecnologias Infrastructure as Code (IaC) em segurança
SIMÕES, NUNO PEDRO RODRIGUES
MSc Thesis · 2025 · University of Coimbra
Supervisor: Tiago José dos Santos Martins da Cruz
Abstract
The increasing complexity of computing infrastructures has highlighted the limitations of traditional management methods, underlining the need for automation and centralized control. This dissertation explores the application of Infrastructure as Code (IaC) technologies, focusing on improving efficiency, scalability, and security in the management of infrastructures in cloud-based environments, namely on Amazon Web Services AWS.The methodology integrates Terraform for provisioning resources on AWS, Ansible for continuous infrastructure management, and GitHub for centralized code management. Additionally, SonarQube and Checkov are used to analyze and strengthen security compliance, ensuring the reliability of implemented changes.The proposed scenario aims to reduce human error, improve deployment efficiency, and enhance infrastructure resilience on AWS. Based on practical implementation and corresponding validation, this study demonstrates that IAC tools can optimize operations and strengthen security in modern computational environments.Moreover, the adoption of DevSecOps methodologies promotes the continuous integration of security throughout the infrastructure lifecycle, facilitating early vulnerability detection and the enforcement of strict control policies in AWS environments.he results indicate that combining these technologies enables significant operational gains and fosters a proactive stance towards emerging threats in the cloud. It is expected that this work will encourage a broader adoption of IAC, especially on AWS platforms, driving innovation and security in future systems.