← Security+ glossary

Infrastructure as Code (IaC) IaC

An approach in which servers, networks and other infrastructure are defined and provisioned through code and configuration files instead of manual setup. Its main security advantage is consistent, repeatable and auditable provisioning without human error, while its main risk is that a single mistake or secret (e.g. a password) in the code automatically multiplies the vulnerability across all systems.

All Security+ guides →