How is the infrastructure managed as code?
The entire amaise infrastructure is managed via Terraform as Infrastructure as Code (IaC). This offers several security benefits:
Version control: All infrastructure changes are submitted, reviewed, and approved via pull requests — just like application code.
Security scanning: Every change is automatically scanned with tfsec (security misconfigurations) and tflint (best practices).
Reproducibility: Each environment (EU, US, CH) is built from the same Terraform modules, ensuring consistent security settings.
Drift detection: 66 NIST CSF AWS Config rules continuously monitor the actual infrastructure configuration and detect deviations from the desired state.
Auditability: The complete change history of the infrastructure is traceable in version control.