I will perform infrastructure as code static analysis

Infrastructure as code (IaC), also known as software-defined infrastructure, allows the configuration and deployment of infrastructure components faster with consistency by allowing them to be defined as a code and also enables repeatable deployments across environments.

Static analysis - Analyzes code in isolation, identifying risks, misconfigurations, and compliance faults only relevant to the IaC itself.

It is always preferred to detect security issues at the early development phase itself.

I will perform IAC static analysis using both manual and automated scan approach to detect security issues in your source code.