Techniques for securing deployment of infrastructure as code

A system for securing deployment of computing infrastructure resources, comprising:

• a processing circuitry;
• and
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• determine an at least one matching universal definition template for each original definition in a plurality of original definitions based on mapping a plurality of proprietary-specific type identifiers expressed in each original definition to a plurality of proprietary-agnostic type identifiers represented by the matching universal definition template, wherein each original definition in the plurality of original definitions is a definition of a respective computing infrastructure resource of a plurality of computing infrastructure resources, wherein each computing infrastructure resource of the plurality of computing infrastructure resources is provisioned via execution of an infrastructure as code (IaC) file of a plurality of IaC files;
• transform each original definition in the plurality of original definitions into a plurality of universal definitions using the at least one matching universal definition templates, wherein transforming each original definition in the plurality of original definitions further comprises inserting at least one proprietary-agnostic type identifier in the plurality of proprietary-agnostic type identifiers into the at least one matching universal definition template for each original definition in the plurality of original definitions;
• and
• detect at least one misconfiguration with respect to the plurality of computing infrastructure resources based on the plurality of universal definitions, wherein the detected at least one misconfiguration is detected for a first IaC file of the plurality of IaC files.

A non-transitory computer readable medium having stored thereon instructions for causing a processing circuitry to execute a process, the process comprising:

• determining an at least one matching universal definition template for each original definition in a plurality of original definitions based on mapping a plurality of proprietary-specific type identifiers expressed in each original definition to a plurality of proprietary-agnostic type identifiers represented by the matching universal definition template, wherein each original definition in the plurality of original definitions is a definition of a respective computing infrastructure resource of a plurality of computing infrastructure resources, wherein each computing infrastructure resource of the plurality of computing infrastructure resources is provisioned via execution of an infrastructure as code (IaC) file of a plurality of IaC files;
• transforming each original definition in the plurality of original definitions into a plurality of universal definitions using the at least one matching universal definition template, wherein transforming each original definition in the plurality of original definitions further comprises inserting at least one proprietary-agnostic type identifier in the plurality of proprietary-agnostic type identifiers into the at least one matching universal definition template for each original definition in the plurality of original definitions;
• and
• detecting at least one misconfiguration with respect to the plurality of computing infrastructure resources based on the plurality of universal definitions, wherein the detected at least one misconfiguration is detected for a first IaC file of the plurality of IaC files.