Systems and methods for automated threat modeling when deploying infrastructure as a code

A processor-executed method of generating a threat model from a code file, comprising:

• providing one or more data stores communicatively coupled with the processor, the one or more data stores storing information on:
• a plurality of properties to be configured for one or more resources included in the code file;
• and
• a plurality of security threats associated with one or more values of the plurality of properties;
• analyzing the code file to identify one or more properties, of the plurality of properties, associated with the one or more resources included in the code file;
• for each property of the identified one or more properties:
• identifying a value for the property defined in the code file;
• and
• determining one or more security threats based on the identified value for the property, using the information stored in the one or more data stores;
• identifying one or more dubious properties that generated each security threat of the one or more security threats;
• and
• displaying, on a user interface, an indication of the one or more dubious properties that generated each security threat of the one or more security threats.

A system that generates a threat model from a code file, comprising:

• one or more first data stores configured to store information on:
• a plurality of properties to be configured for one or more resources included in the code file;
• and
• a plurality of security threats associated with one or more values of the plurality of properties;
• one or more memories configured to store instructions;
• and
• one or more computing devices communicatively connected to the one or more first data stores and the one or more memories and configured to execute the stored instructions to:
• analyze the code file to identify one or more properties, of the plurality of properties, associated with the one or more resources included in the code file;
• for each property of the identified one or more properties:
• identify a value for the property defined in the code file;
• and
• determine one or more security threats based on the identified value for the property, using the information stored in the one or more first data stores;
• and
• generate a threat model for the one or more resources based on the determined one or more security threats.

A system that generates a threat model from a code file, comprising:

• a user interface;
• one or more data stores configured to store information on:
• a plurality of properties to be configured for one or more resources included in the code file;
• and
• a plurality of security threats associated with one or more values of the plurality of properties;
• one or more memories configured to store instructions;
• and
• one or more computing devices communicatively connected to the one or more data stores and the one or more memories and configured to execute the stored instructions to:
• analyze the code file to identify one or more properties, of the plurality of properties, associated with the one or more resources included in the code file;
• for each property of the identified one or more properties:
• identify a value for the property defined in the code file;
• and
• determine one or more security threats based on the identified value for the property, using the information stored in the one or more data stores;
• identify one or more dubious properties that generated each security threat of the one or more security threats;
• and
• display, on the user interface, an indication of the one or more dubious properties that generated each security threat of the one or more security threats.