Systems and methods for automated threat modeling when deploying infrastructure as a code

A processor-executed method of generating a threat model from an infrastructure as code file, comprising:

• providing one or more first data stores communicatively coupled with the processor, the one or more first data stores storing information on:
• a plurality of properties to be configured for a plurality of resources;
• and
• a plurality of security threats associated with the plurality of resources and the plurality of properties;
• analyzing the infrastructure as code file to identify one or more properties, of the plurality of properties, associated with one or more resources, of the plurality of resources, included in the infrastructure as code file;
• determining one or more security threats based on the identified one or more properties or the associated one or more resources, using the information stored in the one or more first data stores;
• and
• generating a threat model for the infrastructure as code file based on the determined one or more security threats.