Secure IaC Before Production | Dataford Interview Questions

How do you ensure your IaC scripts are secure before deploying to production?

Implement scan_iac(resources) to perform a deterministic security scan on IaC resource objects. Return violation strings in input order, with each resource's violations reported in this order: PUBLIC_NETWORK, PLAINTEXT_SECRET, UNENCRYPTED_STORAGE, PRIVILEGED_CONTAINER.

Each resource has an id, type, and optional security fields. Use the exact output format "<id>:<violation>".

Constraints

0 <= len(resources) <= 10^4
Each resource contains a unique string field named id
Each resource contains a string field named type
The type is one of container, storage, secret, or another value
Ingress is a list of rule objects when present
A resource may violate multiple rules

Function Signature

def scan_iac(resources):

Your question is Secure IaC Before Production. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.

Problem

How do you ensure your IaC scripts are secure before deploying to production?

Each resource has an id, type, and optional security fields. Use the exact output format "<id>:<violation>".

Constraints

0 <= len(resources) <= 10^4
Each resource contains a unique string field named id
Each resource contains a string field named type
The type is one of container, storage, secret, or another value
Ingress is a list of rule objects when present
A resource may violate multiple rules

Function Signature

def scan_iac(resources):

Your question is Secure IaC Before Production. Start with the requirements in the Question tab.

Run and submit as often as you like. When you're ready, talk me through your approach or go straight to the code.