Monitor your IaC environment

You can monitor code repositories that you have added to Sophos Cloud Optix.

To see the repositories to which you have granted access, or from which events are received, go to Settings > Environments and look in the IaC Environments tab.

You can also see reports and alerts for your repositories.

Get IaC reports

You'll be able to see reports that have been generated based on the analysis of the files in your repositories. Go to Compliance > Reports.

Note You will only see reports corresponding to configurations we can classify as related to Terraform, AWS CloudFormation, Kubernetes or Ansible. Hence you might not see reports on all repository push events.

See IaC alerts

To see IaC alerts:

  1. Go to Alerts and look for alerts with “IaC” in the Type column. You can filter the list to show only these alerts.
  2. Look for alerts with “IaC” in the Type column. You can filter the list to show only these alerts.

  3. Click on an alert to open a detailed overview.

  4. Click the plus sign next to a resource for more details. This shows the branch, repository, file name and the variable which contains reference of the resource. You can use this information to identify the resource and fix the issue.