2025-06-27

Enhancing Early Verification and Testing for Infrastructure as Code

Christoph Bühler

Infrastructure as Code (IaC) has become essential in managing modern cloud environments, yet misconfigurations remain a significant risk, often leading to costly outages and security breaches. This thesis introduces a novel static analysis approach for verifying network-level connectivity in Terraform-based IaC before deployment. By transforming declarative configurations into abstract graph models, the method enables early detection of unreachable services and misconfigurations without requiring infrastructure provisioning. A proof-of-concept tool, evaluated on the TerraDS dataset, demonstrated strong scalability and effectiveness in realworld scenarios. The approach integrates seamlessly into DevOps pipelines, enhancing existing IaC testing workflows. Looking ahead, the method offers potential for broader verification across multi-cloud environments, including cost and energy efficiency assessments.

Enhancing Early Verification and Testing for Infrastructure as Code