This message was deleted.

Pardon my question, but what

IaC

stands for?

Infrastructure as Code

I think you can add reproducibility to perform pen tests in a controlled environment easily replicated

I would also add something around DIE. Distributed, Immutable and Ephemeral. Especially related to IaC (https://www.copado.com/devops-hub/blog/making-die-model-security-vs-the-cia-security-triad-complementary-not-competitive)