Back to glossary
Shift left
Moving security checks earlier into the development process – for example, scanning code before it merges – so issues surface before reaching a shared environment.
Frequently Asked Questions
Do we still need our IaC scanner if we use Aryon?
For most teams, yes. IaC scanning gives developers early feedback inside their pipeline. Aryon adds a consistent enforcement layer at the point resources actually reach the cloud, catching what IaC-only tooling structurally can't see.
What are the trade-offs of enforcing at the cloud layer instead of earlier in the pipeline?
Feedback happens at the point a change reaches the cloud, rather than earlier in a developer's local workflow. When a change is blocked, Aryon provides context on which policy was violated. That's why pairing Aryon with IaC scanning gives teams the earliest possible feedback loop, alongside consistent enforcement everywhere else.