Hands-on playbook · 45 min
Orca Security Playbook: Shift-Left Scans in CI, Sonar Queries, Alert Automation and In-Account Scanning Permissions
A hands-on Orca guide built from Orca's own public code: orca-cli and the IaC action in CI with exit codes and warn mode, Sonar JSON queries that the serving layer accepts, alert lifecycle by API, policy and admission control as Terraform, and a review of the in-account scanner's AWS permissions.
- orca-cli and Orca's IaC action: inputs, defaults and the exit code to gate on
- Shift-left policies in Terraform: warn mode first, then fail on HIGH
- Sonar JSON queries, including the list-field rule that breaks naive queries
- Alert status, score and re-verify calls, as Orca's own integration makes them
- Kubernetes admission control as code, monitor before block
- Reading the in-account scanner's IAM: deletes limited to Orca-tagged snapshots
- A 90-day rollout and an interview drill
- 01Under the hood
- 02Hands-on lab
- 03Recipes
- 04Rollout runbook
- 05Troubleshooting
- 06Interview drill
- 07Sources
Every worked answer in all 17 topics, every lesson in every course, the full concept curriculum, hands-on tool playbooks, the complete practice-test bank, and the downloadable security field guides.
6 months · One payment · No auto-renewal
An independent playbook for interview preparation and learning. AISecurityInterviews is not affiliated with or endorsed by Orca Security, and product names are trademarks of their owners. Use these procedures only on systems you own or are authorised to test, and check the vendor's documentation before changing production.