Code Security FAQs

How should I Onboard IaC if I have Multiple Lacework Sub-Accounts?

Lacework sub-accounts today do not have any way of isolating git organizations that are onboarded together. This means that data isolation is not possible unless you explicitly maintain a strict relationship between a single Lacework sub-account and each git organization.

Example: I have Lacework Sub-account A and Lacework Sub-account B. If Sub-account A onboards repositories from git org A and Sub-account B also onboards repositories from Git org A, then data for both repositories will be accessible from both Lacework sub-accounts. This also impacts any CI/CD integrations as Lacework also extracts information related to the git organization from the CI/CD pipeline.