If you want to automate scanning your apps look no further than OpenDevSecOps's terraform scanner module (https://github.com/opendevsecops/terraform-aws-scanner

If you want to automate scanning your apps look no further than OpenDevSecOps's terraform scanner module (https://github.com/opendevsecops/terraform-aws-scanner https://github.com/opendevsecops/terraform-aws-scanner). wpscan is currently integrated but you can also use other web application security scanners like Cohesion.