# Enhancing code to cloud security with the Common Configuration Scoring System

DevFeed: [Enhancing code to cloud security with the Common Configuration Scoring System](<https://devfeed.tech/articles/enhancing-code-to-cloud-security-with-the-common-configuration-scoring-system-7905.md>)

Original publisher: [Read original article](<https://snyk.io/blog/enhancing-code-to-cloud-security-common-configuration-scoring/>)

Author: Wayne Crissman; Tal Dromi

Published: 2023-12-14T14:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [iac-security](<https://devfeed.tech/topics/iac-security.md>), [snyk-iac](<https://devfeed.tech/topics/snyk-iac.md>), [Infrastructure as code](<https://devfeed.tech/topics/infrastructure-as-code.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [sdlc](<https://devfeed.tech/topics/sdlc.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [aspm](<https://devfeed.tech/tags/aspm.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [cloud-security](<https://devfeed.tech/tags/cloud-security.md>), [code-security](<https://devfeed.tech/tags/code-security.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [developer](<https://devfeed.tech/tags/developer.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [iac](<https://devfeed.tech/tags/iac.md>), [infrastructure-as-code](<https://devfeed.tech/tags/infrastructure-as-code.md>), [metrics](<https://devfeed.tech/tags/metrics.md>), [nist](<https://devfeed.tech/tags/nist.md>), [sdlc](<https://devfeed.tech/tags/sdlc.md>), [security](<https://devfeed.tech/tags/security.md>), [security-rules](<https://devfeed.tech/tags/security-rules.md>), [snyk](<https://devfeed.tech/tags/snyk.md>), [snyk-security-intel](<https://devfeed.tech/tags/snyk-security-intel.md>), [standards](<https://devfeed.tech/tags/standards.md>)

## AI overview

Snyk is standardizing its code-to-cloud security rules on the Common Configuration Scoring System (CCSS). The change applies to Snyk Infrastructure as Code (IaC), IaC+, and cloud configurations, using technical severity, threat intelligence, and application and business context to produce clearer risk assessments.

## Source excerpt

To eliminate this burden and provide our customers with a clear security assessment for configurations across the SDLC, Snyk will be moving towards standardizing our code to cloud security rules set on the Common Configuration Scoring System (CCSS)!