# Tools

Linting and policy-as-code tools catch errors, enforce conventions, and flag security issues in your Terraform early — locally or in CI, before problems reach AWS.

Policy-as-code and linting tools can scan Terraform code for errors, misconfigurations, and security issues. Some examples are [Checkov](https://www.checkov.io/){:target="_blank"}, [`tfsec`](https://aquasecurity.github.io/tfsec){:target="_blank"}, [Terrascan](https://runterrascan.io/){:target="_blank"} or [`tflint`](https://github.com/terraform-linters/tflint){:target="_blank"}.