The move to IaC has its challenges but done right can fundamentally improve an organization’s overall security posture.