Securing the infrastructure configuration is vital in ensuring that the infrastructure configurations and system hardening are compliant with industry security best practices, such as CIS benchmarks, PCI-DSS, and the National Checklist Program (NCP). If the DevOps team have applied infrastructure tools, such as Chef or Puppet, it's highly recommended that you define the security configuration on top of these tools to achieve the goal of infrastructure security as code. This helps to move the infrastructure security from the operation stage to the development stage. The Inspec, Hardening Framework, and ServerSpec tools are tools that are used for checking infrastructure security configurations. You can learn more about them at the following links:
- Inspec: https://www.inspec.io/
- Hardening Framework: https://Dev-Sec.io
- Serverspec: https...
