Ansible for security automation
Security hardening is the practice of securing the hosts, networking devices, and applications by reducing the attack surface. There are multiple ways to implement security hardening, such as configuring the system appropriately, installing the latest version of the software (or firmware), or disabling unwanted configurations. Organizations use different security benchmarking methods and standards based on the requirements. Center for Internet Security (CIS) is one of the well-known organizations that provides the necessary enterprise standard benchmarks and CIS controls (https://www.cisecurity.org/about-us).
Log in and download the benchmark documents for operating systems or platforms for free, as shown in the following screenshot:
Figure 14.11 – CIS Benchmark download page for Kubernetes
It is not easy to configure the systems based on these benchmarks as hundreds of rules and configuration items must be executed...
