Mario Star Power Your Infrastructure: Getting the Most Out of InSpec
summary
InSpec is a free open source testing framework that runs agentless over SSH/WinRM via Train and installs four ways (chef-client, chefdk, gem, package) and outputs JSON/JUnit for CI. It provides an InSpec shell for live queries, built-in resources (sshd_config, docker), profile/control metadata (impact, supports), attributes and versioned dependencies, profile vendor/archive to lock results, and custom resources in libraries. Integrations include Test Kitchen verifier, the audit cookbook for periodic runs, and Chef Automate for storing and visualizing scan history.
AI-written summary · about
chapters (35)
- 0:00Introduction
- 0:25What is Inspect
- 1:44What is InSpec
- 2:29Puppet Aspect
- 3:11Private Rebel
- 3:40Inspect
- 6:21Profile and Controls
- 6:55Example Controls
- 8:56Impact Levels
- 9:17Profile Metadata
- 9:45Supports
- 11:12Scan
- 12:04Profiles
- 12:18Attributes
- 12:58Run Profile
- 13:12Profile Inheritance
- 14:34Profile Lockdown
- 15:06Archive Profiles
- 15:53Docker Resource
- 16:27Mario Meets
- 16:49Darkly Profile
- 17:24InspectExec Profiles
- 18:06Custom Resources
- 18:31Description Mario
- 18:52Inspect Profile
- 19:10Integrations
- 20:31Public Profiles
- 21:23Inspector
- 22:24Passwords
- 25:15Inspect Profiles
- 25:34Dedsec
- 26:04Pipeline for Inspect
- 26:19Versioning
- 29:04Sidebyside
- 30:07Run Inspect
related talks
36mIntroduction to Test-kitchen and InSpec
31mInfrastructure and Environment Testing with InSpec
45mAudit and Assess the Security of Your Infrastructure
33mTest Driven DevOps
22mMoving Fast Together: Test-Driven Infrastructure
01h 21mTest Driving your Rails Infrastructure with Chef
41mCloud Compliance with InSpec and Automate
31mHow to Prepare for an Audit AKA Make Audits Suck Less