Using Compliance to Quarantine: Remove The Risk and Rebuild Clean
summary
A demo shows a compliance check triggering automated quarantine: Chef Automate with InSpec detects a failing control, fires a webhook to a listener that changes the instance EC2 security group to a null-route security group, then autoscaling terminates the tainted instance and the ELB receives a rebuilt replacement. The implementation uses Chef client audit runs, webhooks, AWS security‑group edits and ASG replace logic, and it works in the demo; alternatives include imaging, moving VPCs, or turning the instance into a honeypot.
AI-written summary · about
chapters (4)
- 0:00Start
- 2:17Least Privilege
- 5:53Chef Automate 2 0
- 14:09What Happens if the Attacker Escalates and Goes To Modify the Inspect Profile
related talks
38mKick Starting our DevOps Transition with Chef Compliance
33mAutomating Cloud Security and Incident Response (DevSecOps)
49mBaking Safety into Infrastructure Testing
17mEnhancing cloud security with continuous compliance
39mTrust teams but verify: compliance as code done right
31mShifting Left Securely
50mAutomation in action: Strategies for risk mitigation
36mImproving Security while Reducing Toil with DevSecOps