Workshop: Building an Ansible Role to Provision an EC2 CIS Level 1 Compliant Instance
summary
Hands-on workshop building an Ansible role (plus Terraform structure) to turn an Amazon EC2 instance into CIS Critical Security Controls (CSC) Level 1 compliant. Covers which Linux hardening controls to automate, available shortcuts and open-source resources to avoid reinventing checks and configurations, and how to organize roles and Terraform to provision compliant EC2 instances.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 2:55CIS Critical Security Controls
- 11:03CIS benchmarks explained
- 18:38CIS benchmark challenges
- 24:01Selecting controls to automate
- 31:24Ansible role structure
- 37:44Playbook technical details
- 44:15Variables and customization
- 51:22Deploying the instance
- 57:22Improvements and optimizations
- 1:01:19Documentation and resources
- 1:02:24Summary
related talks
22mAutomating the CIS Foundations Benchmark for AWS with Terraform
39mAnsible - Your First Step Into Server Provisioning
25mThe Right Way to DevOps with Terraform and Ansible
12mCloud Security from Scratch
22mCreating Content for Automated Security Compliance
01h 25mWorkshop: Infra-as-Code & Terraform
15mDevopsec: Rapid Security in the Cloud with AWS and CIS
36mImproving Security while Reducing Toil with DevSecOps