« Previous 1 2 3 4
Automated compliance testing with InSpec
Strictly Managed
Conclusions
InSpec is impressive on several levels. Installing and handling the tool is very easy. Chef keeps its promise that administrators can use InSpec without the need for major programming experience. Although the code is in Ruby, creating tests is not difficult and does not require any in-depth knowledge of Ruby. A further advantage is its easy-to-understand syntax: Meaningful function names help.
If you have to deal with compliance as a manager in your company, InSpec is perfect because it is a standalone tool that can be operated without the Chef automation tool in environments where a competing tool is already in place (e.g., Ansible or Puppet). The option to pair InSpec with automation frameworks, such as Jenkins, is another huge benefit. If you want to automate compliance testing, you should take a very close look at InSpec.
If you already use the Chef tool, you can use InSpec as part of an audit cookbook. Attributes and parameters can be used to transfer additional values to InSpec, which it then references for operations. The InSpec documentation [8] is well worth reading and contains more details on this topic.
Infos
- ISO 27001: https://en.wikipedia.org/wiki/ISO/IEC_27001:2013
- IT baseline protection: https://en.wikipedia.org/wiki/IT_baseline_protection
- InSpec on GitHub: https://github.com/chef/inspec
- InSpec by RubyGems: https://rubygems.org/gems/inspec/
- Homebrew for Mac OS: https://brew.sh
- InSpec resources: https://www.inspec.io/docs/reference/resources/
- CIS for Ubuntu 16.04: https://www.cisecurity.org/benchmark/ubuntu_linux/
- InSpec documentation: https://www.inspec.io/docs/
« Previous 1 2 3 4
Buy this article as PDF
(incl. VAT)
Buy ADMIN Magazine
US / Canada
UK / Australia
Related content
-
Automated compliance with Chef InSpec
Chef InSpec is a practical tool for automated compliance monitoring with an intuitive, declarative scripting language. -
The new version of Chef Automate comes with many new features
Chef, one of the oldest automation solutions, seeks to become a universal administration robot for cloud environments with new version 2.0. -
Chef users faced with a license change might find solace in a new open source distribution, Cinc.
For the past two years, Chef software used commercially has required a separate license. Cinc enters the scene as a free and completely compatible Chef distribution that makes it a genuine alternative. -
Automation with Chef
The Chef automator borrows some of its vocabulary from the world of cooking. Its cookbooks contain good recipes for many recurring tasks, and admins can follow them to prepare palatable results with manageable overhead. -
OPA and Gatekeeper enforce policy defaults in Kubernetes
Enforce container compliance in Kubernetes in one of two ways: with Open Policy Agent or Gatekeeper.