Red Hat User Group - Nashville

Passionate about open source? Join us at the next virtual Nashville RHUG with CyberArk!

Every attendee will receive a CyberArk T-shirt*!

Ansible® Security Automation

Host:  Christian Trujillo, Solutions Architect, Red Hat

Red Hat

Speaker: Dale Lemons, Domain Architect, Ansible Automation Platform

The presentation will cover Ansible's position in the security use case.  We will discuss the value the Red Hat® Ansible Automation platform can bring above the application of security baselines such as SCAP and STIG.  In the demonstration, I will point out components of the platform which enable collaboration and innovation. We'll see how tasks in an example security incident can be automated to reduce errors, how to prevent single points of failure via tasks being executable by someone without deep technical knowledge, and how Ansible Tower can integrate smoothly with a variety of common security components such as IDS/IPS, firewalls, credential managers, and SIEM applications.  Throughout the process, the use of RBAC controls will demonstrate the principles of least privilege. All tasks will be derived from a single source of truth in our Git repository, and modularity in task designs will be highlighted to reiterate the ease of collaboration across teams and locations in the enterprise.

CyberArk

Speaker:  Jeremy Patton, Senior Solutions Engineer, DevOps

We will discuss the manual user interactions when gaining privileged access to DevOps and orchestration tools like Ansible. The workflows will start from the simple processes of retrieving root-level unix SSH Keys, and Ansible admin console credentials, and then build upon this to get password-less and recorded access to said interfaces. We will talk about day-to-day hands on work, how the security and auditing is handled, and how convenience of access is preserved. Shifting gears slightly, we will discuss how credential rotation is handled for both user-accounts, as well as programmatic access in ways that are seamless and avoid disruption of crucial business services.

About Speaker:

Jeremy has been at CyberArk for roughly a decade, working as Support, Professional Services, Development, and now a Senior Solutions Engineer. Graduating from Brandeis University with a BA in Computer Science, Jeremy spent some time as a freelance IT Administrator, providing IT consulting for small businesses, before joining the CyberArk team when it was still a small startup business. He now specializes in DevOps Privilege Security.