Introduction to Continuous Compliance & Remediation


Success with DevOps can be measured with a number of different metrics. How frequently are systems audited for compliance to various policies? How long does it take to remediate a failing control or vulnerability? This workshop provide an introduction to practice of continuous compliance and remediation. The workshop uses InSpec and Chef for compliance and remediation, respectively. InSpec is an open-source testing framework for infrastructure with a human-readable language for specifying compliance, security and other policy requirements. Chef is an open-source framework for infrastructure automation. Easily integrate automated tests that check for adherence to policy into any stage of your deployment pipeline.

During this session, participants will:

  • Run InSpec locally on a machine
  • Run InSpec on a remote machine
  • Use InSpec in the Chef cookbook development process for integration testing

By the end of this class participants will be able to:

  • Execute an InSpec test on a local machine
  • Execute an InSpec test on a remote machine
  • Generate an InSpec profile
  • Add InSpec-based integration test to a Chef cookbook
  • Run InSpec-based integrations tests during Chef cookbook development

Prerequisites

Participants should bring a wifi-enabled laptop to the workshop. Participants will be given a remote workstation with all prerequisites installed. The only thing required to access these workstations will be an SSH client (PuTTY on Windows) and familiarity with a interactive text editor (Vi/Vim, Emacs, or Nano).

It’s best that participants of this workshop have some familiarity and comfort with the following:

  • Writing code (of just about any flavor) in a text editor
  • Working on the command line
  • Basic system administration – installing packages, configuring those packages, starting service

Speakers

nicole-johnson

Nicole Johnson

 

Nicole is the manager of Solutions Architects East team at Chef Software, based in NYC Metro. She has been in the IT industry for over 11 years, with Chef for nearly 2 years, and has spent previous years as a Solutions Architect with Chef, and specializing in server, storage, virtualization and cloud architecture and operations.

nathen-harvey

Nathen Harvey

 

Nathen helps the community whip up an awesome ecosystem built around the Chef platform. Nathen also spends much of his time helping people learn about the practices, processes, and technologies that support DevOps, continuous delivery, and high velocity organizations. Prior to joining Chef, Nathen spent a number of years managing operations and infrastructure for a diverse range of web applications. Nathen is a co-host of the Food Fight Show, a podcast about Chef and DevOps. He is also an occasional farmer who loves eggs and actively supports #hugops.