Stream: Virtual Room 8
Time: 10:30 - 11:30
Ansible code often gets executed with a very high level of access to ensure it can perform all the necessary actions to complete its task. This high level of access creates the risk of attacks leveraging the automation code as an attack vector.
It is possible to use cryptographic signatures to prevent the risk of executing code that has not been properly vetted.
In this talk, we will see how it is possible to integrate cryptographical assurances into Ansible, and we will delve into some implementation decisions and suggestions to ensure that the result completely satisfies the requirements.
Fabio Alessandro Locati - commonly known as Fale - is an EMEA Associate Principal Solution Architect at Red Hat, public speaker, author, and Open Source contributor. His primary areas of expertise are Linux, automation, security, and cloud technologies. Fale has more than 15 years of working experience in IT, with many of them spent consulting for many companies, including dozens of Fortune 500 companies. Fale has written "Learning Ansible 2.7", "Learning Ansible 2", "OpenStack Cloud Security" and has been part of the review process of multiple books.
Fabio Alessandro Locati - commonly known as Fale - is an EMEA Associate Principal Solution Architect at Red Hat, public speaker, author, and Open Source contributor. His primary areas of expertise are Linux, automation, security, and cloud technologies. Fale has more than 15 years of working experience in IT, with many of them spent consulting for many companies, including dozens of Fortune 500 companies. Fale has written "Learning Ansible 2.7", "Learning Ansible 2", "OpenStack Cloud Security" and has been part of the review process of multiple books.
Click here to give some Feedback so we can make it even better next year!