Chef Automate Compliance

Chef Automate Compliance

Bascom Bridge’s Chef Automate Compliance training teaches attendees how to ensure their Chef Automate systems are secure without slowing down deployment. Students learn how to express their security requirements as code and automate the assessment and remediation of their infrastructure.

CHEF TRAINING OBJECTIVES

All students will learn how to:

• Use the Chef Automate compliance UI
• Perform compliance scans against Windows and Linux nodes
• Remediate compliance issues
• Use InSpec, Chef’s open source testing framework for infrastructure
• Create and modify compliance profiles and locate Department of Defense (DoD) compliance specifications
• Use the Chef audit cookbook, which allows you to run InSpec profiles as part of the chef-client run

CHEF TRAINING PREREQUISITES

All students should know how to:

• Write code (of just about any flavor) in a text editor such as Atom, Visual Studio Code
• Work on the command line

CHEF TRAINING MATERIALS

All Chef training students receive comprehensive courseware covering all topics in the course.

SOFTWARE NEEDED FOR EACH PC:

• Windows 7 or higher with Remote Desktop Connection
• Mac OS X 10.11 (El Capitan) with Microsoft Remote Desktop
• Ubuntu 14.04 with Remmina Remote Desktop Client
• For classes delivered online, all participants need either dual monitors or a separate device logged into the online session so that they can do their work on one screen and watch the instructor on the other. A separate computer connected to a projector or large screen TV would be another way for students to see the instructor’s screen simultaneously with working on their own.

CHEF TRAINING OUTLINE

• Introduction
• Chef Automate Compliance Overview
• Using the Chef Automate UI
• Running Compliance Scans, Remediating Issues, and Re-scanning Nodes
• Creating and Managing Custom Compliance Profiles Using InSpec
• Using the Audit Cookbook
• Applying Compliance Frameworks Using InSpec
• Scheduling Scans and Running Reports
• Managing Users, Organizations, Teams and Permissions
• Conclusion