Category:
Chef InSpec
Chef’s Approach to CIS Critical Security Controls v7.0
By Davy McAleer
The Center for Internet Security (CIS) have just released the latest version of the Critical Security Controls, designed to provide patterns and practices to help protect organizations and data from cyber attacks.
Read moreChef Open Source Community News – March 2018
By Julian Dunn
Here’s this month’s roundup of all the news from across Chef’s open source projects for the month of March. Chef With only another two weeks to go until the official release of Chef 14, the team is hard at work on merging in the last features with the stretch goal of hitting 30 new resources.
Read moreMigrating to the Cloud with Chef and CTP
By Nick Rycar
A successful cloud migration requires careful planning. Over the past few months, we’ve been taking a look at how your organization can prepare for that migration. In January, my colleague Matt Carter introduced the Shared Responsibility Model, and how Chef can help you validate your areas of concern.
Read moreDeliver Compliant Systems With CloudBolt and Chef Automate
By Trevor Hess
Installing and configuring multi-node systems are common enterprise tasks that can require a tremendous amount of time and resources. As technology continues to evolve, so will the need to effectively deploy and manage these systems.
Read moreAuditing with InSpec – New Chef Certification Exam
If you read Julian Dunn’s recent blog post and the follow up InSpec 2.0 Cloud Resources Mini-Tutorial you know that Chef recently launched InSpec 2.0.
Read moreUsing AWS Systems Manager to Run Compliance Scans Using InSpec
Starting today, all AWS customers have the ability to perform compliance as code using InSpec through AWS EC2 Systems Manager (SSM). InSpec, an open-source testing framework from Chef, provides teams the ability to define and assess system state and status across the entire application lifecycle.
Read moreAutomate Compliance with AWS OpsWorks for Chef Automate
In an era of rapidly developing threats and continually evolving compliance frameworks, we need to be able to react quickly. The most successful organizations pursue continuous automation in three stages: detect, correct, and automate.
Read moreInSpec 2.0 Cloud Resources Mini-Tutorial
By Julian Dunn
InSpec 2 introduces the ability to test cloud resources for compliance in addition to the system and application-level resources that previously appeared in InSpec 1. In this tutorial, we’ll use InSpec to write a very simple control to check attributes on a virtual machine in Amazon Web Services (AWS).
Read moreAnnouncing InSpec 2.0
By Julian Dunn
We are delighted to announce the availability of InSpec 2.0, the newest version of Chef’s open-source project for compliance automation. InSpec helps you express security and compliance requirements as code and incorporate it directly into the delivery process, eliminating ambiguity and manual processes to help you ship faster while remaining secure.
Read moreChef Automate Release – February 2018
Last week Chef announced the February release of Chef Automate. This marks the GA release of the compliance scanner with job scheduling, and adds features to make analysis easier, such as date-range search.
Read more