Ce contenu n'est pas disponible dans la langue sélectionnée.
Chapter 1. Introduction to hardening Ansible Automation Platform
Use the following guidance to improve the security posture (referred to as “hardening”) of your Red Hat Ansible Automation Platform deployment on Red Hat Enterprise Linux.
Hardening guidance for the following deployments is not provided:
- Other deployment targets for Ansible Automation Platform, such as OpenShift.
- Ansible Automation Platform managed services available through cloud service provider marketplaces.
Use the following guidance to harden the Ansible Automation Platform security posture during the planning, architecture, installation, initial configuration, and Day 2 operations phases. When running Ansible Automation Platform on Red Hat Enterprise Linux, you must also apply the relevant Red Hat Enterprise Linux hardening configurations that affect automation platform components. Additional considerations with regards to the DISA STIGs for Red Hat Enterprise Linux are provided for those organizations that integrate the DISA STIGs as a part of their overall security strategy.
These recommendations do not guarantee security or compliance of your deployment of Ansible Automation Platform. You must assess security from the unique requirements of your organization to address specific threats and risks and balance these against implementation factors.
1.1. Audience Copier lienLien copié sur presse-papiers!
Use the following guidance to install, configure, and maintain Ansible Automation Platform 2.6 on Red Hat Enterprise Linux, and to perform related security operations and compliance assessments.
1.2. Overview of Ansible Automation Platform Copier lienLien copié sur presse-papiers!
Ansible is an open source, command-line IT automation software application written in Python. You can use Ansible to configure systems, deploy software, and orchestrate advanced workflows to support application deployment, system updates, and more.
Ansible’s main strengths are simplicity and ease of use. It also has a strong focus on security and reliability, featuring minimal moving parts. It uses secure, well-known communication protocols such SSH, HTTPS, and WinRM for transport and uses a human-readable language that is designed for getting started quickly without extensive training.
Ansible Automation Platform enhances the Ansible language with enterprise-class features, such as Role-Based Access Controls (RBAC), centralized logging and auditing, credential management, job scheduling, and complex automation workflows. With Ansible Automation Platform you get certified content from our robust partner ecosystem; added security; reporting, analytics, and life cycle technical support to scale automation across your organization. Ansible Automation Platform simplifies the development and operation of automation workloads for managing enterprise application infrastructure life cycles. It works across multiple IT domains including operations, networking, security, and development, across diverse hybrid environments.
1.2.1. Red Hat Ansible Automation Platform deployment methods Copier lienLien copié sur presse-papiers!
There are three different installation methods for Ansible Automation Platform:
- RPM-based on Red Hat Enterprise Linux
- Container-based on Red Hat Enterprise Linux
- Operator-based on Red Hat OpenShift Container Platform
Guidance is provided for hardening Ansible Automation Platform when using RPM-based or container-based installation.
Using the container-based installation method for new deployments is recommended, as the RPM-based installation program has been deprecated.
Hardening guidance for operator-based deployments is not provided.
1.2.2. Ansible Automation Platform components Copier lienLien copié sur presse-papiers!
Ansible Automation Platform is a modular platform composed of separate components that can be connected together, including automation controller, platform gateway, automation hub, and Event-Driven Ansible controller.