Ce contenu n'est pas disponible dans la langue sélectionnée.

Chapter 1. Introduction to hardening Ansible Automation Platform


Use the following guidance to improve the security posture (referred to as “hardening”) of your Red Hat Ansible Automation Platform deployment on Red Hat Enterprise Linux.

Hardening guidance for the following deployments is not provided:

  • Other deployment targets for Ansible Automation Platform, such as OpenShift.
  • Ansible Automation Platform managed services available through cloud service provider marketplaces.

Use the following guidance to harden the Ansible Automation Platform security posture during the planning, architecture, installation, initial configuration, and Day 2 operations phases. When running Ansible Automation Platform on Red Hat Enterprise Linux, you must also apply the relevant Red Hat Enterprise Linux hardening configurations that affect automation platform components. Additional considerations with regards to the DISA STIGs for Red Hat Enterprise Linux are provided for those organizations that integrate the DISA STIGs as a part of their overall security strategy.

Note

These recommendations do not guarantee security or compliance of your deployment of Ansible Automation Platform. You must assess security from the unique requirements of your organization to address specific threats and risks and balance these against implementation factors.

1.1. Audience

Use the following guidance to install, configure, and maintain Ansible Automation Platform 2.6 on Red Hat Enterprise Linux, and to perform related security operations and compliance assessments.

1.2. Overview of Ansible Automation Platform

Ansible is an open source, command-line IT automation software application written in Python. You can use Ansible to configure systems, deploy software, and orchestrate advanced workflows to support application deployment, system updates, and more.

Ansible’s main strengths are simplicity and ease of use. It also has a strong focus on security and reliability, featuring minimal moving parts. It uses secure, well-known communication protocols such SSH, HTTPS, and WinRM for transport and uses a human-readable language that is designed for getting started quickly without extensive training.

Ansible Automation Platform enhances the Ansible language with enterprise-class features, such as Role-Based Access Controls (RBAC), centralized logging and auditing, credential management, job scheduling, and complex automation workflows. With Ansible Automation Platform you get certified content from our robust partner ecosystem; added security; reporting, analytics, and life cycle technical support to scale automation across your organization. Ansible Automation Platform simplifies the development and operation of automation workloads for managing enterprise application infrastructure life cycles. It works across multiple IT domains including operations, networking, security, and development, across diverse hybrid environments.

1.2.1. Red Hat Ansible Automation Platform deployment methods

There are three different installation methods for Ansible Automation Platform:

  • RPM-based on Red Hat Enterprise Linux
  • Container-based on Red Hat Enterprise Linux
  • Operator-based on Red Hat OpenShift Container Platform

Guidance is provided for hardening Ansible Automation Platform when using RPM-based or container-based installation.

Using the container-based installation method for new deployments is recommended, as the RPM-based installation program has been deprecated.

Hardening guidance for operator-based deployments is not provided.

1.2.2. Ansible Automation Platform components

Ansible Automation Platform is a modular platform composed of separate components that can be connected together, including automation controller, platform gateway, automation hub, and Event-Driven Ansible controller.

Red Hat logoGithubredditYoutubeTwitter

Apprendre

Essayez, achetez et vendez

Communautés

À propos de la documentation Red Hat

Nous aidons les utilisateurs de Red Hat à innover et à atteindre leurs objectifs grâce à nos produits et services avec un contenu auquel ils peuvent faire confiance. Découvrez nos récentes mises à jour.

Rendre l’open source plus inclusif

Red Hat s'engage à remplacer le langage problématique dans notre code, notre documentation et nos propriétés Web. Pour plus de détails, consultez le Blog Red Hat.

À propos de Red Hat

Nous proposons des solutions renforcées qui facilitent le travail des entreprises sur plusieurs plates-formes et environnements, du centre de données central à la périphérie du réseau.

Theme

© 2026 Red Hat
Retour au début