Questo contenuto non è disponibile nella lingua selezionata.

Chapter 1. Introduction to hardening Ansible Automation Platform


Use the following guidance to improve the security posture (referred to as “hardening”) of your Red Hat Ansible Automation Platform deployment on Red Hat Enterprise Linux.

Hardening guidance for the following deployments is not provided:

  • Other deployment targets for Ansible Automation Platform, such as OpenShift.
  • Ansible Automation Platform managed services available through cloud service provider marketplaces.

Use the following guidance to harden the Ansible Automation Platform security posture during the planning, architecture, installation, initial configuration, and Day 2 operations phases. When running Ansible Automation Platform on Red Hat Enterprise Linux, you must also apply the relevant Red Hat Enterprise Linux hardening configurations that affect automation platform components. Additional considerations with regards to the DISA STIGs for Red Hat Enterprise Linux are provided for those organizations that integrate the DISA STIGs as a part of their overall security strategy.

Note

These recommendations do not guarantee security or compliance of your deployment of Ansible Automation Platform. You must assess security from the unique requirements of your organization to address specific threats and risks and balance these against implementation factors.

1.1. Audience

Use the following guidance to install, configure, and maintain Ansible Automation Platform 2.6 on Red Hat Enterprise Linux, and to perform related security operations and compliance assessments.

1.2. Overview of Ansible Automation Platform

Ansible is an open source, command-line IT automation software application written in Python. You can use Ansible to configure systems, deploy software, and orchestrate advanced workflows to support application deployment, system updates, and more.

Ansible’s main strengths are simplicity and ease of use. It also has a strong focus on security and reliability, featuring minimal moving parts. It uses secure, well-known communication protocols such SSH, HTTPS, and WinRM for transport and uses a human-readable language that is designed for getting started quickly without extensive training.

Ansible Automation Platform enhances the Ansible language with enterprise-class features, such as Role-Based Access Controls (RBAC), centralized logging and auditing, credential management, job scheduling, and complex automation workflows. With Ansible Automation Platform you get certified content from our robust partner ecosystem; added security; reporting, analytics, and life cycle technical support to scale automation across your organization. Ansible Automation Platform simplifies the development and operation of automation workloads for managing enterprise application infrastructure life cycles. It works across multiple IT domains including operations, networking, security, and development, across diverse hybrid environments.

1.2.1. Red Hat Ansible Automation Platform deployment methods

There are three different installation methods for Ansible Automation Platform:

  • RPM-based on Red Hat Enterprise Linux
  • Container-based on Red Hat Enterprise Linux
  • Operator-based on Red Hat OpenShift Container Platform

Guidance is provided for hardening Ansible Automation Platform when using RPM-based or container-based installation.

Using the container-based installation method for new deployments is recommended, as the RPM-based installation program has been deprecated.

Hardening guidance for operator-based deployments is not provided.

1.2.2. Ansible Automation Platform components

Ansible Automation Platform is a modular platform composed of separate components that can be connected together, including automation controller, platform gateway, automation hub, and Event-Driven Ansible controller.

Red Hat logoGithubredditYoutubeTwitter

Formazione

Prova, acquista e vendi

Community

Informazioni sulla documentazione di Red Hat

Aiutiamo gli utenti Red Hat a innovarsi e raggiungere i propri obiettivi con i nostri prodotti e servizi grazie a contenuti di cui possono fidarsi. Esplora i nostri ultimi aggiornamenti.

Rendiamo l’open source più inclusivo

Red Hat si impegna a sostituire il linguaggio problematico nel codice, nella documentazione e nelle proprietà web. Per maggiori dettagli, visita il Blog di Red Hat.

Informazioni su Red Hat

Forniamo soluzioni consolidate che rendono più semplice per le aziende lavorare su piattaforme e ambienti diversi, dal datacenter centrale all'edge della rete.

Theme

© 2026 Red Hat
Torna in cima