VMware vRealize Automation SaltStack SecOps: Deploy and Manage [V8.6]

Conoscenze/Competenze in uscita

Al termine del corso, dovreste essere in grado di:

• Integrare SaltStack Config con i servizi di directory.
• Configurare ruoli e autorizzazioni per utenti e gruppi per gestire e utilizzare SaltStack SecOps.
• Utilizzare il targeting per garantire che i lavori vengano eseguiti sui sistemi minion corretti.
• Usare i moduli di esecuzione remota per installare i pacchetti, trasferire i file, gestire i servizi e gestire gli utenti sui sistemi minion
• Gestire il controllo della configurazione sui sistemi minion con stati, pilastri, requisiti e dichiarazioni.
• Utilizzare il codice Jinja e YAML per gestire i sistemi minion con i file di stato.
  Applicare automaticamente lo stato desiderato tra i sistemi minion
• Utilizzare SaltStack SecOps per aggiornare le librerie dei contenuti di conformità e vulnerabilità.
• Utilizzare SaltStack SecOps per imporre la conformità e la bonifica dell’infrastruttura in base agli standard del settore.
• Utilizzare SaltStack SecOps per fornire la scansione automatica delle vulnerabilità e la bonifica dell’infrastruttura.

Programma didattico

1 Course Introduction
• Introductions and course logistics
• Course objectives

2 SaltStack Config Architecture
• Identify the SaltStack Config deployment types
• Identify the components of SaltStack Config
• Describe the role of each SaltStack Config component

3 SaltStack Config Security
• Describe local user authentication
• Describe LDAP and Active Directory authentication
• Describe the roles and permissions in vRealize Automation for SaltStack Config
• Describe the roles and permissions in SaltStack Config
• Describe the SecOps permissions in SaltStack Config
• Describe the advanced permissions available in SaltStack Config

4 Targeting Minions
• Describe targeting and its importance
• Target minions by minion ID
• Target minions by glob
• Target minions by regular expressions
• Target minions by lists
• Target minions by compound matching
• Target minions by complex logical matching

5 Remote Execution and Job Management
• Describe remote execution and its importance
• Describe functions and arguments
• Create and manage jobs
• Use the Activities dashboard

6 Configuration Control Through States, Pillars, Requisites, and Declarations
• Define the SaltStack states
• Describe file management in SaltStack Config
• Create the SaltStack state files
• Identify the components of a SaltStack state
• Describe pillar data and the uses of pillar data
• Configure pillar data on the SaltStack Config master server
• Use pillar data in variables in the state files
• Describe the difference between IDs and names in the state files
• Use the correct execution order
• Use requisites in the state files

7 Using Jinja and YAML
• Describe the SaltStack Config renderer system
• Use YAML in the state files
• Use Jinja in the state files
• Use Jinja conditionals, lists, and loops

8 Using SaltStack SecOps Comply
• Describe the SaltStack SecOps Comply architecture
• Describe CIS and DISA STIG benchmarks
• Describe the SaltStack SecOps Comply security library
• Describe the remediation differences between SaltStack SecOps and VMware Carbon Black®
• Create and manage the policies
• Create and manage the custom checks
• Run assessments on the minion systems
• Use SaltStack SecOps to remediate the noncompliant systems
• Manage the SaltStack SecOps Comply configuration options
• Manage the benchmark content ingestion

9 Using SaltStack SecOps Protect
• Describe Common Vulnerabilities and Exposures (CVEs)
• Use the Protect dashboard
• Create and manage the policies
• Update the vulnerability library
• Run the vulnerability scans
• Remediate the vulnerabilities
• Manage the vulnerability exemptions

Durata – 2 giorni

Erogazione – in Aula, On Site, Remoto

Requisiti PC e SW:

• Connessione Internet
• Web browser, Google Chrome
• Zoom

Language
Trainer: Italiano
Labs: Inglese
Slides: Inglese