Cloud Compliance with InSpec and Automate
summary
Automate 2 runs InSpec 2 scans across SSH/WinRM nodes and now account service API scanning for AWS and Azure, schedules them, and ships prebuilt cis aws foundations benchmark profiles; integrations discover nodes, attach creds or use SSM so EC2 can be scanned without SSH keys, and support region/subscription targets. Dashboard math and APIs return under ~300 ms even at 150,000 nodes, filtering modes distinguish shallow versus deep aggregates, and the live demo completes scans and reports.
AI-written summary · about
chapters (11)
- 0:00Start
- 4:30What Does Compliance Reporting Provide the User
- 5:13Integrations
- 5:40Account Service Api Scan
- 11:29Demo Time
- 15:57Memory Consumption
- 18:05Node Integrations
- 18:33Ec2 Scans
- 22:03Create a New New Scan Job
- 26:05Azure Integration
- 35:15Add an Integration for the Azure Api
related talks
21mAWS On Air ft. Amazon Inspector
25mTransform Your Security Practices With DevOps
01h 00mVulnerability management at scale drives enterprise transformation
36mImproving Security while Reducing Toil with DevSecOps
35mContinuous Cloud Security Automation
15mDevopsec: Rapid Security in the Cloud with AWS and CIS
22mAutomating the CIS Foundations Benchmark for AWS with Terraform
15mSecurely configure your AWS environments with CIS & Qualys