Automate Safely, NetDevOps Security Strategies

Описание: In Season 2, Talk 10 of NetDevOps Live! Hank tackles a question that comes up a lot.. how do we handle passwords in our code? Take a look at several suggestions to move your code up the security continuum!
Full details at http://bit.ly/2ZeoyIN

Presenter: Hank Preston   / hfpreston  

Topics Covered - Time Links
Agenda 2:!7
The Security Continuum 3:21
Don't let just anyone in... API Access Control 4:03
Principal of Least Privilege 5:39
Demo: NETCONF Access Control Model (NACM) 7:10
Protect the Management Plane 14:12
Spilling the beans on secrets 16:22
What is a secret? 16:31
12 Factor App and "Environment" 17:34
A Look at Environment Variables 19:06
Demo: Environment Variables and Python 20:44
Demo: "sourcing" environment variable files 26:40
Environment Variables in Ansible and Genie 28:26
Demo: Ansible and EnvVars 29:14
Demo: Genie and EnvVars 31:48
Sharing ENV VAR Templates 33:21
Leveraging Secret Vaults 34:34
Demo: Ansible Vault 37:31
Demo: Storing Secrets in NetBox 41:19
Demo: Retrieving NetBox Secrets in Python scripts 46:12
Just on more thing... .gitignore files 50:38
Summary 53:23
Webinar Resources 55:02
Code Exchange Challenge 55:54
Contact Info 56:37

Episode Description:
Is automation safe? Like all questions in IT, the answer is it depends. It depends on how you handle your secrets (not the kind you passed in middle school). It depends on how you authenticate your APIs. It depends on who you let talk to your API. It depends on many things.

This session will look at strategies you can implement TODAY to make sure your NetDevOps work is done safely.

NetDevOps Live! is produced by Cisco DevNet. Details can be found at https://developer.cisco.com/netdevops... and follow NetDevOps Live! on Twitter at   / netdevopslive