Lock it Down - Securing your Puppet Infrastructure

Peter Souter

Puppet - Monday, 1/2/2016 14:40 - B1.015

Puppet is an awesome tool to automate the configuration of your infrastructure, but it's also a potential attack vector. In this talk, we'll discuss some common patterns and changes you can make to harden your Puppet infrastructure, from the basic good practises such as data abstraction in modules, to some advanced customisation you might need in a high-security setup.

About Peter Souter

Peter is a Professional Services Engineer at Puppetlabs, interested in the security implications of Puppet Infrastructure in high-security deployments, such as financial institutions.