4 ms·

How is Ansible a security disaster?

• eeZah7Ux 7y ago
  A system designed to SSH into production host with high privileges and make changes automatically instead of enforcing staging...
  • apple4ever 7y ago
    That’s not really a security disaster unless you consider all of SSH a security disaster. If you are concerned about Ansible SSH’ing in (which means you are concerned about any person SSH’ing in), you just do the standard SSH hardening.
    • eeZah7Ux 7y ago
      ...and yet SSHing on a production system to make configuration changes is prohibited in many large companies including some FAANGs. Because you (or some intern hired a week ago) are 1 typo away from making a disaster. For the record, security includes availability and this is an availability risk.