Chef Cloud Security provides visibility through streamlined audits, maintaining continuous compliance, CSPM and Cloud-Native security, and a coded approach.
Setting up your Environment
JSON Credentials:
To integrate Google cloud, you will first need to create a secret key within the GCP console. To do this -
- Log in to the GCP console, scroll to the Service account from IAM & Admin section, and select Create service account.
- Fill in the details as per the requirements and click on Done.
3. Open the manage key tab from the created account and select Create new key from the drop-down option.
4. Choose Json as the format and download the keys.
You can set up Cloud solutions in Chef Automate in three simple steps.
To start, you first need to connect your cloud-native environment (GCP) to Chef Automate UI.
- Click on Settings
- Node Integration > Create Integration
- Select GCP from the given options
- Give a valid name for your cloud management service
- Fill out necessary details concerning GCP JSON keys
- Save Integration
Note that the node's status should always be reachable when you save your integration.
The next step is to select the security profile you want to apply to your GCP node.
- Click on Compliance
- Profiles > Available profiles > Search for GCP Benchmark
- Click on Get
- The selected security profile should now be visible under the profiles section
With the profile selection and node integration completed, you need to create a scan job that will scan the selected cloud nodes based on the security profile.
- Click on Compliance
- Scan Jobs > Create Scan Job
- Select the Cloud node
- Select a Profile
- Run the Scan job
To check for the results of the scans.
- Click on Compliance
- Nodes
- Search and Click for the name of your test
You can find all the detailed passed/failed results of the scanned node.
You can download the compliance report as a CSV or in JSON format. Also, you can integrate any third-party tools like ServiceNow and Splunk within the Automate UI, where this data can be fed. In addition to all these features, Chef also provides APIs for external support.
Get more details of Chef End-to-End Cloud Security Management here.
