Questions tagged [security]

For questions related to IT Security, Information Security or DevSecOps.

Filter by
Sorted by
Tagged with
47 votes
7 answers
4k views

What are best and comprehensive practices to consider when running docker in production?

Finally, you are so much in love with Docker that you want to move your online business-critical production systems with sensitive customer data to a Docker Swarm. Some might even already have done so....
Ta Mu's user avatar
  • 6,802
24 votes
2 answers
11k views

What Is SecOps?

First when I heard the word SecOps, I thought of it as a management approach that aims to connect security and operations teams, in much the same way that DevOps unifies developers and operations team....
storm's user avatar
  • 1,759
63 votes
7 answers
27k views

How can I manage secrets in .tf and .tfstate?

I would like to use the Terraform MySQL Provider to keep a list of mysql users and grants handy for creating new test environments. The .tf and .tfstate files both seem to want to store the MySQL ...
Anthony Neace's user avatar
7 votes
3 answers
464 views

When your micro service in production needs a secret, where is the secret stored and retrieved from?

The context of the question is Secrets management. How do you manage storing and retrieving secrets for your micro service which is in production?
Zvika Nadav's user avatar
2 votes
2 answers
132 views

How do you know which secrets and credentials of your production services were used, and by whom/what?

The context of the question is Secrets management. As the title says, how do you know which secrets and credentials of your production services were used, and by whom/what?
Zvika Nadav's user avatar
1 vote
0 answers
89 views

Per machine credentials for privileges escalation using AWX [duplicate]

I have an inventory with a lot of hosts in it using the same credentials, but one host needs a different approach. For the ssh connection a different user is used, after the connection is established, ...
Jonas Hüsser's user avatar