Enterprise Cloud Security and Governance

Playbook for SSH hardening

In the earlier use case, we discussed the basics of how Ansible runs. In this section, we will write a small and simple Ansible task that will do some SSH-specific hardening configuration.

We have already discussed SSH hardening; now it's time to implement some of the configurations as a part of our automation journey.

I have created a new role called custom-ssh under the roles directory. Inside the custom-ssh directory, there is a tasks directory that contains main.yml that contains task definitions that need to be run. The structure looks similar to the following image:

If we open main.yml, which is under roles/custom-ssh/tasks ...