{"id":132,"date":"2017-07-07T10:56:36","date_gmt":"2017-07-07T18:56:36","guid":{"rendered":"http:\/\/nerdsector.com\/ns\/?p=132"},"modified":"2017-07-11T09:16:24","modified_gmt":"2017-07-11T17:16:24","slug":"inspec-tool-create-compliance-code","status":"publish","type":"post","link":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/","title":{"rendered":"InSpec a tool to create compliance as code"},"content":{"rendered":"<p>Inspec\u00a0 (<a href=\"https:\/\/www.inspec.io\/\">link<\/a>) is an open source testing framework for infrastructure with a human readable language for specifying compliance, security and other policy requirements.<\/p>\n<p>In short, it is a self-documenting testing &amp; audit framework where infrastructure and security compliance requirements can be expressed as code.\u00a0 (Compliance as code)<\/p>\n<p><a href=\"http:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png\"><img loading=\"lazy\" decoding=\"async\" data-attachment-id=\"136\" data-permalink=\"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/inspec\/\" data-orig-file=\"https:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png\" data-orig-size=\"348,145\" data-comments-opened=\"1\" data-image-title=\"inspec\" data-image-description=\"&lt;p&gt;inspec code image&lt;\/p&gt;\n\" data-image-caption=\"&lt;p&gt;inspec code image&lt;\/p&gt;\n\" data-large-file=\"https:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png\" class=\"alignleft wp-image-136 size-full\" src=\"http:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png\" alt=\"InSpec sample code snippet\" width=\"348\" height=\"145\" \/><\/a><\/p>\n<h2><b>What Problem is it trying to solve?<\/b><\/h2>\n<p>Inspec solves multiple problems:<\/p>\n<ul>\n<li>As companies adopt continuous delivery &amp; deployment methods; infrastructure and other environment dependencies are abstracted into infrastructure-as-code artifacts. These code artifacts are then checked into source control and used to produce immutable infrastructure.\u00a0\u00a0 Inspec can be used to test\/audit the systems that the infrastructure-as-code produced to determine if it meets the intended requirements.\u00a0\u00a0 Inspec profile artifacts define the tests and policies that are used to validate the infrastructure which in turn can be version controlled and checked into source control.\u00a0 The Inspec\u00a0 profiles can then be called from CI\/CD pipeline tools such as Jenkins to automate the running of the Inspec tests.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<ul>\n<li>Another use case for Inspec is compliance testing.\u00a0 Inspec can be used to codify security or compliance requirements into a series of controls\/tests.\u00a0 In this use case the Inspec profile becomes a compliance-as-code artifact that can be version controlled and checked into source control.\u00a0 These compliance-as-code artifacts can also be used as a test pattern for use in CI\/CD tools such as Jenkins thus adding compliance testing to a CI\/CD pipeline.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><b>What does it do?\/ How does it do it?<\/b><\/h2>\n<p>Inspec developers create test profiles that are understandable, declarative, unambiguous and group them into a descriptive artifact that can contain additional meta data such as security control numbers.\u00a0 These profiles are code-artifacts that can be version controlled and used repeatedly to test systems to determine if they meet the standard.<\/p>\n<p>Inspec can be run locally on systems with the Inspec executable as well as on remote target systems via SSH or Windows winrm methods.\u00a0 Target systems include virtual machines or docker containers.\u00a0 Inspec also is extensible via resource packs.\u00a0 Some example resources packs include cloud services such as AWS, Azure and private cloud infrastructure such as VMware as well as Chef\/test-Kitchen.<\/p>\n<h2><b>Tools Integrations<\/b><\/h2>\n<p>CI\/CD Pipeline tools: Jenkins, VSTS<\/p>\n<p>Cloud Platforms: AWS , Azure services and resources can be tested\/audited via Inspec resource packs for AWS and Azure.<\/p>\n<h2><b>Value Proposition\/Benefits<\/b><\/h2>\n<p>Inspec brings automated testing, security policies and compliance control auditing together into single human readable expressive language.\u00a0 The Inspec profile artifacts are self-documenting in that they can read by non-developers who can view the tests and criteria used to test the environment.<\/p>\n<h2><b>Similar Products<\/b><\/h2>\n<p><a href=\"http:\/\/serverspec.org\/\">Serverspec<\/a> &#8211; Serverspec is a similar tool which allows you to create Rspec tests which primarily validate infrastructure resources.\u00a0 (services, ports, packages etc.)\u00a0 Inspec started as a Serverspec extension and developed into its own standalone project.\u00a0 Inspec adds compliance testing capabilities.<\/p>\n<p><a href=\"https:\/\/github.com\/philpep\/testinfra\">Testinfra<\/a> &#8211; Testinfra is ServerSpec equivalent in python and is written as a plug-in to the powerful Pytest test engine.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Inspec\u00a0 (link) is an open source testing framework for infrastructure with a human readable language for specifying compliance, security and other policy requirements. In short, it is a self-documenting testing &amp; audit framework where infrastructure and security compliance requirements can be expressed as code.\u00a0 (Compliance as code) What Problem is it trying to solve? Inspec &hellip; <a href=\"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;InSpec a tool to create compliance as code&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[35],"tags":[37,36,38],"class_list":["post-132","post","type-post","status-publish","format-standard","hentry","category-infrastructure-as-code","tag-compliance","tag-infosec","tag-infrastructure-as-code"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>InSpec a tool to create compliance as code - Nerdsector.com<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"InSpec a tool to create compliance as code - Nerdsector.com\" \/>\n<meta property=\"og:description\" content=\"Inspec\u00a0 (link) is an open source testing framework for infrastructure with a human readable language for specifying compliance, security and other policy requirements. In short, it is a self-documenting testing &amp; audit framework where infrastructure and security compliance requirements can be expressed as code.\u00a0 (Compliance as code) What Problem is it trying to solve? Inspec &hellip; Continue reading &quot;InSpec a tool to create compliance as code&quot;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/\" \/>\n<meta property=\"og:site_name\" content=\"Nerdsector.com\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-07T18:56:36+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2017-07-11T17:16:24+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png\" \/>\n<meta name=\"author\" content=\"mrcaution\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"mrcaution\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/\"},\"author\":{\"name\":\"mrcaution\",\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/#\\\/schema\\\/person\\\/c44c899761720267903204249c3cab2f\"},\"headline\":\"InSpec a tool to create compliance as code\",\"datePublished\":\"2017-07-07T18:56:36+00:00\",\"dateModified\":\"2017-07-11T17:16:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/\"},\"wordCount\":502,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/nerdsector.com\\\/ns\\\/wp-content\\\/uploads\\\/2017\\\/07\\\/inspec.png\",\"keywords\":[\"Compliance\",\"InfoSec\",\"Infrastructure-as-code\"],\"articleSection\":[\"Infrastructure-as-code\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/\",\"url\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/\",\"name\":\"InSpec a tool to create compliance as code - Nerdsector.com\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/#primaryimage\"},\"thumbnailUrl\":\"http:\\\/\\\/nerdsector.com\\\/ns\\\/wp-content\\\/uploads\\\/2017\\\/07\\\/inspec.png\",\"datePublished\":\"2017-07-07T18:56:36+00:00\",\"dateModified\":\"2017-07-11T17:16:24+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/#\\\/schema\\\/person\\\/c44c899761720267903204249c3cab2f\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/2017\\\/07\\\/07\\\/inspec-tool-create-compliance-code\\\/#primaryimage\",\"url\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/wp-content\\\/uploads\\\/2017\\\/07\\\/inspec.png\",\"contentUrl\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/wp-content\\\/uploads\\\/2017\\\/07\\\/inspec.png\",\"width\":348,\"height\":145,\"caption\":\"inspec code image\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/#website\",\"url\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/\",\"name\":\"Nerdsector.com\",\"description\":\"Technology News, Tips and More\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/#\\\/schema\\\/person\\\/c44c899761720267903204249c3cab2f\",\"name\":\"mrcaution\",\"url\":\"https:\\\/\\\/nerdsector.com\\\/ns\\\/author\\\/mrcaution\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"InSpec a tool to create compliance as code - Nerdsector.com","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/","og_locale":"en_US","og_type":"article","og_title":"InSpec a tool to create compliance as code - Nerdsector.com","og_description":"Inspec\u00a0 (link) is an open source testing framework for infrastructure with a human readable language for specifying compliance, security and other policy requirements. In short, it is a self-documenting testing &amp; audit framework where infrastructure and security compliance requirements can be expressed as code.\u00a0 (Compliance as code) What Problem is it trying to solve? Inspec &hellip; Continue reading \"InSpec a tool to create compliance as code\"","og_url":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/","og_site_name":"Nerdsector.com","article_published_time":"2017-07-07T18:56:36+00:00","article_modified_time":"2017-07-11T17:16:24+00:00","og_image":[{"url":"http:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png","type":"","width":"","height":""}],"author":"mrcaution","twitter_misc":{"Written by":"mrcaution","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/#article","isPartOf":{"@id":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/"},"author":{"name":"mrcaution","@id":"https:\/\/nerdsector.com\/ns\/#\/schema\/person\/c44c899761720267903204249c3cab2f"},"headline":"InSpec a tool to create compliance as code","datePublished":"2017-07-07T18:56:36+00:00","dateModified":"2017-07-11T17:16:24+00:00","mainEntityOfPage":{"@id":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/"},"wordCount":502,"commentCount":0,"image":{"@id":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/#primaryimage"},"thumbnailUrl":"http:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png","keywords":["Compliance","InfoSec","Infrastructure-as-code"],"articleSection":["Infrastructure-as-code"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/","url":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/","name":"InSpec a tool to create compliance as code - Nerdsector.com","isPartOf":{"@id":"https:\/\/nerdsector.com\/ns\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/#primaryimage"},"image":{"@id":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/#primaryimage"},"thumbnailUrl":"http:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png","datePublished":"2017-07-07T18:56:36+00:00","dateModified":"2017-07-11T17:16:24+00:00","author":{"@id":"https:\/\/nerdsector.com\/ns\/#\/schema\/person\/c44c899761720267903204249c3cab2f"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nerdsector.com\/ns\/2017\/07\/07\/inspec-tool-create-compliance-code\/#primaryimage","url":"https:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png","contentUrl":"https:\/\/nerdsector.com\/ns\/wp-content\/uploads\/2017\/07\/inspec.png","width":348,"height":145,"caption":"inspec code image"},{"@type":"WebSite","@id":"https:\/\/nerdsector.com\/ns\/#website","url":"https:\/\/nerdsector.com\/ns\/","name":"Nerdsector.com","description":"Technology News, Tips and More","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nerdsector.com\/ns\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/nerdsector.com\/ns\/#\/schema\/person\/c44c899761720267903204249c3cab2f","name":"mrcaution","url":"https:\/\/nerdsector.com\/ns\/author\/mrcaution\/"}]}},"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p2Ldd1-28","jetpack_likes_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/posts\/132","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/comments?post=132"}],"version-history":[{"count":6,"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/posts\/132\/revisions"}],"predecessor-version":[{"id":139,"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/posts\/132\/revisions\/139"}],"wp:attachment":[{"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/media?parent=132"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/categories?post=132"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nerdsector.com\/ns\/wp-json\/wp\/v2\/tags?post=132"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}