You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Operating Systems where the module can be installed:
47
47
48
48
- Linux
49
-
-MacOS
49
+
-macOS
50
50
- Windows
51
51
52
52
The Guest Configuration resource module requires the following software:
@@ -79,8 +79,8 @@ To install the **GuestConfiguration** module in PowerShell:
79
79
80
80
Even in Linux environments, Guest Configuration utilizes Desired State Configuration as a language abstraction.
81
81
The implementation is based in native code (C++) so it does not require loading PowerShell at this time.
82
-
However, it does require a configuration MOF file describing basic details about the environment. DSC is acting as a "wrapper" for InSpec to standardize how it is executed, how parameters are provided from ARM, and how output is captured and returned to the service.
83
-
Very little knowledge of DSC is required
82
+
However, it does require a configuration MOF file describing basic details about the environment. DSC is acting as a "wrapper" for InSpec to standardize how it is executed, how parameters are provided from Azure Resource Manager, and how output is captured and returned to the service.
Note that the `Node AuditFilePathExists` command is not technically required but it produces a file named `AuditFilePathExists.mof` rather than the default, `localhost.mof`. Having the .mof file name follow the configuration makes it easy to organize many files when operating at scale.
149
+
The `Node AuditFilePathExists` command is not technically required but it produces a file named `AuditFilePathExists.mof` rather than the default, `localhost.mof`. Having the .mof file name follow the configuration makes it easy to organize many files when operating at scale.
The next step is to publish the file to blob storage. The script below contains a function you can use to automate this task. Note that the commands used in the `publish` function require the `Az.Storage` module.
213
+
The next step is to publish the file to blob storage. The script below contains a function you can use to automate this task. The commands used in the `publish` function require the `Az.Storage` module.
214
214
215
215
```azurepowershell-interactive
216
216
function publish {
@@ -343,8 +343,8 @@ override values are provided through Azure Policy and don't impact how the Confi
343
343
authored or compiled.
344
344
345
345
With InSpec, parameters are typically handled as input either at runtime or as code using attributes.
346
-
Guest Configuration obfuscates this process so input can be provided to ARM when policy is assigned.
347
-
An attributes file is automatically created within the machine. It does not need to be included in your project.
346
+
Guest Configuration obfuscates this process so input can be provided to Azure Resource Manager when policy is assigned.
347
+
An attributes file is automatically created within the machine. You do not need to create and add a file in your project.
348
348
There are two steps to adding parameters to your Linux audit project.
349
349
350
350
Define the input in the Ruby file where you script what to audit on the machine. An example is given below.
Operating Systems where the module can be installed:
47
47
48
48
- Linux
49
-
-MacOS
49
+
-macOS
50
50
- Windows
51
51
52
52
The Guest Configuration resource module requires the following software:
@@ -80,7 +80,7 @@ To install the **GuestConfiguration** module in PowerShell:
80
80
Guest Configuration utilizes PowerShell Desired State Configuration as a language abstraction
81
81
for writing what audit in Windows and how the audits should be performed.
82
82
An instance of PowerShell 6.2 is loaded and managed by the agent to host the environment,
83
-
so there is no conflict wih usage of PowerShell DSC in Windows PowerShell 5.1, and there is no
83
+
so there is no conflict with usage of PowerShell DSC in Windows PowerShell 5.1, and there is no
84
84
requirement to pre-install PowerShell 6.2 or later.
85
85
86
86
For an overview of DSC concepts and terminology, see
@@ -183,7 +183,7 @@ and not communicating with the service.
183
183
184
184
Create a DSC configuration. The following PowerShell script example creates a configuration
185
185
named **AuditBitLocker**, imports the **PsDscResources** resource module, and uses
186
-
the `Service` resource to audit for a running service. This can be executed from a Windows or MacOS machine.
186
+
the `Service` resource to audit for a running service. The configuration script can be executed from a Windows or macOS machine.
187
187
188
188
```powershell
189
189
# Define the DSC configuration and import GuestConfiguration
@@ -205,7 +205,7 @@ Configuration AuditBitLocker
205
205
AuditBitLocker -out ./Config
206
206
```
207
207
208
-
Note that the`Node AuditBitlocker` command is not technically required but it produces a file named `AuditBitlocker.mof` rather than the default, `localhost.mof`. Having the .mof file name follow the configuration makes it easy to organize many files when operating at scale.
208
+
The`Node AuditBitlocker` command is not technically required but it produces a file named `AuditBitlocker.mof` rather than the default, `localhost.mof`. Having the .mof file name follow the configuration makes it easy to organize many files when operating at scale.
209
209
210
210
Once the MOF is compiled, the supporting files must be packaged together. The completed package is
211
211
used by Guest Configuration to create the Azure Policy definitions.
The next step is to publish the file to blob storage. The script below contains a function you can use to automate this task. Note that the commands used in the `publish` function require the `Az.Storage` module.
257
+
The next step is to publish the file to blob storage. The script below contains a function you can use to automate this task. The commands used in the `publish` function require the `Az.Storage` module.
0 commit comments