Dome9 is a Cloud Security Posture Management platform that allows to define and visualize the security posture, detecting misconfigurations and protecting against identity theft and data loss in cloud environments. Dome9 delivers security capabilities across Amazon Web Services, Microsoft Azure, Google Cloud Platform (GCP) and Kubernetes.
We have decided to approach cloud protection from an "agile" point of view, defining a methodology that allows teams to work comfortably with Dome9, isolating themselves from the logic and complexity of the interface.
To approach this way we've developed these items:
- Dome9 SDK
- Dome9 CLI
- Dome9 Agile
Repository | Documentation | Pypi
Usage:
import dome9
d9 = dome9.Dome9(key='xxxxxx', secret='yyyyyyy')
rulesets = d9.list_rulesets()
This Command Line Interface (CLI) is a simple tool that facilitates the daily use and helps enormously to work in agile methodologies. This package consumes calls through the Dome9 Python SDK mentioned above so it contains the same methods.
This CLI helps to work on Dome9 from our different agile services like Jenkins, Github or Travis, creating new rulesets, running
assessments or getting protected assets. You only need to download the script stored on ./cli/ folder and launch it with ./dome9cli.py --help
If you want to use it in any path or just typing dome9, you have to add the absolute path to your PATH environment variable. It will be
automated soon.
Usage:
dome9 generate_ruleset --name=ISO27001-Telefonica --cloud=aws --rulesFile=./rules-iso27001-telefonica.json >> ruleset.json
dome9 create_ruleset ./ruleset.json >> rulesetid.txt
dome9 run_assessment --rulesetId=`cat rulesetid.txt` --cloudAccountId="0000-0000-0000-0000"
Through this simple script and the CLI we are able to create rulesets dinamically using templates. The purpose of this tool is to have just a unique file of rules for each cloud environment (AWS, Azure, GCP & Kubernetes) and create different kind of rulesets based on those rule files. In this way, every team are able to use its own rulesets with specific tests on their environment.
Usage:
dome9agile --templateName="default" --rulesetKey="costsaving"
dome9agile --templateName="aura" --rulesetKey="networking"CDO Telefonica Copyright (c) Telefonica Digital España, 2019