3.2 - Security Blueprint

What's the code?

This blueprint can be added to the Tuono Environment that contains the previous blueprints:

1. Module 101 Location Blueprint

2. Module 102 Network Blueprint

It is then applied to update our allowed ports into our defined subnet.

#
# Tuono Hands-On Lab
# HOL-103
# This is an example blueprint that demonstrates securing a subnet 
# and the groundwork for security groups and NACLs
#
---
networking:
# Module 3 Protocols
  protocol:
    web-server:
      ports:
        - port: 22
          proto: tcp
        - port: 80
          proto: tcp
    ping:
      ports:
        - proto: icmp


# Module 3 adds a Firewall using a protocol
  firewall:
    fw-external-access:
      rules:
        - protocols: web-server
          to: self
        - protocols: ping
          to: self

blueprints/Module_103_Security.yml at trunk · tuono/blueprintsGitHub