Nā, he aha te vishing i roto i te haumarutanga tukutuku, ā, he aha me aro nui ai ngā kaiwhakawhanake? Vishing, he whakarāpopototanga mō te hītinihanga reo, he tikanga hangarau pāpori e whakamahia ai e ngā kaiwhakaeke ngā waeatanga waea, ngā karere reo rānei hei maminga i ngā ūnga kia whakaatu i ngā tohu tuakiri, kia tautuhi anō i ngā tohu, kia karo rānei i ngā mana whakahaere haumarutanga. Ahakoa i mua ko ngā whakaekenga a te Vishing i aro ki ngā kaimahi whānui, kua neke atu ngā kaiwhakaeke ki ngā kaiwhakawhanake, ki ngā miihini DevOps, me ngā kaiwhakahaere pūnaha, nā te mea he urunga tika ki te waehere ēnei tūranga, pipelines, me te hanganga kapua.
Tauira: hehe waea a te kaiwhakaeke e whakaari ana nō tō rōpū IT ā-roto, "Kei te huri mātou i ngā tohu GitHub nā te mea he aituā haumarutanga; me manatoko e au tō Waehere MFA. "
Kotahi te nekehanga hē, ā, ko tō waehere pūtake rānei pipeline ka hurahia ngā tohu mātauranga. I roto i ngā taiao kaiwhakawhanake, ka taea e te whakaeke vishing angitu te:
- I arahina ki CI/CD te tautuhi anō i ngā tohu me ngā whakatinanatanga kāore i whakamanahia
- Whakaaturia ngā kī API, ngā tohu SSH rānei kua rongoatia ā-rohe
- Whakakorehia ngā rēhita kapua me ngā ipu e whakamahia ana e te pūnaha hanga
Koia te take ehara i te mea whiriwhiri te mārama ki te tikanga o te vishing; he wāhanga ia o te whakarite i tō tuku. pipeline.
Ngā Whakaekenga Vishing o te Ao Tūturu e Pā Ana ki te Whakawhanake me te CI/CD Taiao
Kia titiro tātou ki te pānga o ngā whakaekenga vishing tūturu ki ngā taiao hangarau.
Mō ngā kaupapa mātauranga anake ngā āhuatanga haumaru kore i raro nei; kaua e tāruatia i roto i te whakaputanga, i te whakamātautau ā-roto rānei me te kore whakaaetanga.
- Te Takahanga Twitter 2020: I waea atu ngā kaiwhakaeke ki ngā kaimahi, e whakaari ana i a rātou anō he hangarau mōhiohio ā-roto. I whakatenatena rātou i ngā kaimahi ki te tohatoha i ngā waehere MFA, ā, i whiwhi rātou i te urunga ki muri e āhei ai te tango i ngā pūkete.
- Te Aituā GitHub (2022): I whaia ngā kaiwhakawhanake mā te waea e kī ana nō te tautoko haumarutanga rātou, hei ārahi i a rātou ki te "tautuhi anō" i ngā tohu tuakiri, ā, ka hua ake he urunga kore whakamanatanga ki ngā repo.
- Ngā horopaki whakahaere AWS: I whakamahia e ngā kaiwhakaeke te hangarau pāpori e ahu mai ana i te waea hei whakahohe i ngā tautuhi kupuhipa me te uru atu ki ngā pūkete kaiwhakawhanake e hono ana ki ngā tūranga IAM whakaputa.
Ki ngā kaiwhakawhanake, ehara ēnei i te mōrearea ā-roto. I roto i tētahi whakamātautau ā-roto a te tīma whero, i "whakaū" tētahi miihini i tētahi mea rūpahu pipeline te take mā te waea, ka mutu ka whakakorea te CI/CD kei te tukuna anō te tohu ki tētahi īmēra e whakahaerehia ana e te kaiwhakaeke. Koinei te uho o te whakaekenga vishing: te whakamahi i te akiaki, te whakawhirinaki, me te horopaki hangarau hei tinihanga i ngā tohunga e whakaaro ana he nui rawa ō rātou hangarau e kore e taea te tinihanga.
Te Mekameka Whakaeke: Mai i te Waea ki te Urunga Putunga Katoa
Anei te whanaketanga o te whakaekenga vishing i ia taahiraa, inā koa i roto i te DevOps, taiao whanaketanga rānei.
- Te Whakapā Tuatahi: tka waea mai te kaiwhakaeke, ka whakataruna i a ia hei tautoko IT, hei kaihoko, hei kaiwhakarato kapua rānei.
Tauira tuhinga:
"Kia ora, kua kitea e mātou he mea whakapae" login te mahi i roto i tō pūkete GitHub. Ka taea e au te manatoko i tō waehere MFA kia taea ai e mātou te tiaki tonu?"
- Te Kohi Tohu: Ka tinihanga te kaiwhakaeke i te patunga kia whakakitea ngā taipitopito tuakiri, ngā waehere OTP, kia tukuna rānei ngā whakaaetanga taupānga OAuth.
- Te Whakahoki Motuhake: Kia tae ki roto, ka tautuhi anō te kaiwhakaeke i ngā tohu tuakiri, ka tiki rānei CI/CD mea ngaro.
- Pipeline Whakaae: Ka panaia e rātou tētahi hanganga kino, ka whakarerekē i tētahi hōtuhi whakatinanatanga, ka tangohia rānei te waehere pūtake.
⚠️ Tauira kore haumaru, mō ngā kaupapa mātauranga anake. Kaua e whakamahia i roto i te mahi whakaputa.
Putanga haumaru:
⚠️ whakatūpato: Kaua e tā, e takiuru rānei i ngā taurangi tairongo (ngā tohu, ngā taipitopito tuakiri, ngā mea ngaro rānei) ki ngā rangitaki hanga. He maha ngā kaiwhakamahi me ngā pūnaha e uru atu ana ki ngā rangitaki, ā, ka taea e tēnei te arahi ki te whakaaturanga kāore i te whakaarohia.
He aha i kore ai e rawaka te mōhiotanga haumarutanga tuku iho
He maha ngā wā ka whakaaro ngā kaiwhakawhanake ka tiakina rātou e te "whakangungu mōhiotanga". Engari kāore e ranea te mōhio he aha te vishing ina ngaro ngā mahi whakamana hangarau. Ka whakamahia e ngā kaiwhakaeke ngā ngoikoretanga o ngā tikanga, ehara i te kuware anake:
- Ngā tukanga āwhina e tautuhi anō ana i te urunga i runga i ngā tono waea
- Te kore manatoko mō te tuakiri tautoko
- Te whakawhirinaki nui ki te MFA me te kore e whakamanahia te horopaki
Rārangi Arowhai Poto: Te Ārai i te Vishing a te Kaiwhakawhanake
- Kaua rawa e tohatoha i ngā waehere MFA, i ngā tohu rānei mā roto i ngā waea reo
- Manatokohia te tuakiri o te kaikaea mā te whaiaronga ā-roto, mā te whakaū kōrerorero rānei
- Whakatinanahia ngā tikanga waea whakahoki (waea atu mā te nama ā-roto kua manatokohia)
- Arotakehia te tēpu āwhina me te tautuhi anō i ngā rerengamahi mō te manatoko tuakiri
- Whakamahia ngā hongere haumaru (SSO, kaiwhakarato tuakiri) mō ngā tautuhi kupuhipa, tohu rānei
Tukanga Manatoko Tautuhi Anō Haumaru
- Kaua rawa e tohatoha MFA, tohu rānei mā te waea reo
- Whakamutua te waea ka waea atu mā te whakamahi i tētahi nama kua manatokohia ā-roto
- Whakaūtia te tono mā te tari āwhina mana, mā te tomokanga SSO rānei
- Me haere tonu ina manatokohia te tuakiri o te kaitono
Te Hanga Parenga ki te Vishing i roto i ngā Rerenga Mahi DevOps
Hei tiaki i ngā whakaekenga a te Vishing i roto i CI/CD me ngā taiao kaiwhakawhanake, me hono te mōhiotanga ki te whakatinanatanga hangarau. Ko ngā mahi whai hua ko:
- Motuhēhēnga Maha-Tauwehe (MFA) me te whakaū i waho o te roopu: kaua rawa e whakawhirinaki ki te MFA waea mō ngā mahi whakahaere.
- Ngā kaupapa here urunga wā-tūturu (JIT): whakawhāitihia ngā matapihi urunga mō ngā mahi tino mana.
- Manatoko aunoa: whakaoho i ngā matohi ina tautuhia anō ngā tohu tuakiri, ina huri ohorere rānei ngā whakaaetanga.
- Aroturukitanga whanonga: te kite i ngā tauira reo rerekē, ngā tauira urunga rānei e hono ana ki ngā taunekeneke tautoko.
Hei tauira:
Mā tēnei momo aunoatanga ka manatokohia mēnā he tika te mahi i tīmatahia e te tangata i mua i te whakamahinga.
Te Whakamana Tonu me te Whakatinanatanga Kaupapahere mō ngā Mahi i Tīmatahia e te Tangata
Ahakoa te kaiwhakawhanake tino whakangungua, ka taea e ia te hē i raro i te pehanga. Mā te manatoko tonu ka kore e taea e tētahi waeatanga vishing te karo i ngā mana haumarutanga aunoa.
Mā te whakamahi i te mana urunga e hangai ana ki ngā huanga (ABAC) me ngā kaupapa here e mōhio ana ki te horopaki, pipelineKa taea e s te manatoko aunoa:
- Pūtake o te tono (IP ā-roto, pūrere e mōhiotia ana, wātū rānei).
- Te wā o te mahi (i ngā hāora mahi, i ngā āhuatanga rerekē rānei i muri i ngā hāora mahi).
- Ngā huanga tuakiri (e taurite ana i ngā tūranga kaiwhakamahi me ngā whanonga o mua).
Ko te tikanga tēnei, kāore e whakaaetia aunoatia te tono tautuhi kupuhipa e tukuna ana i muri i ngā hāora mahi mai i tētahi nama hou, ahakoa i tinihangatia te kaiwhakamahi. Mā ēnei mana whakahaere hangarau ka uaua ake te whakahaere i ngā whakaekenga vishing, ā, ka tere ake hoki te kite.
Te Mōhiotanga + Te Aunoatanga = Te Tiakitanga Tuturu
Kei waenganui ngā kaiwhakawhanake i ngā whakaekenga tuakiri. Ehara i te mea he kaupapa whakamōhio noa iho te mārama ki te mea e kiia nei ko te vishing i roto i te haumarutanga tukutuku; he āwangawanga DevSecOps e hono ana ki te waehere, pipelines, me ngā hanganga.
Whakakotahitia te mōhiotanga me te aunoatanga:
- Whakamanahia ia tono urunga
- Whakamahia te whakaū i waho o te roopu mō ngā tautuhi anō i ngā tohu
- Aroturuki tonu mō ngā āhuatanga rerekē pipeline kararehe
Tuhinga rite Xygeni āwhina i ngā tīma whakawhanake me te haumarutanga ki te kite i ngā mahi e pā ana ki te vishing, te whakamana i te manatoko urunga horopaki, me tiaki CI/CD pipelines mai i ngā tūmomo riri e ahu mai ana i te hangarau pāpori. Kāore he pūmanawa kino e hiahiatia ana mō te whakaekenga Vishing; kotahi anake te reo pono e hiahiatia ana. Kia tino mohio kei whakawhirinaki noa ō pūnaha.
