Securing a Cloud Solution - Part 2

Introduction

Welcome to the Securing a Cloud Solution - Part 2 Practice Lab. In this module, you will be provided with the instructions and devices needed to develop your hands-on skills.

Learning Outcomes

In this module, you will complete the following exercises:

• Exercise 1 - Managing Projects, Users and Roles in OpenStack

After completing this lab, you will be able to:

• Create a security group for an instance and add a required rule to it
• Create a new user and verify the access for the user

Exam Objectives

The following exam objectives are covered in this lab:

CV0-002 2.1 Given a scenario, apply security configurations and compliance controls to meet given cloud infrastructure requirements.

• CV0-002 2.1.A Company security policies
• CV0-002 2.1.B Apply security standards for the selected platform

CV0-002 2.3 Given a cloud service model, implement defined security technologies to meet given security requirements.

• CV0-002 2.3.B Concepts of segmentation and micro-segmentation
• CV0-002 2.3.B.I Network
• CV0-002 2.3.B.II Storage
• CV0-002 2.3.B.III Compute

CV0-002 2.4 Given a cloud service model, apply the appropriate security automation technique to the target system

• CV0-002 2.4.A Tools
• CV0-002 2.4.A.V. Cloud portal

Lab Duration

It will take approximately 30 minutes to complete this lab.

Exercise 1 - Managing Projects, Users and Roles in OpenStack

As an administrator, you manage projects, users, and roles for an OpenStack instance. Roles define which actions users can perform on the project. You assign roles to user-project pairs. However, you can manage projects, users, and roles independently from each other.

During cloud set up, the operator defines at least one project, user, and role. You can add, update, and delete projects and users, assign users to one or more projects, and change or remove the assignment. To enable/disable a project/user, update that project/user.

You can also assign or change quotas at the project level.

In this exercise, you will manage the projects, members, users, and quotas for an OpenStack instance.

Learning Outcomes

After completing this exercise, you will be able to:

• Create a security group for an instance and add a required rule to it
• Create a new user and verify the access for the user