Learn to solve Zero Trust architectural challenges by leveraging SPIFFE and SPIRE.
INSTRUCTOR-LED COURSE
Zero Trust Security with SPIFFE and SPIRE (LFS482)
Who Is It For
This course is designed for developers, system administrators, security professionals, and architects involved in designing, deploying, and operating medium to large microservice-based systems.
read less
read more
What You’ll Learn
This course discusses the patterns and practices necessary for the adoption of Zero Trust Networking, as well as Zero Trust networking implementation models, use cases, scenarios, and outcomes enabled by open source software. You will install, make changes to, and operate SPIFFE and SPIRE deployments and harden your organization’s security postures by operationalizing a “least privilege” authorization model.
read less
read more
What It Prepares You For
Upon completion, you’ll be able to plan and implement a Zero Trust security roadmap tailored to your organization, identify security gaps and configure features and functions in an existing infrastructure and application platform environment, and much more.
read less
read more
Introduction
- The Linux Foundation{ Training
- The Linux Foundation{ Certifications
- The Linux Foundation{ Digital Badges
- Laboratory Exercises, Solutions and Resources
- Things Change in Linux and Open Source Projects
- Distribution Details
- Labs
Module 1 - Course Introduction
- Acknowledgements
- Lab 00: Setup
Module 2 - Foundations of Zero Trust
- Introduction to Zero Trust
- Cryptography Fundamentals
- Lab 1: Getting Hands on with PKI
- Authentication, Identity Documents and Authorization
- Module Summary
- Knowledge Test
Module 3 - SPIFFE and SPIRE Concepts
- Introduction to SPIFFE/SPIRE
- SPIFFE Concepts
- SPIRE Components
- Lab 2: Installing and Configuring SPIRE from Binaries
- Module Summary
- Knowledge Test
Module 4 - Using SPIRE
- Configuring SPIRE
- Managing Registration Entries
- Deploying SPIRE
- Lab 3: Setup SPIRE on Kubernetes with Kind
- Module Summary
- Knowledge Test
Module 5 - Workload Identities
- Managing SVIDS
- Lab 4: Getting SVIDS with SPIFFE-Helper
- SVID Operations with Client Libraries
- Lab 5: Using the Workload API with go-spiffe
- Module Summary
- Knowledge Test
Module 6 - AuthZ and Policy Engines
- Introduction to Authorization
- Policy Languages and Tools
- Policy Engines
- Open Policy Agent (OPA)
- Lab 6: Navigating Basic Authorization with Open Policy Agent
- Additional Policy Engines & DSLs
- Module Summary
- Knowledge Test
Module 7 - SPIRE and AuthZ
- AuthZ for the SPIRE Server
- Network AuthZ
- Building an AuthZ Architecture
- Service Mesh
- Zero Trust in Service Mesh
- Lab 7: Integrating SPIRE with OPA and Envoy
- Designing the SPIFFE ID Schema
- SPIRE and OIDC
- Lab 08: OpenID Connect Discovery
- Module Summary
- Knowledge Test
Module 8 - SPIRE Architecture Considerations
- Scaling and Growing SPIRE
- Lab 9: Deploying SPIRE in High Availability Mode
- SPIRE Architectures Continued
- Lab 10: Advanced Configuration 1 - Nested SPIRE
- Federated SPIRE
- Lab 11: Advanced Configuration 2 - Federated SPIRE
- Deployment Sizing Considerations
- Module Summary
- Knowledge Test
Module 9 - SPIRE Day Two Ops
- Day Two Operations
- Disaster Recovery
- Resources
- Module Summary
- Knowledge Test
Module 10 - The SPIFFE Ecosystem
- Open Source Integrations
- Vendor integrations
- Summary of SPIRE Integrations
- Lab 12: Cilium with SPIRE
- Module Summary
- Knowledge Test
Solutions
- Module 3 Knowledge Test Solutions
- Module 4 Knowledge Test Solutions
- Module 5 Knowledge Test Solutions
- Module 6 Knowledge Test Solutions
- Module 7 Knowledge Test Solutions
- Module 8 Knowledge Test Solutions
- Module 9 Knowledge Test Solutions
- Module 10 Knowledge Test Solutions
Closing and Evaluation Survey
Prerequisites
$3250
Jun, 3 - 5, 2024
9:00 am - 5:00 pm US/Central
Virtual, Instructor-Led
Sep, 9 - 11, 2024
9:00 am - 5:00 pm US/Central
Virtual, Instructor-Led
Dates don't work? Check out our partner schedule
Live Online (Virtual) or Live (Classroom)
3 days of Instructor-led class time
Hands-on Labs & Assignments
Resources & Course Manual
Certificate of Completion
Digital Badge
