One of the advantages of using an orchestration and configuration tool like Ansible is that it can be used to generate and deploy a complex set of configurations in a repeatable task across many hosts. In this chapter, we are going to a look at a tool that actually generates the configuration for you to then apply.

In this chapter, we will learn how to harden a Red Hat-based CentOS 7.5.1804 host using Ansible and OpenSCAP.