https://github.com/dsccommunity/xsafeharbor
https://github.com/dsccommunity/xsafeharbor
Last synced: over 1 year ago
JSON representation
- Host: GitHub
- URL: https://github.com/dsccommunity/xsafeharbor
- Owner: dsccommunity
- License: mit
- Created: 2015-04-15T22:43:05.000Z (over 11 years ago)
- Default Branch: dev
- Last Pushed: 2018-09-22T14:15:18.000Z (almost 8 years ago)
- Last Synced: 2025-03-24T00:16:50.815Z (over 1 year ago)
- Language: PowerShell
- Size: 47.9 KB
- Stars: 4
- Watchers: 20
- Forks: 3
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
[](https://ci.appveyor.com/project/PowerShell/xsafeharbor/branch/master)
# xSafeHarbor
The **xSafeHarbor** module contains the DSC configurations that allow you to setup the **SafeHarbor** example.
This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additional questions or comments.
## Contributing
Please check out common DSC Resources [contributing guidelines](https://github.com/PowerShell/DscResource.Kit/blob/master/CONTRIBUTING.md).
## Description
The **xSafeHarbor** module contains the **Assert-SafeHarborScenario.ps1** script file.
This script allows you to exercise the **SafeHarbor** example by setting up a secure environment to run a particular application or service inside of an assume-breached network.
This substantially reduces the attack surface of the application or service by configuring a highly customized, application specific environment, by limiting user access and by having "Just Enough" administrative control with full auditing.
To learn more details about this example, please see [this blog post](http://blogs.msdn.com/b/powershell/archive/2014/07/21/creating-a-secure-environment-using-powershell-desired-state-configuration.aspx).
Note: This example require the use of [Windows Management Framework (WMF) 5.0 Preview](http://go.microsoft.com/fwlink/?LinkId=398175).
## Details
### Assert-SafeHarborScenario
* **BaseVhdFilePath**: (Mandatory) Path to VHD file that would be used as base image for all the VMs.
* **Credentials**: Collection of credentials for following user names.
If not specified, the script will prompt for:
- DHCPServer\Administrator
- Corporate\Administrator
- Corporate\User1
- Corporate\Papa
- Corporate\DeptHead
- Safeharbor\Administrator
- Safeharbor\Mata
* **VhdDestinationPath**: Path where differencing VHDs will be stored.
* **Validate**: If specified, will run the validation steps at the end of example.
* **PauseBetweenStages**: If specified, pauses the script execution between various stages of example setup
## Versions
### Unreleased
* Update appveyor.yml to use the default template.
* Added default template files .codecov.yml, .gitattributes, and .gitignore, and
.vscode folder.
* Updated configuration SafeHarborConfiguration.psm1 to pass tests.
### 1.0.0.1
* Minor bug fix: Replaced hardcoded hotfix ID for WMF with test for that version or higher.
### 1.0.0.0
* Initial release with the **SafeHarbor** example
## Examples
### Setup SafeHarbor example on a Hyper-V host
```powershell
$baseVhdFilePath = ‘C:\BaseVhd\serverdatacenter_en-us.vhd
.\Assert-SafeHarborScenario.ps1 -BaseVhdFilePath $baseVhdFilePath -Validate –PauseBetweenStages
```