@AllwaysHyPe@WindosNZ@ansible Using a vault to encrypt at rest should be a given. I'm concerned about how it's used in-flight. I've seen some tools use environment variables to store the plain text secret while in use.
@BrettMiller_IT I would add Cisco Umbrella/OpenDNS. Restricts sites based on category for your whole network. Doubles as a good ad blocker. Set it and forget it. If you want more granular control, go for a Pi-Hole.
@JeffHicks Is it for real this year? Kinda got burned on the PowerShell automation conference last fall, not sure if the boss will go for it this time.
@AgrajagHates @lamw@alanrenouf This is 100% true! I just wish I had the motivation to educate those in our security org, but I have other important work to do, so it's easier to design around their silly requirements. ๐