[Autogenerated] Once we move on to the deploy phase,
there's different types of testing we need to undertake.
Two types of testing that are common at this phase
is testing security certificates.
DIS ensures that old transport security Larry Certificate, sir.
Valid indeed and issued correctly.
This is required to be done at his face because normally is different.
Types of certificates are used in different environments on,
we need to make sure the certificates use in your
deployed environment are valid and correct.
Application hardening is also something that should be
decided upon during the deploy phase.
Reducing the attack surface area by hardening your servers
and applications is an important task.
There are many different tools available for checking the
configuration of your certificates.
I've run SSL Labs testing on my own website.
Richard harper dot com.
As you can see here a greatest given based on the checks that the
quality SSL Labs site undertakes in relation to hardening,
it is important to understand that the more that you harden your application,
the less attack surface area is available for Attackers,
thereby reducing the likelihood of a breach put.
The Amazon marketplace stirs a number of readily available
pre hardened images that you can use.
So instead of just selecting a standard Lennox image,
you could select the C I s Red Hat Enterprise Lennix seven hardened
image or a Microsoft Windows Server 2016 hardened image.
These images are hardened to the C.
I s hardening standard on this means that the attack surface area for these
images is greatly reduced as part of your deployment script.
Selecting one of these hardened images provides you with greater
safeguards in relation to vulnerabilities in your environments.