'zero-trust' 검색 결과

Deploy and configure Tailscale as a WireGuard-based zero trust mesh VPN with identity-aware access controls, ACLs, and exit nodes for secure peer-to-peer connectivity.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure microsegmentation policies to enforce least-privilege workload-to-workload access using tools like VMware NSX, Illumio, and Calico, preventing lateral movement in zero trust architectures.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure Linkerd to manage communication between services on Kubernetes. Covers installation, mutual authentication between services, access policies, gradual traffic shifts to new releases, retries, timeouts, and monitoring commands for inspecting traffic and diagnosing connection issues.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Install Linkerd on Kubernetes
• Configure service authentication and access policies
• Shift a portion of traffic to a new release

Configure AWS Verified Access for VPN-free access to internal applications. Combine user identity and device security checks, write Cedar access policies, and use Terraform and AWS RAM to deploy and share access controls across AWS accounts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Replacing VPN access to internal applications
• Writing policies based on users and device security
• Deploying Verified Access with Terraform

Configure Zscaler Private Access to replace VPN access with access to specific internal applications. The skill covers connectors, application groups, identity and device checks, browser access, and logging for deployment and migration reviews.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Migrating remote access from VPN to ZPA
• Limiting application access by user group and device condition
• Providing contractors with browser access to approved applications

Deploy a Software-Defined Perimeter that connects verified users to authorized applications. Configure single-packet authorization, mutual certificate authentication, access policies, and monitoring, then test whether unauthorized connections and access between applications are blocked.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Building zero trust access to internal applications
• Hiding services from unauthenticated network scans
• Testing certificate authentication and access restrictions

Design and implement Google Cloud serverless web apps with separate presentation, application, and data layers. Produces architecture diagrams, Terraform infrastructure code, deployment instructions, and validation scripts for private networking and controlled access between layers.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Design a serverless web app with separate application layers
• Generate Terraform for private Cloud Run and Cloud SQL connections
• Plan regional data residency requirements

DingTalk Workspace CLI (dws) - officially open-sourced cross-platform CLI tool from DingTalk. Provides 86 commands across 12 products: Contact, Chat, Bot, Calendar, Todo, Approval, Attendance, Ding, Report, AITable, Workbench, DevDoc. Built in Go with zero-trust security architecture. Use when user wants to operate DingTalk resources.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. Masters multi-cloud connectivity, service mesh, zero-trust networking, SSL/TLS, global load balancing, and advanced troubleshooting. Handles CDN optimization, network automation, and compliance. Use PROACTIVELY for network design, connectivity issues, or performance optimization.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implement Linkerd service mesh patterns for lightweight, security-focused service mesh deployments. Use when setting up Linkerd, configuring traffic policies, or implementing zero-trust networking with minimal overhead.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Protect internal apps with Cloudflare Access, device posture, and Zero Trust policies.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

HashiCorp Vault, cloud secret managers, rotation strategies, and zero-trust secret access

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Reduces attack surface across OS, container, cloud, network, and database layers using CIS Benchmarks and zero-trust principles. Use when hardening production infrastructure, meeting compliance requirements, or implementing defense-in-depth security.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Implement production-ready service mesh deployments with Istio, Linkerd, or Cilium. Configure mTLS, authorization policies, traffic routing, and progressive delivery patterns for secure, observable microservices. Use when setting up service-to-service communication, implementing zero-trust security, or enabling canary deployments.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Cloudflare Zero Trust Access authentication for Workers. Use for JWT validation, service tokens, CORS, or encountering preflight blocking, cache race conditions, missing JWT headers.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Assists in designing and implementing secure n-tier serverless web applications and microservices on Google Cloud. Use when users need architecture designs, security checklists, Terraform code, or deployment guidance for multi-tier serverless apps, regional data residency / European sovereignty compliance, zero-trust private VPC networking, or Private Service Connect. Don't use for VM, GKE, or non-Google Cloud architectures.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Design and configure Microsoft Entra app registrations for secure authentication and authorization. Use this skill when users need OAuth, OpenID Connect, API permissions, app roles, or multi-tenant identity. Covers auth flows, credentials, API permissions, consent models, and zero-trust patterns.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Deploy a Software-Defined Perimeter using the CSA v2.0 specification with Single Packet Authorization, mutual TLS, and SDP controller/gateway configuration to enforce zero trust network access.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configuring Zscaler Private Access (ZPA) to replace traditional VPN with zero trust network access by deploying App Connectors, defining application segments, configuring access policies based on user identity and device posture, and integrating with IdPs.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configuring Google Cloud Identity-Aware Proxy (IAP) to enforce per-request identity verification for Compute Engine, App Engine, Cloud Run, and GKE services using access levels, context-aware policies, and programmatic access with service accounts.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure AWS Verified Access to provide VPN-less zero trust network access to internal applications using identity and device posture verification with Cedar policy language.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when performing cybersecurity operations - offensive or defensive - including threat detection and hunting, SOC operations, incident response, digital forensics and DFIR, malware analysis and reverse engineering, threat intelligence, cloud/container/network/application/API security, identity-access and zero-trust, OT/ICS and endpoint security, vulnerability and supply-chain management, DevSecOps, cryptography, AI security, compliance and governance, and red-team or penetration testing under signed rules of engagement; routes to one of 800+ technique playbooks mapped to MITRE ATT&CK, D3FEND, and NIST CSF.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Enforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control pod-to-pod traffic, restrict egress, and implement zero-trust microsegmentation.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

bu skill covers Dağıt:ing HashiCorp Vault for centralized secrets management across cloud environments, including dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes integration. It addresses eliminating hardcoded credentials from application code and CI/CD pipelines by implementing short-lived, automatically rotated secrets.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.