Ansible vs PCI
If you need to comply with PCI
requirements
like:
Requirement 2: Maintain an inventory of system components in scope for PCI DSS
to support effective scoping practices.
You will find that using public-key authentication is sometimes
forbidden
as it’s almost impossible to ensure employees are rotating the keys, keeping the
private key safe and with a strong password.
Using Ansible without ssh key based authentication is painful if you need to
run a playbook against hundreds of servers, as you will need to insert your
password ad nauseam.