Ansible security best practices

I am going to introduce Ansible into my data center, and I'm looking for some security best practice on where to locate the control machine and how to manage the SSH keys. Question 1: the control machine We of course need a control machine. The control machine has public SSH keys saved on it. If an attacker has access to the control machine, it potentially has access to the whole data center (or t

[inoueyuworks]

userify 社員っぽい人による serverfault 上での、 Ansible などプロビジョニングに関するセキュリティ問題についての解決指針についての回答