Review Access Across Infra Server and Automate
A 3-step recipe with Chef. We can help you get access.
Recipe · 3 steps
Review Access Across Infra Server and Automate
with Chef
Collect Infra Server clients and users plus Automate IAM users for reconciliation.
- List the Infra Server API clients. These are the RSA-keyed machine identities nodes and pipelines use, and they are the most common source of stale, over-privileged access.
- List the human users associated with the Infra Server organization so departures can be reconciled against the client list.
- List the Chef Automate IAM users, covering the visibility and compliance plane that the Infra Server user list does not describe. This step authenticates with an Automate API token rather than Chef signed headers.
What you'll need to have ready
- reviewLabel: An optional label for the review run (e.g. "2026-Q3-access-review").
For your developer
Arazzo workflow chef:review-access, 3 operations: listClients → listUsers → listIamUsers. Specs on APIs.io.