InSpec tests vs. InSpec profiles

Is it correct to say there are two main types of InSpec usage, namely:

Howdy!

InSpec profiles are like Chef Cookbooks - they include groups of tests, called controls, that look at aspects of the system, and might have libraries and other stuff in them. Each control might be made up of several tests against the same resource or tests against multiple resources that have a similar goal. Profiles might have many controls that look at many resources, and those can be stored in one or more files. So a profile can be pretty flexible for what it is meant to be used for. There's some interesting baseline profiles at https://github.com/dev-sec/ that you can look at to get an idea of how all the pieces fit together.

"inspec_tests" is a section of the markup for Test Kitchen. it's not particularly related to what the structures are called in InSpec, it's just a way of telling TK where to find the InSpec components, whether they are in a single local file or in a profile from a remote source or wherever.