WorkSpacesへのアクセス制限を考える

みんなIPアクセスコントロールグループを活用しようぜ！というLTです。#jawsug #jawsugfuk
イベントはこちらから：
【オンライン開催】JAWS-UG 福岡 #11：8度目もちょっと濃い目にAWSの話をしてみよう ～あつまれ サメのもり～ - JAWS-UG九州 | Doorkeeper https://jaws-ug-kyushu.doorkeeper.jp/events/111457

Transcript

1. 8PSL4QBDFT΁ͷ
   ΞΫηε੍ݶΛߟ͑Δ
   +"846(෱Ԭ-5
   ΋ͬ͞Μ
   

   View Slide

2. ࣗݾ঺հ
   w ໊લɿ΋ͬ͞Μ
   w 5XJUUFS!@NPTTBOO@U
   w "84ͷςΫχΧϧαϙʔτΤϯδχΞ
   !Ϋϥεϝιου
   w ੜ·Ε΋ҭͪ΋෱Ԭݝ
   w ޷͖ͳ"84αʔϏε
   8PSL4QBDFT 4UFQ'VODUJPOT
   

   View Slide

3. ࠓ೔ͷ݁࿦
   

   View Slide

4. 8PSL4QBDFTͷϩάΠϯ੍ݶʹ͸
   *1ΞΫηείϯτϩʔϧάϧʔϓΛ࢖͓͏
   

   View Slide

5. 2ηΩϡϦςΟάϧʔϓ͡Όμϝʁ
   

   View Slide

6. "࢖͍෼͚Δඞཁ͕͋Γ·͢
   w 8PSL4QBDF΁ͷೝূΛߦ͏ΞΫηεݩ*1ΞυϨεΛ੍ݶ͢Δ
   ˠ*1ΞΫηείϯτϩʔϧ
   w ೝূҎ֎ͷΞΫηε 1JOHͳͲͷ௨৴
   Λ੍ݶ͢Δ
   ˠηΩϡϦςΟάϧʔϓ
   

   View Slide

7. Ҿ༻ɿ8IBU*T"NB[PO8PSL4QBDFT "NB[PO8PSL4QBDFT
   IUUQTEPDTBXTBNB[PODPNXPSLTQBDFTMBUFTUBENJOHVJEFBNB[POXPSLTQBDFTIUNMBSDIJUFDUVSF
   

   View Slide

8. w ͭͷ8PSL4QBDFʹͭͷ&/*͕Ξλον͞Ε·͢
   w σΟϨΫτϦʹ઀ଓ͠ɺೝূ΍ը໘ετϦʔϛϯάΛߦ͏&/*
   w ೝূɺը໘഑৴Ҏ֎ͷ௨৴Λ୲͏&/* FUI
   
   w ௨৴ܦ࿏Λߟ͑ΔͱɺೝূΛߦ͏ࡍ͸
   FUIͷηΩϡϦςΟάϧʔϓΛ௨Βͳ͍
   ˠσΟϨΫτϦ΁ͷΞΫηεΛ੍ݶ͢ΔͨΊͷઃఆ͕ඞཁ
   

   View Slide

9. Ҿ༻ɿ8IBU*T"NB[PO8PSL4QBDFT "NB[PO8PSL4QBDFT
   IUUQTEPDTBXTBNB[PODPNXPSLTQBDFTMBUFTUBENJOHVJEFBNB[POXPSLTQBDFTIUNMBSDIJUFDUVSF
   

   View Slide

10. *1ΞυϨείϯτϩʔϧάϧʔϓ
    w σΟϨΫτϦʹΞΫηε͢Δ*1ΞυϨεΛ੍ݶ͢Δ͜ͱ͕Ͱ͖Δ
    w ͭͷ*1ΞυϨείϯτϩʔϧάϧʔϓʹɺ
    ࠷େͷϧʔϧΛઃఆՄೳ
    w ͭͷσΟϨΫτϦʹ͸
    ࠷େͷ*1ΞΫηείϯτϩʔϧάϧʔϓΛؔ࿈͚ͮΒΕΔ
    

    View Slide

11. ηΩϡϦςΟάϧʔϓͷઃఆ͸
    Ͳ͏͢΂͖͔ʁ
    

    View Slide

12. ηΩϡϦςΟάϧʔϓͷઃఆ
    w Πϯό΢ϯυͷڐՄ
    8PSLTQBDFʹ઀ଓͰ͖ͳ͍ʂͱ͍ͬͨ
    ໰୊ͷ੾Γ෼͚ʹར༻͢ΔϓϩτίϧΛڐՄ͓ͯ͘͠
    w *$.1
    w 3%1
    w ͦͷଞɺར༻͢ΔΞϓϦέʔγϣϯͷ௨৴ཁ݅
    w Ξ΢τό΢ϯυ͸ཁ݅ʹԠͯ͡ઃఆʢجຊతʹ͸͢΂ͯڐՄͰΑ͍͔ͱʣ
    

    View Slide

13. ࢀߟจݙ
    w 8IBU*T"NB[PO8PSL4QBDFT "NB[PO8PSL4QBDFT
    IUUQTEPDTBXTBNB[PODPNXPSLTQBDFTMBUFTUBENJOHVJEFBNB[POXPSLTQBDFTIUNMBSDIJUFDUVSF
    
    w 8PSL4QBDFTͷηΩϡϦςΟάϧʔϓ"NB[PO8PSL4QBDFT
    IUUQTEPDTBXTBNB[PODPNKB@KQXPSLTQBDFTMBUFTUBENJOHVJEFBNB[POXPSLTQBDFTTFDVSJUZHSPVQTIUNM
    
    w 8PSL4QBDFTͷ*1ΞΫηείϯτϩʔϧάϧʔϓ
    "NB[PO8PSL4QBDFT
    IUUQTEPDTBXTBNB[PODPNKB@KQXPSLTQBDFTMBUFTUBENJOHVJEFBNB[POXPSLTQBDFTJQBDDFTTDPOUSPM
    HSPVQTIUNM
    
    

    View Slide