AWSの次の段階のセキュリティ_Security_Hub #cmregrowth

re:Invent2018で新しく発表されたSecurity Hubがどんな感じに使えるかまとめてみました。re:Growth 2018登壇資料です。#cmregrowth

Transcript

1. "84ͷҰาਐΜͩηΩϡϦςΟରࡦ
   4FDVSJUZ
   )VC 
   ӓాɹՂ༞
2. ࣗݾ঺հ
    ӓాɹՂ༞
   ɾΫϥεϝιουגࣜձࣾ
   ɾ"84ࣄۀຊ෦
   ɹιϦϡʔγϣϯΞʔΩςΫτ
   ɹɹηΩϡϦςΟνʔϜ
   ɾ4FDVSJUZ+"84ӡӦ
   ɾ޷͖ͳαʔϏε
   ɹ"84
   8"'Ϛωʔδυϧʔϧ New
3. SF*OWFOUपลͷηΩϡϦςΟܥͷൃද
    w "84
   $POUSPM
   5PXFS
   ·ͩ࢖͑ͳ͍
   w "84
   4FDVSJUZ
   )VC
   ࢖͑Δʂ
   w "84
   -BLF
   'PSNBUJPO
   ·ͩ࢖͑ͳ͍
   w "NB[PO
   $MPVE8BUDI-PHT
   *OTJHIUT
   ࢖͑Δʂ
   w 'JSFDSBDLFS
   
   w "84
   5SBOTGFS
   GPS
   4'51
   
   w 4
   ΦϒδΣΫτϩοΫػೳ
   ࢖͑Δʂ
   w 4
   ύϒϦοΫΞΫηεઃఆ
   ௒ॏཁʂ
   w ηΩϡϦςΟ·ͱΊ
   IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDVSJUZTVNNBSZ
   w 4ύϒϦοΫΞΫηεઃఆ
   IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTCMPDLQVCMJDBDDFTT
4. 4FDVSJUZ
   )VCͱ͸
    w ༷ʑͳαʔϏε΍੡඼ͷηΩϡϦςΟΞϥʔτ΍ݕ஌ ݁ՌΛͭʹू໿͢ΔαʔϏε
5. 4FDVSJUZ
   )VCͱ͸
    w (VBSE%VUZɾ*OTQFDUPSɾ.BDJFͱαʔυύʔςΟ ͷσʔλ΋औΓࠐΊΔ
6. 4FDVSJUZ
   )VCͱ͸
    w ίϯϓϥΠΞϯεͷνΣοΫ͕Ͱ͖Δ ݱঢ়͸$*4
   "84
   'PVOEBUJPOT
   #FODINBSLͷΈ
7. 4FDVSJUZ
   )VCͱ͸
    w ݟ͚ͭͨ৘ใΛར༻ͯ͠ΞΫγϣϯΛىͤ͜Δ
   w νϟοτʹ௨஌ͨ͠ΓɺΠϯελϯεΛࢭΊͨΓ
8. ͭ·Γ
    ϩάΛݟΔӡ༻ऀ΍ ηΩϡϦςΟΞφϦετ޲͚αʔϏε
9. Α͘ग़͖ͯͦ͏ͳٙ໰
    ͳΜ͔ྑͦ͞͏͚ͩͲ Կ͕͍͍ͷ͔Θ͔Βͳ͍
10. 4FDVSJUZ
    )VCͷ͍͍ͱ͜Ζ̍
     ͍ΖΜͳηΩϡϦςΟ৘ใΛ ·ͱΊͯνΣοΫ
11. "84ͷηΩϡϦςΟϫʔΫϑϩʔ
     w Կ͔Λݕ஌ͨ͠ΒࣗಈͰॲཧͨ͠Γௐࠪ͢Δ https://www.slideshare.net/AmazonWebServices/new-launch-introduction-to-aws-security-hub-sec397-aws-reinvent-2018
12. "84ͷηΩϡϦςΟϫʔΫϑϩʔͷ໰୊఺
     w ίϯϓϥΠΞϯε४ڌঢ়گ͕֬ೝͮ͠Β͍
    w ϑΥʔϚοτ͕ҟͳΔ
    w ΞϥʔτϨϕϧ͕ҧ͏
    w ը໘͕όϥόϥ
13. 4FDVSJUZ
    )VCͷը໘
     w ίϯϓϥΠΞϯενΣοΫ ࣗಈͰৗ࣮࣌ߦ
    w Ϧιʔεશମͷ͏ͪͲΕ͘Β͍४ڌ͍ͯ͠Δ͔ͻͱ໨Ͱ෼͔Δ
14. 4FDVSJUZ
    )VCͷը໘
     w ಉ͡ϑΥʔϚοτͰಉ͡Ξϥʔτ
    w Ұͭͷը໘Ͱ֬ೝ
15. 4FDVSJUZ
    )VCͷը໘
     w ϑΟϧλʔ΍ΫΤϦͰ୳͠΍͍͢ʂ
    w ७ਖ਼ͷ(VBSE%VUZ౳Ͱ͸ग़དྷͳ͍ͷͰ͜Ε͚ͩͰ΋Ձ஋͕͋Δ
16. 4FDVSJUZ
    )VCͷ͍͍ͱ͜Ζ
     ͨ͘͞Μͷύʔτφʔͱ࿈ܞ
17. 4FDVSJUZ
    )VCͷύʔτφʔ
     w ৭Μͳδϟϯϧͷ͍ΖΜͳ੡඼
18. 4FDVSJUZ
    )VCͷ࿈ܞํ๏
     w "84ଆͰ͸4VCTDSJCF͢Ε͹΄΅0,
    w ੡඼ଆʹඞཁͳઃఆΛೖΕͨΓɺ$'OΛ࣮ߦ͢Ε͹ऴΘΔ ֓Ͷ
19. ύʔτφʔͱ࿈ܞ͢ΔϝϦοτ
     w ύʔτφʔ੡඼Ͱݕ஌֤ͨ͠छϦιʔεͷҟৗΛҰॹʹѻ͑Δ
    w Πϯελϯε*%
    w 4FDVSJUZ
    (SPVQ
    w *".Ϣʔβʔϩʔϧ
    w ҰॹʹݟΔͱਖ਼ৗͳͷ͔ҟৗͳͷ͔൑அ͠΍͍͢
    w ͭͷΠϯελϯε*%Ͱ%FFQ
    4FDVSJUZͷ*%4͕ΞϥʔτΛ ग़͍ͯͯ͠ɺ*OTQFDUPSͰ੬ऑੑ৘ใ͕ग़͍ͯΔɺͱ͔
20. 4FDVSJUZ
    )VCͷ͍͍ͱ͜Ζ
     ࣍ͷॲཧΛ࣮ߦ ΧελϜεΫϦϓτ
21. ݕ஌৘ใΛݩʹ࣍ͷΞΫγϣϯΛىͤ͜Δ
     w ೚ҙͷΧελϜεΫϦϓτΛ࡞੒͠ɺτϦΨʔͰ͖Δ
    w $MPVE8BUDI
    &WFOUͳͷͰ-BNCEBΛܦ༝ͯ͠ԿͰ΋Ͱ͖Δʂ
22. ΧελϜεΫϦϓτྫ
     w ո͍͠ΠϯελϯεΛൃݟ͢Δ
    w ʮ5FSNJOBUF*OTUBODFʯΛԡ͢ͱΠϯελϯεΛऴྃ
23. ΧελϜεΫϦϓτྫ
     w Πϯελϯε͸ऴ͚ྃͩ͡Όͳͯ͘ɺϑΥϨϯδοΫπʔϧΛಈ ͔ͨ͠ޙɺ4FDVSJUZ
    (SPVQΛར༻ִͯ͠཭͢Δͱ͔΋Ͱ͖Δ
    w ͍ͭͰʹ௥Ճͷ੬ऑੑεΩϟϯΛ࣮ࢪͨ͠Γ
    w νέοτπʔϧʹىථͯ͠΋͍͍
    w *".Ϣʔβʔϩʔϧͷ໰୊͸ΞΧ΢ϯτ؅ཧ෦໳ͷ4MBDLʹష Δͱ͔
    w ఆܗ࡞ۀ͸ϘλϯҰൃͰऴΘΔΑ͏ʹ͠Α͏ʂ
24. ࣗ෼ͷ؀ڥʹ͸ҙຯͳ͍ͱࢥ͍ͬͯΔʁ
     ΋͔ͯ͠͠ɺ ͦΜͳʹݕ஌͢Δ಺༰͕ͳ͍ʁ
25. ͳΔ΂ࣗ͘ಈԽ͢Δͷ͕ࠓͷηΩϡϦςΟ
     GuardDuty͸༗ޮԽඞਢ Inspector͸͢΂ͯͷΠϯελϯεͰ ఆظతʹճͦ͏ ͦ͏͢Δͱ݁ߏग़ͯ͘Δ
26. ·ͱΊ
     w ηΩϡϦςΟΞϥʔτ΍௨஌Λ·ͱΊͯ؅ཧ
    w ڞ௨ͨ͠ϑΥʔϚοτͰ؅ཧͰ͖ͯݟ΍͍͢
    w ύʔτφʔ࿈ܞͰద੾ͳ൑அΛߦ͏
    w ΧελϜεΫϦϓτͰӡ༻ΛࣗಈԽ
27. ࢀߟϒϩά
     w 4FDVSJUZ
    )VCΧςΰϦ
    w IUUQTEFWDMBTTNFUIPEKQSFGFSFODFDBUBXTTFDVSJUZIVC
    w ΍ͬͯΈͨ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDVSJUZIVC
28. ࢀߟϒϩά
     w Ϣʔβࣄྫ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU
    w $*4΍ͬͯΈͨ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZIVCDJT
29. ࢀߟϒϩά
     w *OTJHIUTͱ'JOEJOHTਂ۷Γ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZIVCJOTJHIUpOEJOHT
    w %FFQ
    4FDVSJUZ࿈ܞ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZIVCEFFQTFDVSJUZ