Upgrade to Pro — share decks privately, control downloads, hide ads and more …

AWSの次の段階のセキュリティ_Security_Hub #cmregrowth

AWSの次の段階のセキュリティ_Security_Hub #cmregrowth

re:Invent2018で新しく発表されたSecurity Hubがどんな感じに使えるかまとめてみました。re:Growth 2018登壇資料です。#cmregrowth

A857277d74d4719f7f7751dca5ed553e?s=128

cm-usuda-keisuke

December 05, 2018
Tweet

Transcript

  1. "84ͷҰาਐΜͩηΩϡϦςΟରࡦ 4FDVSJUZ)VC  ӓాɹՂ༞

  2. ࣗݾ঺հ   ӓాɹՂ༞ ɾΫϥεϝιουגࣜձࣾ ɾ"84ࣄۀຊ෦ ɹιϦϡʔγϣϯΞʔΩςΫτ ɹɹηΩϡϦςΟνʔϜ ɾ4FDVSJUZ+"84ӡӦ ɾ޷͖ͳαʔϏε

    ɹ"848"'Ϛωʔδυϧʔϧ New
  3. SF*OWFOUपลͷηΩϡϦςΟܥͷൃද   w "84$POUSPM5PXFS ·ͩ࢖͑ͳ͍  w "844FDVSJUZ)VC ࢖͑Δʂ

     w "84-BLF'PSNBUJPO ·ͩ࢖͑ͳ͍  w "NB[PO$MPVE8BUDI-PHT*OTJHIUT ࢖͑Δʂ  w 'JSFDSBDLFS  w "845SBOTGFSGPS4'51  w 4ΦϒδΣΫτϩοΫػೳ ࢖͑Δʂ  w 4ύϒϦοΫΞΫηεઃఆ ௒ॏཁʂ  w ηΩϡϦςΟ·ͱΊIUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDVSJUZTVNNBSZ w 4ύϒϦοΫΞΫηεઃఆIUUQTEFWDMBTTNFUIPEKQDMPVEBXTTCMPDLQVCMJDBDDFTT
  4. 4FDVSJUZ)VCͱ͸   w ༷ʑͳαʔϏε΍੡඼ͷηΩϡϦςΟΞϥʔτ΍ݕ஌ ݁ՌΛͭʹू໿͢ΔαʔϏε

  5. 4FDVSJUZ)VCͱ͸   w (VBSE%VUZɾ*OTQFDUPSɾ.BDJFͱαʔυύʔςΟ ͷσʔλ΋औΓࠐΊΔ

  6. 4FDVSJUZ)VCͱ͸   w ίϯϓϥΠΞϯεͷνΣοΫ͕Ͱ͖Δ ݱঢ়͸$*4 "84'PVOEBUJPOT#FODINBSLͷΈ

  7. 4FDVSJUZ)VCͱ͸   w ݟ͚ͭͨ৘ใΛར༻ͯ͠ΞΫγϣϯΛىͤ͜Δ w νϟοτʹ௨஌ͨ͠ΓɺΠϯελϯεΛࢭΊͨΓ

  8. ͭ·Γ   ϩάΛݟΔӡ༻ऀ΍ ηΩϡϦςΟΞφϦετ޲͚αʔϏε

  9. Α͘ग़͖ͯͦ͏ͳٙ໰   ͳΜ͔ྑͦ͞͏͚ͩͲ Կ͕͍͍ͷ͔Θ͔Βͳ͍

  10. 4FDVSJUZ)VCͷ͍͍ͱ͜Ζ̍   ͍ΖΜͳηΩϡϦςΟ৘ใΛ ·ͱΊͯνΣοΫ

  11. "84ͷηΩϡϦςΟϫʔΫϑϩʔ   w Կ͔Λݕ஌ͨ͠ΒࣗಈͰॲཧͨ͠Γௐࠪ͢Δ https://www.slideshare.net/AmazonWebServices/new-launch-introduction-to-aws-security-hub-sec397-aws-reinvent-2018

  12. "84ͷηΩϡϦςΟϫʔΫϑϩʔͷ໰୊఺   w ίϯϓϥΠΞϯε४ڌঢ়گ͕֬ೝͮ͠Β͍ w ϑΥʔϚοτ͕ҟͳΔ w ΞϥʔτϨϕϧ͕ҧ͏ w

    ը໘͕όϥόϥ
  13. 4FDVSJUZ)VCͷը໘   w ίϯϓϥΠΞϯενΣοΫ ࣗಈͰৗ࣮࣌ߦ  w Ϧιʔεશମͷ͏ͪͲΕ͘Β͍४ڌ͍ͯ͠Δ͔ͻͱ໨Ͱ෼͔Δ

  14. 4FDVSJUZ)VCͷը໘   w ಉ͡ϑΥʔϚοτͰಉ͡Ξϥʔτ w Ұͭͷը໘Ͱ֬ೝ

  15. 4FDVSJUZ)VCͷը໘   w ϑΟϧλʔ΍ΫΤϦͰ୳͠΍͍͢ʂ w ७ਖ਼ͷ(VBSE%VUZ౳Ͱ͸ग़དྷͳ͍ͷͰ͜Ε͚ͩͰ΋Ձ஋͕͋Δ

  16. 4FDVSJUZ)VCͷ͍͍ͱ͜Ζ   ͨ͘͞Μͷύʔτφʔͱ࿈ܞ

  17. 4FDVSJUZ)VCͷύʔτφʔ   w ৭Μͳδϟϯϧͷ͍ΖΜͳ੡඼

  18. 4FDVSJUZ)VCͷ࿈ܞํ๏   w "84ଆͰ͸4VCTDSJCF͢Ε͹΄΅0, w ੡඼ଆʹඞཁͳઃఆΛೖΕͨΓɺ$'OΛ࣮ߦ͢Ε͹ऴΘΔ ֓Ͷ

  19. ύʔτφʔͱ࿈ܞ͢ΔϝϦοτ   w ύʔτφʔ੡඼Ͱݕ஌֤ͨ͠छϦιʔεͷҟৗΛҰॹʹѻ͑Δ w Πϯελϯε*% w 4FDVSJUZ(SPVQ w

    *".Ϣʔβʔϩʔϧ w ҰॹʹݟΔͱਖ਼ৗͳͷ͔ҟৗͳͷ͔൑அ͠΍͍͢ w ͭͷΠϯελϯε*%Ͱ%FFQ4FDVSJUZͷ*%4͕ΞϥʔτΛ ग़͍ͯͯ͠ɺ*OTQFDUPSͰ੬ऑੑ৘ใ͕ग़͍ͯΔɺͱ͔
  20. 4FDVSJUZ)VCͷ͍͍ͱ͜Ζ   ࣍ͷॲཧΛ࣮ߦ ΧελϜεΫϦϓτ

  21. ݕ஌৘ใΛݩʹ࣍ͷΞΫγϣϯΛىͤ͜Δ   w ೚ҙͷΧελϜεΫϦϓτΛ࡞੒͠ɺτϦΨʔͰ͖Δ w $MPVE8BUDI&WFOUͳͷͰ-BNCEBΛܦ༝ͯ͠ԿͰ΋Ͱ͖Δʂ

  22. ΧελϜεΫϦϓτྫ   w ո͍͠ΠϯελϯεΛൃݟ͢Δ w ʮ5FSNJOBUF*OTUBODFʯΛԡ͢ͱΠϯελϯεΛऴྃ

  23. ΧελϜεΫϦϓτྫ   w Πϯελϯε͸ऴ͚ྃͩ͡Όͳͯ͘ɺϑΥϨϯδοΫπʔϧΛಈ ͔ͨ͠ޙɺ4FDVSJUZ(SPVQΛར༻ִͯ͠཭͢Δͱ͔΋Ͱ͖Δ w ͍ͭͰʹ௥Ճͷ੬ऑੑεΩϟϯΛ࣮ࢪͨ͠Γ w νέοτπʔϧʹىථͯ͠΋͍͍

    w *".Ϣʔβʔϩʔϧͷ໰୊͸ΞΧ΢ϯτ؅ཧ෦໳ͷ4MBDLʹష Δͱ͔ w ఆܗ࡞ۀ͸ϘλϯҰൃͰऴΘΔΑ͏ʹ͠Α͏ʂ
  24. ࣗ෼ͷ؀ڥʹ͸ҙຯͳ͍ͱࢥ͍ͬͯΔʁ   ΋͔ͯ͠͠ɺ ͦΜͳʹݕ஌͢Δ಺༰͕ͳ͍ʁ

  25. ͳΔ΂ࣗ͘ಈԽ͢Δͷ͕ࠓͷηΩϡϦςΟ   GuardDuty͸༗ޮԽඞਢ Inspector͸͢΂ͯͷΠϯελϯεͰ ఆظతʹճͦ͏ ͦ͏͢Δͱ݁ߏग़ͯ͘Δ

  26. ·ͱΊ   w ηΩϡϦςΟΞϥʔτ΍௨஌Λ·ͱΊͯ؅ཧ w ڞ௨ͨ͠ϑΥʔϚοτͰ؅ཧͰ͖ͯݟ΍͍͢ w ύʔτφʔ࿈ܞͰద੾ͳ൑அΛߦ͏ w

    ΧελϜεΫϦϓτͰӡ༻ΛࣗಈԽ
  27. ࢀߟϒϩά   w 4FDVSJUZ)VCΧςΰϦ w IUUQTEFWDMBTTNFUIPEKQSFGFSFODFDBUBXTTFDVSJUZIVC w ΍ͬͯΈͨ w

    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDVSJUZIVC
  28. ࢀߟϒϩά   w Ϣʔβࣄྫ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU w $*4΍ͬͯΈͨ w

    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZIVCDJT
  29. ࢀߟϒϩά   w *OTJHIUTͱ'JOEJOHTਂ۷Γ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZIVCJOTJHIUpOEJOHT w %FFQ4FDVSJUZ࿈ܞ w

    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZIVCEFFQTFDVSJUZ
  30. None