Save 37% off PRO during our Black Friday Sale! »

[初心者向け]AWS環境のセキュリティ運用(設計)をはじめてみよう

 [初心者向け]AWS環境のセキュリティ運用(設計)をはじめてみよう

A857277d74d4719f7f7751dca5ed553e?s=128

cm-usuda-keisuke

February 23, 2019
Tweet

Transcript

  1. <ॳ৺ऀ޲͚> "84؀ڥͷηΩϡϦςΟӡ༻ ઃܭ Λ ͸͡ΊͯΈΑ͏  4FDVSJUZ+"84ӓాɹՂ༞

  2. ࣗݾ঺հ   ӓాɹՂ༞ ɾΫϥεϝιουגࣜձࣾ ɾ"84ࣄۀຊ෦ ɹιϦϡʔγϣϯΞʔΩςΫτ ɹɹηΩϡϦςΟνʔϜ ɾ4FDVSJUZ+"84ӡӦ ɾ޷͖ͳαʔϏε

    ɹ"848"'Ϛωʔδυϧʔϧ AWS WAF
  3. ͜ͷηογϣϯͷλʔήοτ   w "84ॳ৺ऀ w ઃܭɾߏஙɾӡ༻ɾอकʹܞΘΔํ w ηΩϡϦςΟ୲౰ऀ w

    "84ࣗମͷηΩϡϦςΟʹ͸໰୊ͳ͍͜ͱ͕ Θ͔͍ͬͯΔํ
  4. ͪͳΈʹηΩϡϦςΟ͕ෆ҆ͱ͍͏ํ͸ʜ   ɾ"84ͷηΩϡϦςΟ͕ෆ҆ ɾ৬৔Ͱ"84͕৮Εͳ͍ͷΛͳΜͱ͔͍ͨ͠ Ҏ্ͷํ͸ڈ೥ͷࢿྉΛࢀߟʹ͍ͯͩ͘͠͞ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTKBXTEBZTJTFDVSJUZ

  5. ࠓճ͸   ࣮ࡍͲΜͳ؀ڥΛ࡞ͬͯ ηΩϡϦςΟΛอ͍͔ͬͯ͘ͱ͍͏࿩

  6. ίϯηϓτ   ָʹڧ͘कΔ

  7. ӡ༻ͰͷηΩϡϦςΟͷΠϝʔδ   w ͭΒ͍ w ͍ͨ΁Μ w ੹೚ॏେ w

    ϧʔνϯϫʔΫ w ͭ·Βͳ͍ Ͳ͏ͯ͜͠ΜͳΠϝʔδʹͳΔͷ͔ʁ
  8. ࣮ࡍͲΜͳ͜ͱΛ΍͍ͬͯΔ͔   w ηΩϡϦςΟάϧʔϓͷઃఆΛมߋ͢Δ w Ϧιʔεͷ؂ࢹ ϝτϦΫεͷಈ͖ͷ֬ೝͱ͔  w

    ϩάʹมͳ΋ͷ͕ͳ͍͔֬ೝ͢Δ w ੬ऑੑͷ֬ೝ w ύονΛ౰ͯΔ w ଞʹ΋͍Ζ͍Ζ ຊ౰ʹਓྗͰ΍Δඞཁ͕͋Γ·͔͢ʁ
  9. ηΩϡϦςΟʹݶΒͣͰ͕͢   ӡ༻͸ݱ৔Ͱى͍ͬͯ͜ΔͷͰ͸ͳ͍ ઃܭஈ֊͔Β࢝·͍ͬͯΔͷͩ

  10. ͳΜͰ΋ӡ༻ʹؙ౤͛ʹͳͬͯͳ͍Ͱ͔͢ʁ   ͳΔ΂͘ઃܭͰ௵͠·͠ΐ͏Ͷ

  11. ΞδΣϯμ    ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ  ؂ࢹͷઃܭ  44.ʹΑΔηΩϡϦςΟӡ༻ࣗಈԽ

  12. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ "84શମ

  13. "84؀ڥશମͷίϯϙʔωϯτ   ·ͣ͸͢΂ͯͷΞΧ΢ϯτͰར༻͞ΕΔ΂͖΋ͷ w "84$MPVE5SBJM w "84$POpH w "NB[PO(VBSE%VUZ

    w "844IJFME
  14. $MPVE5SBJM   "84$MPVE5SBJMʹΑΓૢ࡞ϩάΛऔಘ͢Δ $MPVE5SBJM͸"1*ૢ࡞ͳͲͷΞΫγϣϯΛϩΪϯά͢ ΔαʔϏε ηΩϡϦςΟΠϯγσϯτ౳͕ൃੜͨ͠ࡍʹ෼ੳʹ׆༻ શϦʔδϣϯͰͷ༗ޮԽΛਪ঑ AWS CloudTrail

  15. ͋ΘͤͯಡΈ͍ͨ   ৽نΞΧ΢ϯτͰ΋͜ΕҰൃʂ$MPVE5SBJMΛશ ϦʔδϣϯͰ༗ޮԽ͢ΔεΫϦϓτΛॻ͍ͨ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDMPVEUSBJMBDUJWBUF ·ͩ༗ޮʹͳ͍ͬͯͳ͍ΞΧ΢ϯτ͸ҰൃೖΕ͓͖ͯ·͠ΐ͏

  16. "84$POpH   "84$POpHͱ͸ ηΩϡϦςΟͱΨόφϯεΛՄೳʹ͢Δߏ੒มߋͷ௨ ஌ɺߏ੒ཤྺɺ"84ϦιʔεͷΠϯϕϯτϦʔΛ͓ ٬༷΁ఏڙ͢Δ׬શϚωʔδυܕͷαʔϏεͰ͢ɻ ؆୯ʹ"84Ϧιʔεͷߏ੒΍มߋΛՄࢹԽ͢Δ͜ͱ ͕ग़དྷ·͢ɻ AWS

    Config
  17. ͋ΘͤͯಡΈ͍ͨ   "84$POpH͸ͱΓ͋͑ͣ༗ޮʹ͠Α͏ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTDPOpHTUBSU ·ͣ͸͜ΕΛϕʔεʹ༗ޮԽʂ

  18. (VBSE%VUZ   ڴҖݕ஌ͷϚωʔδυαʔϏε ػցֶशʹΑΓτϥϑΟοΫϩά౳͔Β ո͍͠௨৴Λݕ஌͢Δ ྫ͑͹44)΁ͷϒϧʔτϑΥʔε΍Ϛϧ΢ΣΞ ͷ௨৴ɺϏοτίΠϯͷϚΠχϯάʹ࢖ΘΕ͍ͯ Δ৵֐͞Εͨ&$ΠϯελϯεΛݕग़Ͱ͖·͢ɻ Amazon

    GuardDuty
  19. ͋ΘͤͯಡΈ͍ͨ   ҰൃͰ(VBSE%VUZΛશϦʔδϣϯ༗ޮԽͯ͠௨஌ઃ ఆ͢ΔςϯϓϨʔτ࡞ͬͨ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFUHVBSEEVUZBMMSFHJPO ·ͣ͸Ұൃ༗ޮԽʂ

  20. "844IJFME   Ϛωʔδυͳ%%P4อޢαʔϏεͰ ແྉͰ࠷ॳ͔Β--Ϩϕϧ͕อޢ͞Ε͍ͯΔ 4UBOEBSEϓϥϯͱɺ"84ͷ%%P4ઐ໳νʔ Ϝͱ࿈ܞͯ͠-΍େن໛ͳ%%P4ʹର߅͢Δ "EWBODFEϓϥϯ͕͋Δ 4UBOEBSE͸ͱ͘ʹઃఆͷඞཁͳ͠ AWS

    Shield
  21. ͪΌΜͱ༗ޮԽʹͯ͠·͔ͨ͠ʁ   w ΋͠·ͩͳΒ͙͢νΣοΫ͠·͠ΐ͏ w ͲΕ΋͍͟ͱ͍͏ͱ͖ʹ໾ཱͭ΋ͷͰ͢ɺීஈ͔Β ༗ޮԽͯ͠ͳ͍ͱઈରࠔΓ·͢ w ྉۚ͸&$ͱ͔ͱൺ΂Δͱ΄ͱΜͲؾʹͳΔ΋ͷͰ

    ͸ͳ͍ͷͰແࢹ͠·͠ΐ͏ w අ༻ରޮՌ͸ઈେͰ͢
  22. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ 71$؀ڥपΓ

  23.   ·ͣ͸ཧ૝ͷߏ੒

  24. ҰൠతʹηΩϡΞͳߏ੒   w ࡾ૚ωοτϫʔΫ w ϑϩϯτҎ֎͸ϓϥΠϕʔτ w Ϛϧν"; w

    "VUP4DBMJOH w ֎෦௨৴͸/"5ܦ༝ w ඞཁʹԠ͡$MPVE'SPOU΍ 8"'Λಋೖ
  25.   μϝͳύλʔϯ

  26. &$͕୆ͷΈɺ௚઀Πϯλʔωοτʹ໘͍ͯ͠Δ   w ৑௕Խ͞Εͯͳ͍ w αʔϏεͱ؅ཧΞΫηε͕ ಉ͡*1 w εέʔϧ͠ͳ͍

    w ΠϯελϯεམͪͨΒ෮چ ͠ͳ͍ ͍Ζ͍ΖϦεΩʔ
  27. ઃܭͷجຊ   Design for Failure ো֐͕ى͖Δ͜ͱΛલఏʹઃܭ͠·͠ΐ͏

  28. ࠷௿ݶͷϥΠϯ   w Ϛϧν";Ͱ৑௕Խ͢Δ w ";ো֐͕ͳͯ͘΋Πϯελϯε͕ࢮ͵Մೳੑ͕͋Δ w ϦλΠΞϝϯτ΍αʔό಺ͷϝϞϦϦʔΫͳͲ w

    αʔϏε͕গ͠ࢭ·͍͍ͬͯͳΒγϯάϧ";Ͱ΋͍͍ w "VUP4DBMJOH(SPVQʹೖΕΔ w Πϯελϯε୆Ͱ΋࢖͏ w ো֐࣌ʹࣗಈ෮چͯ͘͠ΕΔ w ΠϯελϯεΛࣗಈతʹɾ؆୯ʹ૿΍ͤΔ ౰ॳ༧ఆ͕ͳͯ͘΋ٸ ʹ૿΍ͨ͘͠ͳͬͨͱ͖ʹศར
  29. ࠷௿ݶͷϥΠϯ   w &-#ɾ/BU(BUFXBZΛۦ࢖ͯ͠&$͸ϓϥΠϕʔτʹ w ௚઀֎෦ʹࡽ͞ΕΔͷ͸ྑ͘ͳ͍ w &-#͸Πϯελϯε୆͔ΒͰ΋ϝϦοτ͸͍ͬͺ͍͋Δ w

    5-4ऴ୺Ͱ͖Δ w "848"'͕ར༻Ͱ͖Δ w &$ͷ੾Γସ͕͑༰қ w )551पΓͷϝτϦΫεΛऩूͰ͖Δ
  30. ͋ΘͤͯಡΈ͍ͨ   ",*#"BXTୈճجૅฤͰʮෛՙ෼ࢄ͚ͩ͡Όͳ ͍&-#ͷϝϦοτʯΛ࿩͠·ͨ͠ IUUQTEFWDMBTTNFUIPEKQFUDBLJCBBXT—FMCNFSJU ϝϦοτ͍ͬͺ͍Ͱ͢Α

  31. ΋͏গ͠ؤுΔͳΒ   w $MPVE'SPOUͰ੩తίϯςϯπΛΩϟογϡ͢Δ w ΞΫηε͕େྔʹདྷͯ΋අ༻ΛकΕΔ w ͳΜͳΒόοΫΤϯυΛ4ʹ͢Δ w

    ϛυϧ΢ΣΞ͕ͳ͘ͳΔͷͰ੬ऑੑ؅ཧָ͕ʹ w "848"'Λ࢖͏ w ༻్ʹ߹ΘͤͨϚωʔδυϧʔϧΛ࢖͏ͱָʹ׆༻Ͱ͖Δ w ཁ͕݅໌֬ͳΒݸผʹϧʔϧΛνϡʔχϯά
  32. ͋ΘͤͯಡΈ͍ͨ   $MPVE'PSNBUJPOͰ0"*Λ࢖ͬͨ$MPVE'SPOU 4ͷ ੩తίϯςϯπ഑৴ΠϯϑϥΛ࡞Δ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTDMPVEGSPOUXJUIPBJCZDMPVEGPSNBUJPO $' 4ͳΒ4Λ੩తϗεςΟϯάͤͣ0"*Λར༻͠·͠ΐ͏

  33. ͋ΘͤͯಡΈ͍ͨ   ʲ৽ػೳʳ"848"'ϚωʔδυϧʔϧΛ࢖ͬͯ 8PSE1SFTTʹର͢Δ߈ܸΛ๷͍ͰΈͨSFJOWFOU IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTSFJOWFOUXBGNBOBHFESVMFUSZ Ϛωʔδυϧʔϧͷྑ͞ʹ͍ͭͯৄ͘͠ղઆ͠ɺ߹Θ࣮ͤͯಈ࡞ͷݕূ Λߦͳ͍ͬͯ·͢

  34. 4FDVSJUZ(SPVQͷ࢖͍ํ   w /"$-͸࠷௿ݶʹͯ͠ΞΫηε੍ݶ͸جຊ4(دͤ w Ϧιʔεʹෳ਺4(ΞλονՄೳͳͨΊɺ໾ׂ͝ͱͷ4(Λ࡞੒͢ΔɻҎԼྫ w &-#4(&-#༻ɻQPSUΛڐՄ͢Δ w

    8FC4(8FCαʔό༻ɻ&-#4(͔ΒͷΛڐՄ w 0GpDF4(0GpDF͔Βͷ؅ཧΞΫηε  ΛڐՄ w ໾ׂؒ͸4(ͷ*%ͰڐՄ͢Δ αϒωοτͷ*1Ϩϯδ͸࢖Θͳ͍  w Ұ࣌తͳ࡞ۀ͸4(ʹ*1Λ௥هͰ͸ͳͯ͘ɺ࡞ۀ༻4(ΛΞλον͢ΔΑ͏ʹ͢Δ w ࡞ۀϛεͰϧʔϧΛফͨ͠Γ͢Δ͜ͱ͕ͳ͘ͳΔ w ܁Γฦ͠ߦ͏ͱ͖ʹ࢖͍΍͍͢
  35. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ ͦͷଞ

  36. "845SVTUFE"EWJTPSͰηΩϡϦςΟϦεΫͷ؂ࢹ   "845SVTUFE"EWJTPS͸ʮίετ࠷దԽʯɺʮύϑΥʔϚϯεʯɺ ʮηΩϡϦςΟʯɺʮϑΥʔϧττϨʔϥϯεʯͷ̐ͭͷ؍఺͔Βɺ ར༻ऀͷ"84؀ڥΛ"84͕ࣗಈͰਫ਼ࠪ͠ɺਪ঑ઃఆͷ͓஌ΒͤΛ͠ ͯ͘ΕΔػೳͰ͢ɻ *".΍4ͷઃఆͳͲ͕໰୊ͳ͍͔νΣοΫͯ͘͠ΕΔɻ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDNBEWFOUDBMFOEBSHFUUJOHTUBSUFEBHBJOBXTUE

  37. ͋ΘͤͯಡΈ͍ͨ   "84ίϯιʔϧͷϩάΠϯ༻ΞΧ΢ϯτΛ*".ͷϕε τϓϥΫςΟεʹैͬͯ࡞੒ͯ͠Έͨ ઃఆฤ  IUUQTEFWDMBTTNFUIPEKQDMPVEBXTJBNMPHJOVTFSCFTUQSBDUJDFT ࣮ࡍʹ*".ϕετϓϥΫςΟεΛຬͨ͢Α͏ʹઃఆ͢Δํ๏Λ֬ೝͰ͖·͢

  38. *".ͷ؅ཧ͸Ԟ͕ਂ͍͚Ͳɺख͸ൈ͔ͳ͍Α͏ʹ   w ਓ͕࢖͏*".6TFS͸.'"ඞਢ w ਓ͕࢖Θͳ͍*".6TFS͸࠷௿ݶͷΈ w *".3PMF͕࢖͑Δ৔߹͸3PMFΛ࢖͏ w

    ෳ਺ΞΧ΢ϯτΛ·͕ͨΔ৔߹ɺͭͷΞΧ΢ϯτʹਓ͕࢖͏*".6TFSΛ ू໿ͯ͠ɺ4XJUDI3PMF͢Δ w ΫϨσϯγϟϧ͕୔ࢁੜ੒͞Εͳ͍ͷͰ؅ཧ͠΍͍͢ w *".3PMF͸৭Μͳ৔໘Ͱ࡞੒͢Δඞཁ͕͋ΔͨΊɺ؅ཧऀ͕ੜ੒͢ΔΑ͏ ʹ͢Δͱਏ͍ w ՄೳͳݶΓϦςϥγʔڭҭͱ"84$POpHϧʔϧΛ׆༻ͯ͠։ൃऀͰ΋࡞੒Ͱ͖ ΔΑ͏ʹ͢Δ
  39. ͋ΘͤͯಡΈ͍ͨ   େ͖ͳ૊৫ʹͳ͖ͬͯͨΒϚϧνΞΧ΢ϯτઓུͱͯ͠ -BOEJOH;POFͷߟ͑ํΛ׆༻͢Δ <Ϩϙʔτ>4&$r"SDIJUFDUJOH4FDVSJUZ(PWFSOBODF BDSPTTZPVS"84-BOEJOH;POFSFJOWFOU IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU

  40. ো֐࣌ͷ෮چํ๏Λ༧Ίݕ౼   w ෮چ͢ΔͨΊͷखஈ͸੔͓͑ͯ͜͏Ͷ w &#4εφοϓγϣοτɺ".*࡞੒ w $MPVE'PSNBUJPOςϯϓϨʔτ w

    ՄೳͳݶΓࣗಈԽ͓͍ͯͯ͠ खॱॻͱ͔ w σʔλɾϩά͸ߴ଱ٱੑͷ4΁อଘ
  41. ͋Δ͋Δࣦഊྫ   w εΫϦϓτ౳Ͱ*1΍Πϯελϯε*%ΛݻఆύϥϝʔλͰࢦఆ͢Δ w 3%4΍&-#ͷࢦఆ͸'2%/Λ࢖͏ w Πϯελϯε*%౳͸BXTDMJϝλσʔλΛ׆༻ w

    ಈతͳ஋͸ຒΊࠐ·ͣ44.ύϥϝʔλετΞΛ׆༻ w &$͕"VUP4DBMJOHͰೖΕସΘͬͯϩά͕࢒͍ͬͯͳ͍ w ϩά͸qVFOUE౳Ͱ4ʹग़͢ w 4ʹग़ͨ͠ϩά͸44FMFDU΍"UIFOBͰݕࡧՄೳ w $MPVE8BUDI"HFOUͰ$MPVE8BUDI-PHTͰ΋͍͍
  42. ͋ΘͤͯಡΈ͍ͨ   &$4ZTUFNT.BOBHFSͷύϥϝʔλετΞΛར ༻ͨ͠ΞϓϦέʔγϣϯ؀ڥઃఆͷ؅ཧ IUUQTEFWDMBTTNFUIPEKQDMPVEBXT QBSBNFUFSTUPSFBQQMJDBUJPODPOpH

  43. ͋ΘͤͯಡΈ͍ͨ   'MVFOUEͰ4ʹϩάΛऩूͯ͠ΈΔ IUUQTEFWDMBTTNFUIPEKQDMPVEBXT qVFOUET ϩά͸4ʹग़ͨ͠΄͏͕͍҆Ͱ͢

  44. "84͚ͩͰ͸ग़དྷͳ͍ηΩϡϦςΟରࡦ   αʔυύʔςΟ΋׆༻͍ͯͩ͘͠͞ ۩ମతͳ੡඼͸ׂѪ  w ΞϯνϚϧ΢ΣΞ w ৵ೖݕ஌

    w ϑΥϨϯδοΫ w ߴ౓ͳϩά෼ੳ
  45. ؂ࢹͷઃܭ

  46. ҟৗʹؾͮ͘ʹ͸؂ࢹ͕ඞਢ   ͍͍ͩͨ͸$MPVE8BUDIϝτϦΫεͰ֬ೝͰ͖·͢ ઃܭͰ΍Δ͜ͱ w ԿΛݟΔͷ͔ΛܾΊ͓ͯ͘ w μογϡϘʔυΛ࡞੒͓ͯ͘͠ w

    ΞϥʔϜΛઃఆ͓ͯ͘͠
  47. $MPVE8BUDIϝτϦΫεͰԿ͕ݟΕΔͷʁ   ଟ͗ͯ͢ॻ͚ͳ͍ͷͰ Ϧιʔε͝ͱάά͍ͬͯͩ͘͞

  48. &$पΓͷ؂ࢹϝτϦΫεྫ   w "-#5BSHFU(SPVQͷϝτϦΫεͰશମΛ֬ೝ w $POTVNFE-$6Tෛՙঢ়گͷ֬ೝ w 5BSHFU3FTQPOTF5JNFόοΫΤϯυ͔ΒͷϨεϙϯελΠϜ w

    6O)FBMUIZ)PTU$PVOUϨεϙϯε͕ͳ͍ϗετͷ֬ೝ w )551$PEF@5BSHFU@99@$PVOUαʔόΤϥʔͷΧ΢ϯτ w ݸผͷ&$Ͱ֬ೝ w $166UJMJ[BUJPO$16࢖༻཰ w .FNPSZ6UJMJ[BUJPO ΧελϜϝτϦΫε ϝϞϦ࢖༻཰ w %JTL6TBHF ΧελϜϝτϦΫε σΟεΫ࢖༻཰ w $16$SFEJU#BMBODFόʔετΠϯελϯεͷ৔߹ͷ࢒ΓΫϨδοτ
  49. ͋ΘͤͯಡΈ͍ͨ   3VO$PNNBOEͰෳ਺ͷ&$ΠϯελϯεͷΧε λϜϝτϦΫεΛҰׅઃఆ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBNB[POMJOVYQVUDVTUPNNFUSJDTXJUISVODPNNBOE ೖΕ͓ͯ͘ͱศརͰ͢

  50. ݟΔ΋ͷΛܾΊͨΒ$MPVE8BUDIμογϡϘʔυ࡞੒   ॏͶͨ΄͏͕͍ ͍ϝτϦΫε͸ ॏͶΔ ༻్ʹ߹Θͤͯ μογϡϘʔυ Λ࡞Δ

  51. ͋ΘͤͯಡΈ͍ͨ   $MPVE8BUDIμογϡϘʔυΛར༻ͯ͠Φʔτεέʔ ϧ؀ڥͷՔಇঢ়ଶΛՄࢹԽͯ͠Έͨ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBVUPTDBMMJOHXJUIDMPVEXBUDIEBTICPBSE ۩ମతͳμογϡϘʔυͷྫ͸ͪ͜ΒΛࢀর

  52. ΞϥʔϜΛઃఆ͢Δ   w ͱΓ͋͑ͣᮢ஋͸ෳ਺ઃఆ͓͚ͯ͠͹͍͍    ͱ͔ 

    w ௨஌དྷͨΒͲ͏͢Δ͔΋ܾΊ͓ͯ͘ w SFTUBSUIUUQEࣗಈԽͰ͖Δ w &$࠶ىಈࣗಈԽͰ͖Δ w &$࡟আͪΌΜͱ"VUP4DBMJOHͷઃఆ͓ͯ͘͠ w ௨஌಺༰͸ϝʔϧ௚ͩͱݟͮΒ͍͔Β੔ܗͯ͠4MBDLͱ͔ʹ ग़ͨ͠Β͍͍
  53. ͋ΘͤͯಡΈ͍ͨ   -BNCEBͷʮ#MVFQSJOUʯͰ؆୯ʹ4MBDLͱ $MPVE8BUDIΛ࿈ܞͯ͠Έͨ ೥൛  IUUQTEFWDMBTTNFUIPEKQDMPVEBXTMBNCEBCMVFQSJOUTMBDLDMPVEXBUDI ϝʔϧͰड͚औΔͷ͸ͭΒ͍Μ΍Ͱʜ

  54. 44.ʹΑΔηΩϡϦςΟӡ༻ࣗಈԽ

  55. ೰·͍͠ӡ༻ͷҰͭ͸੬ऑੑͷ؅ཧ   ͳΔ΂ࣗ͘ಈԽ͍ͨ͠

  56. "844ZTUFNT.BOBHFSٴͼͦͷίϯϙʔωϯτ ׆༻Ͱ͖ΔαʔϏε   Systems Manager Patch Manager Run Command

    Automation Maintenance Windows
  57. 4ZTUFNT.BOBHFSͱ͸   w ӡ༻Λշదʹ͢Δπʔϧ܊ w ௨শ44. w ΠϯελϯεʹΠϯετʔϧ͞ΕͨΤʔδΣϯτͰ ಈ࡞

    w &$ʹϩάΠϯ͠ͳͯ͘΋͍Ζ͍ΖͰ͖Δ
  58. 44.ͷίϯϙʔωϯτΛগ͠঺հ   w 3VO$PNNBOE w &$ʹϩάΠϯ͠ͳ͍Ͱ೚ҙͷίϚϯυΛൃߦ w TZTUFNDUMTUBUVTIUUQEͱ͔Ͱ͖Δ w

    44)ͷϙʔτΛ։͚ͳͯ͘΋͍͍ w τϥϒϧγϡʔτʹ΋ศར Run Command
  59. 44.ͷίϯϙʔωϯτΛগ͠঺հ   w "VUPNBUJPO w ࣗಈԽυΩϡϝϯτΛఆٛͯ͠ɺखॱ௨Γʹࣗಈ࣮ߦ w ҎԼͷΑ͏ͳϫʔΫϑϩʔΛఆٛͰ͖Δ w

    &$Λ"VUP4DBMJOH͔Β੾Γ཭͠ w &$Λఀࢭ w ".*Λऔಘ w &$ͷىಈ w &$Λ"VUP4DBMJOHʹ໭͢ Automation
  60. 44.ͷίϯϙʔωϯτΛগ͠঺հ   w .BJOUFOBODF8JOEPX w ࣌ؒ΍ִؒΛࢦఆͯ͠ॲཧΛεέδϡʔϦϯά͢Δ w "VUPNBUJPO΍3VO$PNNBOE౳Λ࣮ߦ͢Δ w

    ෳ਺ͷΠϯελϯεʹॱ൪ʹॲཧͨ͠ΓͰ͖Δ Maintenance Windows
  61. 44.ͷίϯϙʔωϯτΛগ͠঺հ   w 1BUDI.BOBHFS w ύονͷϧʔϧ ϕʔεϥΠϯ Λఆٛͯ͠ύονΛ؅ཧ w

    ϕʔεϥΠϯͷྫ w ෼ྨ͕4FDVSJUZͰॏཁ౓͕$SJUJDBMͷύον͸͙͢ద༻ w ͦΕҎ֎͸ϦϦʔε೔ޙʹద༻ w ύονͷద༻͸3VO$PNNBOE౳͔Β࣮ࢪ w ঢ়گΛ֬ೝ͢Δ4DBOͱద༻΋ߦ͏*OTUBMMΛબ΂Δ w 8JOEPXT4FSWFS΍֤छ-JOVY΋ରԠ Patch Manager
  62. ͋ΘͤͯಡΈ͍ͨ   &$4ZTUFNT.BOBHFSશ෦·ͱΊͯ঺հ͠· ͢ʂBXTQSFNJFS IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTZTUFNNBOBHFSNBUPNF େ·͔ͳ֓ཁ͸ͪ͜Β ΋͏গ͠ࡉ͔͍ͱ͜Ζ IUUQTXXXTMJEFTIBSFOFU"NB[PO8FC4FSWJDFT+BQBOBXTCMBDLCFMUPOMJOF TFNJOBSBXTTZTUFNTNBOBHFS

  63. ࣗಈԽ͢Δπʔϧ͸ἧ͍ͬͯΔ͕ʜ   ຊ౰ʹύονద༻ΛࣗಈԽ͍͍ͯ͠ͷʁ

  64. ύονద༻ࣗಈԽͷͨΊʹߟ͑Δ͜ͱ   w σάϨ΍ΞϓϦ΁ͷࢧো͕ग़ΔՄೳੑ͸ݕূ؀ڥͰ௵͢ w ·ͣ͸ݕূ؀ڥͰࣗಈతʹద༻͔ͯ͠Β໰୊ͳ͚Ε͹ຊ൪؀ڥʹ΋ద༻ ͢Δ w ਖ਼ৗͱ൑அ͢Δج४͸ઃ͚͓ͯ͘

    w )551ΞΫηε͕ਖ਼ৗͳΒ͍͍ͷ͔ w ಛఆͷಈ࡞Λ֬ೝ͢Δͷ͔ w ςετέʔε͕ແ͍ͷʹ൑அ͢Δͷ͸ແཧ w ਖ਼ৗੑςετΛࣗಈԽ͢Δ w ཧ૝ w ೔࿨ݟΞοϓσʔτ΋͋Γ w όοΫΞοϓ͔Βͷ෮چखॱཱ͕͍֬ͯ͠Ε͹ɺΨϯΨϯ্͛Ε͹͍͍
  65. େࣄͳͷ͸   ύον౰ͯͳ͍ͰΠϯγσϯτى͖ͨΒ ੹೚ॏେͰͬͤ ΍Βͳ͍ࣦഊΑΓ΍ࣦͬͯഊ͢Δ΂͠

  66. 44.ͷύονద༻ͷख๏ྫ   "VUP4DBMJOHͰ୆ͣͭࣗಈతʹύονΛ౰ͯΔ 44."VUPNBUJPO΍ͬͯΈͨ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTTNBVUPNBUJPOQBUDIBTHJOTUBODF ؀ڥΛॖୀͭͭ͠ఀࢭͤ͞ͳ͍ͰϩʔϦϯάΞοϓσʔτ

  67. ॲཧ಺༰   w "VUP4DBMJOH͔Β୆ΠϯελϯεΛબͿ w "VUP4DBMJOH͔Β੾Γ཭͢ 4UBOECZ  w

    ύονͷద༻ w ΠϯελϯεΛ໭͢ w Πϯελϯε͕ͳ͘ͳΔ·Ͱ܁Γฦ͢
  68. ৄ͘͠ղઆ   લఏͷ؀ڥ &-#"VUP4DBMJOH഑Լʹ &$͕ෳ਺୆͋Δ 44.ΤʔδΣϯτ͸Πϯετʔ ϧࡁΈ ඞཁͳ*".3PMFΞλονࡁΈ

  69. ϝϯςφϯε΢Πϯυ΢͔Β࣮ߦ   λʔήοτΛ "VUP4DBMJOH(SPVQʹઃఆ εέδϡʔϧ௨Γʹ։࢝ ྫຖि݄༵೔͔࣌Βͱ͔  ϝϯςφϯε΢Πϯυ΢͔Β Πϯελϯεͭͷ৘ใΛ

    "VUPNBUJPOʹ౉͢
  70. "VUPNBUJPOͷॲཧ   "VUPNBUJPO͕Πϯελϯε Λ"VUP4DBMJOH͔Β੾Γ཭͢ ਖ਼֬ʹ͸"VUPNBUJPO͔Β $MPVE'PSNBUJPOͰ -BNCEB͕࡞੒͞Εɺ -BNCEBͰ੾Γ཭͢

  71. 3VO$PNNBOEͰύονద༻   3VO$PNNBOE͔Βύον ద༻Λߦ͏ ద༻͢ΔϕʔεϥΠϯ͸1BUDI .BOBHFSͰఆٛ͞Ε͍ͯΔ΋ ͷΛར༻͢Δ

  72. ݩʹ໭͢܁Γฦ͢   "VUPNBUJPOͰ੾Γ཭ͨ͠Π ϯελϯεΛݩʹ໭͢ ਖ਼֬ʹ͸ɺಉ͘͡ $MPVE'PSNBUJPOͰల։͞ Εͨ-BNCEBͰ໭͢  ࣍ͷΠϯελϯεͰಉ͡ॲཧΛ

    ࣮ࢪ͢Δ
  73. ύονద༻ࣗಈԽͬͯ   εςΩ͡Όͳ͍Ͱ͔͢ʁ

  74. ηΩϡϦςΟӡ༻ࣗಈԽͷεεϝ   w ࣗಈԽ͢ΔͨΊͷઃܭΛ͔ͬ͠Γߦ͏ w ݕূ؀ڥɾςετख๏ɾධՁج४ w ύονϕʔεϥΠϯͷઃఆ w

    ύονద༻ॱং౳ͷઃܭ w ্ه͸ͲͷΈͪ͋Μ·ΓܾΊͳ͍Ͱӡ༻ʹؙ౤͛ͨ͠Βɺ ӡ༻Ͱۤ࿑͢Δ͔ΒઃܭͰ΍Δ w ઃܭͰ͖ͨͳΒࣗಈԽ͠Α͏
  75. ·ͱΊ   w ӡ༻ʹؙ౤͛͠ͳ͍ͰɺηΩϡΞͳ؀ڥΛઃܭ͢Δ w ϚωʔδυαʔϏεΛ׆༻ͯ͠ͳΔ΂ָ͘ͳ؀ڥʹ ͢Δ w ؂ࢹ΍ύονద༻ͷӡ༻ํ๏ΛͪΌΜͱܾΊΔ

    w ઃܭͪΌΜͱͰ͖ͨͳΒࣗಈԽͰ͖Δɺ͖ͬͱ
  76. ӡ༻ઃܭΛͪΌΜͱ΍ͬͯ   Α͍ࣗಈԽϥΠϑΛ Α͍ηΩϡϦςΟϥΠϑΛ

  77. ͓·͚ ͜͜࠷ۙͷηΩϡϦςΟܥࢀߟࢿྉ

  78. ͓·͚   w ʮ4Ͱޡͬͨσʔλͷެ։Λ๷͙ύϒϦοΫΞΫηεઃఆػೳ͕௥ Ճ͞Ε·ͨ͠ʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTCMPDLQVCMJDBDDFTT w ΄΅͢΂ͯͷ"84Ϣʔβ͕͜ͷઃఆΛࠓ͙͢༗ޮԽ͢΂͖4ͷσʔλ

    ΛकΔػೳ w ʮ$MPVE5SBJMͷηΩϡϦςΟ؂ࢹΛͪΐʔ؆୯ʹ΍ͬͯΈͨ ʲ4VNP-PHJDʳʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDMPVEUSBJMTFDVSJUZBOBMZUJDTXJUITVNPMPHJD w "84ηΩϡϦςΟͷͨΊͷϩά෼ੳΛ؆୯ʹߦ͏ํ๏
  79. ͓·͚   w ʮ<଎ใ>ηΩϡϦςΟ৘ใΛҰׅͰ؅ཧͰ͖Δ"844FDVSJUZ )VC͕ൃද͞ΕͨͷͰ࢖ͬͯΈ·ͨ͠ʂSFJOWFOUʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDVSJUZ IVC w

    ৽ػೳ4FDVSJUZ)VCͰηΩϡϦςΟ৘ใͷҰׅ؅ཧ w ʮ<Ϩϙʔτ>4&$"84ͷϑΥϨϯδοΫΛαʔόϨεʹߦ ͏ํ๏SFJOWFOUʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU w &$ͷϑΥϨϯδοΫΛαʔόϨεʹ࣮ݱ͢ΔTTNBDRVJSFͷ঺հ
  80. ͓·͚   w ʮ"848"'ͷϩάΛ'JSFIPTFͰ4ʹग़ྗ͠ϒϩοΫϩ άΛ44FMFDUͰ֬ೝͯ͠Έͨʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXGXBGDPNQSFIFOTJWFMPHHJOH w "848"'ͷϩάऔಘํ๏

    w ʮ"848"'ͷϑϧϩάΛ"UIFOBͰ෼ੳͰ͖ΔΑ͏ʹͯ͠ Έͨʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTRVFSZBXTXBGGVMMMPHCZBUIFOB w "848"'ͷϩά෼ੳํ๏
  81. ͓·͚   w ʮ",*#""84Ͱʮ"84ݻ༗ͷηΩϡϦςΟϦεΫͱ ରࡦʯͱ͍͏λΠτϧͰ஻Γ·ͨ͠ʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBLJCBBXTTQFDJpDBXTTFDVSJUZ w "84ݻ༗ͷϦεΫ΋͋Γ·͢

    w ʮ4FDVSJUZ+"84ୈճϨϙʔτTFDKBXT TFDKBXTKBXTVHʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZKBXTSFQPSU w 4FDVSJUZ+"84ͷϨϙʔτ