[初心者向け]AWS環境のセキュリティ運用(設計)をはじめてみよう

JAWS DAYS 2019での登壇資料です。
ブログ: https://dev.classmethod.jp/cloud/aws/jaws-days-2019-a-security/
JAWSDAYS: https://jawsdays2019.jaws-ug.jp/session/1270/

Transcript

1. <ॳ৺ऀ޲͚>
   "84؀ڥͷηΩϡϦςΟӡ༻ ઃܭ
   Λ
   ͸͡ΊͯΈΑ͏
   
   4FDVSJUZ+"84ӓాɹՂ༞
   

   View Slide

2. ࣗݾ঺հ
   
   ӓాɹՂ༞
   ɾΫϥεϝιουגࣜձࣾ
   ɾ"84ࣄۀຊ෦
   ɹιϦϡʔγϣϯΞʔΩςΫτ
   ɹɹηΩϡϦςΟνʔϜ
   ɾ4FDVSJUZ+"84ӡӦ
   ɾ޷͖ͳαʔϏε
   ɹ"848"'Ϛωʔδυϧʔϧ
   AWS WAF
   

   View Slide

3. ͜ͷηογϣϯͷλʔήοτ
   
   w "84ॳ৺ऀ
   w ઃܭɾߏஙɾӡ༻ɾอकʹܞΘΔํ
   w ηΩϡϦςΟ୲౰ऀ
   w "84ࣗମͷηΩϡϦςΟʹ͸໰୊ͳ͍͜ͱ͕
   Θ͔͍ͬͯΔํ
   

   View Slide

4. ͪͳΈʹηΩϡϦςΟ͕ෆ҆ͱ͍͏ํ͸ʜ
   
   ɾ"84ͷηΩϡϦςΟ͕ෆ҆
   ɾ৬৔Ͱ"84͕৮Εͳ͍ͷΛͳΜͱ͔͍ͨ͠
   Ҏ্ͷํ͸ڈ೥ͷࢿྉΛࢀߟʹ͍ͯͩ͘͠͞
   IUUQTEFWDMBTTNFUIPEKQDMPVEBXTKBXTEBZTJTFDVSJUZ
   

   View Slide

5. ࠓճ͸
   
   ࣮ࡍͲΜͳ؀ڥΛ࡞ͬͯ
   ηΩϡϦςΟΛอ͍͔ͬͯ͘ͱ͍͏࿩
   

   View Slide

6. ίϯηϓτ
   
   ָʹڧ͘कΔ
   

   View Slide

7. ӡ༻ͰͷηΩϡϦςΟͷΠϝʔδ
   
   w ͭΒ͍
   w ͍ͨ΁Μ
   w ੹೚ॏେ
   w ϧʔνϯϫʔΫ
   w ͭ·Βͳ͍
   Ͳ͏ͯ͜͠ΜͳΠϝʔδʹͳΔͷ͔ʁ
   

   View Slide

8. ࣮ࡍͲΜͳ͜ͱΛ΍͍ͬͯΔ͔
   
   w ηΩϡϦςΟάϧʔϓͷઃఆΛมߋ͢Δ
   w Ϧιʔεͷ؂ࢹ ϝτϦΫεͷಈ͖ͷ֬ೝͱ͔
   
   w ϩάʹมͳ΋ͷ͕ͳ͍͔֬ೝ͢Δ
   w ੬ऑੑͷ֬ೝ
   w ύονΛ౰ͯΔ
   w ଞʹ΋͍Ζ͍Ζ
   ຊ౰ʹਓྗͰ΍Δඞཁ͕͋Γ·͔͢ʁ
   

   View Slide

9. ηΩϡϦςΟʹݶΒͣͰ͕͢
   
   ӡ༻͸ݱ৔Ͱى͍ͬͯ͜ΔͷͰ͸ͳ͍
   ઃܭஈ֊͔Β࢝·͍ͬͯΔͷͩ
   

   View Slide

10. ͳΜͰ΋ӡ༻ʹؙ౤͛ʹͳͬͯͳ͍Ͱ͔͢ʁ
    
    ͳΔ΂͘ઃܭͰ௵͠·͠ΐ͏Ͷ
    

    View Slide

11. ΞδΣϯμ
    
    ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ
    ؂ࢹͷઃܭ
    44.ʹΑΔηΩϡϦςΟӡ༻ࣗಈԽ
    

    View Slide

12. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ
    "84શମ
    

    View Slide

13. "84؀ڥશମͷίϯϙʔωϯτ
    
    ·ͣ͸͢΂ͯͷΞΧ΢ϯτͰར༻͞ΕΔ΂͖΋ͷ
    w "84$MPVE5SBJM
    w "84$POpH
    w "NB[PO(VBSE%VUZ
    w "844IJFME
    

    View Slide

14. $MPVE5SBJM
    
    "84$MPVE5SBJMʹΑΓૢ࡞ϩάΛऔಘ͢Δ
    $MPVE5SBJM͸"1*ૢ࡞ͳͲͷΞΫγϣϯΛϩΪϯά͢
    ΔαʔϏε
    ηΩϡϦςΟΠϯγσϯτ౳͕ൃੜͨ͠ࡍʹ෼ੳʹ׆༻
    શϦʔδϣϯͰͷ༗ޮԽΛਪ঑
    AWS
    CloudTrail
    

    View Slide

15. ͋ΘͤͯಡΈ͍ͨ
    
    ৽نΞΧ΢ϯτͰ΋͜ΕҰൃʂ$MPVE5SBJMΛશ
    ϦʔδϣϯͰ༗ޮԽ͢ΔεΫϦϓτΛॻ͍ͨ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDMPVEUSBJMBDUJWBUF
    ·ͩ༗ޮʹͳ͍ͬͯͳ͍ΞΧ΢ϯτ͸ҰൃೖΕ͓͖ͯ·͠ΐ͏
    

    View Slide

16. "84$POpH
    
    "84$POpHͱ͸
    ηΩϡϦςΟͱΨόφϯεΛՄೳʹ͢Δߏ੒มߋͷ௨
    ஌ɺߏ੒ཤྺɺ"84ϦιʔεͷΠϯϕϯτϦʔΛ͓
    ٬༷΁ఏڙ͢Δ׬શϚωʔδυܕͷαʔϏεͰ͢ɻ
    ؆୯ʹ"84Ϧιʔεͷߏ੒΍มߋΛՄࢹԽ͢Δ͜ͱ
    ͕ग़དྷ·͢ɻ
    AWS
    Config
    

    View Slide

17. ͋ΘͤͯಡΈ͍ͨ
    
    "84$POpH͸ͱΓ͋͑ͣ༗ޮʹ͠Α͏
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTDPOpHTUBSU
    ·ͣ͸͜ΕΛϕʔεʹ༗ޮԽʂ
    

    View Slide

18. (VBSE%VUZ
    
    ڴҖݕ஌ͷϚωʔδυαʔϏε
    ػցֶशʹΑΓτϥϑΟοΫϩά౳͔Β
    ո͍͠௨৴Λݕ஌͢Δ
    ྫ͑͹44)΁ͷϒϧʔτϑΥʔε΍Ϛϧ΢ΣΞ
    ͷ௨৴ɺϏοτίΠϯͷϚΠχϯάʹ࢖ΘΕ͍ͯ
    Δ৵֐͞Εͨ&$ΠϯελϯεΛݕग़Ͱ͖·͢ɻ
    Amazon
    GuardDuty
    

    View Slide

19. ͋ΘͤͯಡΈ͍ͨ
    
    ҰൃͰ(VBSE%VUZΛશϦʔδϣϯ༗ޮԽͯ͠௨஌ઃ
    ఆ͢ΔςϯϓϨʔτ࡞ͬͨ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFUHVBSEEVUZBMMSFHJPO
    ·ͣ͸Ұൃ༗ޮԽʂ
    

    View Slide

20. "844IJFME
    
    Ϛωʔδυͳ%%P4อޢαʔϏεͰ
    ແྉͰ࠷ॳ͔Β--Ϩϕϧ͕อޢ͞Ε͍ͯΔ
    4UBOEBSEϓϥϯͱɺ"84ͷ%%P4ઐ໳νʔ
    Ϝͱ࿈ܞͯ͠-΍େن໛ͳ%%P4ʹର߅͢Δ
    "EWBODFEϓϥϯ͕͋Δ
    4UBOEBSE͸ͱ͘ʹઃఆͷඞཁͳ͠
    AWS
    Shield
    

    View Slide

21. ͪΌΜͱ༗ޮԽʹͯ͠·͔ͨ͠ʁ
    
    w ΋͠·ͩͳΒ͙͢νΣοΫ͠·͠ΐ͏
    w ͲΕ΋͍͟ͱ͍͏ͱ͖ʹ໾ཱͭ΋ͷͰ͢ɺීஈ͔Β
    ༗ޮԽͯ͠ͳ͍ͱઈରࠔΓ·͢
    w ྉۚ͸&$ͱ͔ͱൺ΂Δͱ΄ͱΜͲؾʹͳΔ΋ͷͰ
    ͸ͳ͍ͷͰແࢹ͠·͠ΐ͏
    w අ༻ରޮՌ͸ઈେͰ͢
    

    View Slide

22. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ
    71$؀ڥपΓ
    

    View Slide

23. 
    
    ·ͣ͸ཧ૝ͷߏ੒
    

    View Slide

24. ҰൠతʹηΩϡΞͳߏ੒
    
    w ࡾ૚ωοτϫʔΫ
    w ϑϩϯτҎ֎͸ϓϥΠϕʔτ
    w Ϛϧν";
    w "VUP4DBMJOH
    w ֎෦௨৴͸/"5ܦ༝
    w ඞཁʹԠ͡$MPVE'SPOU΍
    8"'Λಋೖ
    

    View Slide

25. 
    
    μϝͳύλʔϯ
    

    View Slide

26. &$͕୆ͷΈɺ௚઀Πϯλʔωοτʹ໘͍ͯ͠Δ
    
    w ৑௕Խ͞Εͯͳ͍
    w αʔϏεͱ؅ཧΞΫηε͕
    ಉ͡*1
    w εέʔϧ͠ͳ͍
    w ΠϯελϯεམͪͨΒ෮چ
    ͠ͳ͍
    ͍Ζ͍ΖϦεΩʔ
    

    View Slide

27. ઃܭͷجຊ
    
    Design for Failure
    ো֐͕ى͖Δ͜ͱΛલఏʹઃܭ͠·͠ΐ͏
    

    View Slide

28. ࠷௿ݶͷϥΠϯ
    
    w Ϛϧν";Ͱ৑௕Խ͢Δ
    w ";ো֐͕ͳͯ͘΋Πϯελϯε͕ࢮ͵Մೳੑ͕͋Δ
    w ϦλΠΞϝϯτ΍αʔό಺ͷϝϞϦϦʔΫͳͲ
    w αʔϏε͕গ͠ࢭ·͍͍ͬͯͳΒγϯάϧ";Ͱ΋͍͍
    w "VUP4DBMJOH(SPVQʹೖΕΔ
    w Πϯελϯε୆Ͱ΋࢖͏
    w ো֐࣌ʹࣗಈ෮چͯ͘͠ΕΔ
    w ΠϯελϯεΛࣗಈతʹɾ؆୯ʹ૿΍ͤΔ ౰ॳ༧ఆ͕ͳͯ͘΋ٸ
    ʹ૿΍ͨ͘͠ͳͬͨͱ͖ʹศར
    
    

    View Slide

29. ࠷௿ݶͷϥΠϯ
    
    w &-#ɾ/BU(BUFXBZΛۦ࢖ͯ͠&$͸ϓϥΠϕʔτʹ
    w ௚઀֎෦ʹࡽ͞ΕΔͷ͸ྑ͘ͳ͍
    w &-#͸Πϯελϯε୆͔ΒͰ΋ϝϦοτ͸͍ͬͺ͍͋Δ
    w 5-4ऴ୺Ͱ͖Δ
    w "848"'͕ར༻Ͱ͖Δ
    w &$ͷ੾Γସ͕͑༰қ
    w )551पΓͷϝτϦΫεΛऩूͰ͖Δ
    

    View Slide

30. ͋ΘͤͯಡΈ͍ͨ
    
    ",*#"BXTୈճجૅฤͰʮෛՙ෼ࢄ͚ͩ͡Όͳ
    ͍&-#ͷϝϦοτʯΛ࿩͠·ͨ͠
    IUUQTEFWDMBTTNFUIPEKQFUDBLJCBBXT—FMCNFSJU
    ϝϦοτ͍ͬͺ͍Ͱ͢Α
    

    View Slide

31. ΋͏গ͠ؤுΔͳΒ
    
    w $MPVE'SPOUͰ੩తίϯςϯπΛΩϟογϡ͢Δ
    w ΞΫηε͕େྔʹདྷͯ΋අ༻ΛकΕΔ
    w ͳΜͳΒόοΫΤϯυΛ4ʹ͢Δ
    w ϛυϧ΢ΣΞ͕ͳ͘ͳΔͷͰ੬ऑੑ؅ཧָ͕ʹ
    w "848"'Λ࢖͏
    w ༻్ʹ߹ΘͤͨϚωʔδυϧʔϧΛ࢖͏ͱָʹ׆༻Ͱ͖Δ
    w ཁ͕݅໌֬ͳΒݸผʹϧʔϧΛνϡʔχϯά
    

    View Slide

32. ͋ΘͤͯಡΈ͍ͨ
    
    $MPVE'PSNBUJPOͰ0"*Λ࢖ͬͨ$MPVE'SPOU4ͷ
    ੩తίϯςϯπ഑৴ΠϯϑϥΛ࡞Δ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTDMPVEGSPOUXJUIPBJCZDMPVEGPSNBUJPO
    $'4ͳΒ4Λ੩తϗεςΟϯάͤͣ0"*Λར༻͠·͠ΐ͏
    

    View Slide

33. ͋ΘͤͯಡΈ͍ͨ
    
    ʲ৽ػೳʳ"848"'ϚωʔδυϧʔϧΛ࢖ͬͯ
    8PSE1SFTTʹର͢Δ߈ܸΛ๷͍ͰΈͨSFJOWFOU
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTSFJOWFOUXBGNBOBHFESVMFUSZ
    Ϛωʔδυϧʔϧͷྑ͞ʹ͍ͭͯৄ͘͠ղઆ͠ɺ߹Θ࣮ͤͯಈ࡞ͷݕূ
    Λߦͳ͍ͬͯ·͢
    

    View Slide

34. 4FDVSJUZ(SPVQͷ࢖͍ํ
    
    w /"$-͸࠷௿ݶʹͯ͠ΞΫηε੍ݶ͸جຊ4(دͤ
    w Ϧιʔεʹෳ਺4(ΞλονՄೳͳͨΊɺ໾ׂ͝ͱͷ4(Λ࡞੒͢ΔɻҎԼྫ
    w &-#4(&-#༻ɻQPSUΛڐՄ͢Δ
    w 8FC4(8FCαʔό༻ɻ&-#4(͔ΒͷΛڐՄ
    w 0GpDF4(0GpDF͔Βͷ؅ཧΞΫηε
    ΛڐՄ
    w ໾ׂؒ͸4(ͷ*%ͰڐՄ͢Δ αϒωοτͷ*1Ϩϯδ͸࢖Θͳ͍
    
    w Ұ࣌తͳ࡞ۀ͸4(ʹ*1Λ௥هͰ͸ͳͯ͘ɺ࡞ۀ༻4(ΛΞλον͢ΔΑ͏ʹ͢Δ
    w ࡞ۀϛεͰϧʔϧΛফͨ͠Γ͢Δ͜ͱ͕ͳ͘ͳΔ
    w ܁Γฦ͠ߦ͏ͱ͖ʹ࢖͍΍͍͢
    

    View Slide

35. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ
    ͦͷଞ
    

    View Slide

36. "845SVTUFE"EWJTPSͰηΩϡϦςΟϦεΫͷ؂ࢹ
    
    "845SVTUFE"EWJTPS͸ʮίετ࠷దԽʯɺʮύϑΥʔϚϯεʯɺ
    ʮηΩϡϦςΟʯɺʮϑΥʔϧττϨʔϥϯεʯͷ̐ͭͷ؍఺͔Βɺ
    ར༻ऀͷ"84؀ڥΛ"84͕ࣗಈͰਫ਼ࠪ͠ɺਪ঑ઃఆͷ͓஌ΒͤΛ͠
    ͯ͘ΕΔػೳͰ͢ɻ
    *".΍4ͷઃఆͳͲ͕໰୊ͳ͍͔νΣοΫͯ͘͠ΕΔɻ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDNBEWFOUDBMFOEBSHFUUJOHTUBSUFEBHBJOBXTUE
    

    View Slide

37. ͋ΘͤͯಡΈ͍ͨ
    
    "84ίϯιʔϧͷϩάΠϯ༻ΞΧ΢ϯτΛ*".ͷϕε
    τϓϥΫςΟεʹैͬͯ࡞੒ͯ͠Έͨ ઃఆฤ
    
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTJBNMPHJOVTFSCFTUQSBDUJDFT
    ࣮ࡍʹ*".ϕετϓϥΫςΟεΛຬͨ͢Α͏ʹઃఆ͢Δํ๏Λ֬ೝͰ͖·͢
    

    View Slide

38. *".ͷ؅ཧ͸Ԟ͕ਂ͍͚Ͳɺख͸ൈ͔ͳ͍Α͏ʹ
    
    w ਓ͕࢖͏*".6TFS͸.'"ඞਢ
    w ਓ͕࢖Θͳ͍*".6TFS͸࠷௿ݶͷΈ
    w *".3PMF͕࢖͑Δ৔߹͸3PMFΛ࢖͏
    w ෳ਺ΞΧ΢ϯτΛ·͕ͨΔ৔߹ɺͭͷΞΧ΢ϯτʹਓ͕࢖͏*".6TFSΛ
    ू໿ͯ͠ɺ4XJUDI3PMF͢Δ
    w ΫϨσϯγϟϧ͕୔ࢁੜ੒͞Εͳ͍ͷͰ؅ཧ͠΍͍͢
    w *".3PMF͸৭Μͳ৔໘Ͱ࡞੒͢Δඞཁ͕͋ΔͨΊɺ؅ཧऀ͕ੜ੒͢ΔΑ͏
    ʹ͢Δͱਏ͍
    w ՄೳͳݶΓϦςϥγʔڭҭͱ"84$POpHϧʔϧΛ׆༻ͯ͠։ൃऀͰ΋࡞੒Ͱ͖
    ΔΑ͏ʹ͢Δ
    

    View Slide

39. ͋ΘͤͯಡΈ͍ͨ
    
    େ͖ͳ૊৫ʹͳ͖ͬͯͨΒϚϧνΞΧ΢ϯτઓུͱͯ͠
    -BOEJOH;POFͷߟ͑ํΛ׆༻͢Δ
    <Ϩϙʔτ>4&$r"SDIJUFDUJOH4FDVSJUZ(PWFSOBODF
    BDSPTTZPVS"84-BOEJOH;POFSFJOWFOU
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU
    

    View Slide

40. ো֐࣌ͷ෮چํ๏Λ༧Ίݕ౼
    
    w ෮چ͢ΔͨΊͷखஈ͸੔͓͑ͯ͜͏Ͷ
    w εφοϓγϣοτɺ".*࡞੒
    w $MPVE'PSNBUJPOςϯϓϨʔτ
    w ՄೳͳݶΓࣗಈԽ͓͍ͯͯ͠
    खॱॻͱ͔
    w σʔλɾϩά͸ߴ଱ٱੑͷ4΁อଘ
    

    View Slide

41. ͋Δ͋Δࣦഊྫ
    
    w εΫϦϓτ౳Ͱ*1΍Πϯελϯε*%ΛݻఆύϥϝʔλͰࢦఆ͢Δ
    w 3%4΍&-#ͷࢦఆ͸'2%/Λ࢖͏
    w Πϯελϯε*%౳͸BXTDMJϝλσʔλΛ׆༻
    w ಈతͳ஋͸ຒΊࠐ·ͣ44.ύϥϝʔλετΞΛ׆༻
    w &$͕"VUP4DBMJOHͰೖΕସΘͬͯϩά͕࢒͍ͬͯͳ͍
    w ϩά͸qVFOUE౳Ͱ4ʹग़͢
    w 4ʹग़ͨ͠ϩά͸44FMFDU΍"UIFOBͰݕࡧՄೳ
    w $MPVE8BUDI"HFOUͰ$MPVE8BUDI-PHTͰ΋͍͍
    

    View Slide

42. ͋ΘͤͯಡΈ͍ͨ
    
    &$4ZTUFNT.BOBHFSͷύϥϝʔλετΞΛར
    ༻ͨ͠ΞϓϦέʔγϣϯ؀ڥઃఆͷ؅ཧ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXT
    QBSBNFUFSTUPSFBQQMJDBUJPODPOpH
    

    View Slide

43. ͋ΘͤͯಡΈ͍ͨ
    
    'MVFOUEͰ4ʹϩάΛऩूͯ͠ΈΔ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXT
    qVFOUET
    ϩά͸4ʹग़ͨ͠΄͏͕͍҆Ͱ͢
    

    View Slide

44. "84͚ͩͰ͸ग़དྷͳ͍ηΩϡϦςΟରࡦ
    
    αʔυύʔςΟ΋׆༻͍ͯͩ͘͠͞
    ۩ମతͳ੡඼͸ׂѪ
    
    w ΞϯνϚϧ΢ΣΞ
    w ৵ೖݕ஌
    w ϑΥϨϯδοΫ
    w ߴ౓ͳϩά෼ੳ
    

    View Slide

45. ؂ࢹͷઃܭ
    

    View Slide

46. ҟৗʹؾͮ͘ʹ͸؂ࢹ͕ඞਢ
    
    ͍͍ͩͨ͸$MPVE8BUDIϝτϦΫεͰ֬ೝͰ͖·͢
    ઃܭͰ΍Δ͜ͱ
    w ԿΛݟΔͷ͔ΛܾΊ͓ͯ͘
    w μογϡϘʔυΛ࡞੒͓ͯ͘͠
    w ΞϥʔϜΛઃఆ͓ͯ͘͠
    

    View Slide

47. $MPVE8BUDIϝτϦΫεͰԿ͕ݟΕΔͷʁ
    
    ଟ͗ͯ͢ॻ͚ͳ͍ͷͰ
    Ϧιʔε͝ͱάά͍ͬͯͩ͘͞
    

    View Slide

48. &$पΓͷ؂ࢹϝτϦΫεྫ
    
    w "-#5BSHFU(SPVQͷϝτϦΫεͰશମΛ֬ೝ
    w $POTVNFE-$6Tෛՙঢ়گͷ֬ೝ
    w 5BSHFU3FTQPOTF5JNFόοΫΤϯυ͔ΒͷϨεϙϯελΠϜ
    w 6O)FBMUIZ)PTU$PVOUϨεϙϯε͕ͳ͍ϗετͷ֬ೝ
    w )551$PEF@5BSHFU@99@$PVOUαʔόΤϥʔͷΧ΢ϯτ
    w ݸผͷ&$Ͱ֬ೝ
    w $166UJMJ[BUJPO$16࢖༻཰
    w .FNPSZ6UJMJ[BUJPO ΧελϜϝτϦΫε
    ϝϞϦ࢖༻཰
    w %JTL6TBHF ΧελϜϝτϦΫε
    σΟεΫ࢖༻཰
    w $16$SFEJU#BMBODFόʔετΠϯελϯεͷ৔߹ͷ࢒ΓΫϨδοτ
    

    View Slide

49. ͋ΘͤͯಡΈ͍ͨ
    
    3VO$PNNBOEͰෳ਺ͷ&$ΠϯελϯεͷΧε
    λϜϝτϦΫεΛҰׅઃఆ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBNB[POMJOVYQVUDVTUPNNFUSJDTXJUISVODPNNBOE
    ೖΕ͓ͯ͘ͱศརͰ͢
    

    View Slide

50. ݟΔ΋ͷΛܾΊͨΒ$MPVE8BUDIμογϡϘʔυ࡞੒
    
    ॏͶͨ΄͏͕͍
    ͍ϝτϦΫε͸
    ॏͶΔ
    ༻్ʹ߹Θͤͯ
    μογϡϘʔυ
    Λ࡞Δ
    

    View Slide

51. ͋ΘͤͯಡΈ͍ͨ
    
    $MPVE8BUDIμογϡϘʔυΛར༻ͯ͠Φʔτεέʔ
    ϧ؀ڥͷՔಇঢ়ଶΛՄࢹԽͯ͠Έͨ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBVUPTDBMMJOHXJUIDMPVEXBUDIEBTICPBSE
    ۩ମతͳμογϡϘʔυͷྫ͸ͪ͜ΒΛࢀর
    

    View Slide

52. ΞϥʔϜΛઃఆ͢Δ
    
    w ͱΓ͋͑ͣᮢ஋͸ෳ਺ઃఆ͓͚ͯ͠͹͍͍
    ͱ͔
    
    w ௨஌དྷͨΒͲ͏͢Δ͔΋ܾΊ͓ͯ͘
    w SFTUBSUIUUQEࣗಈԽͰ͖Δ
    w &$࠶ىಈࣗಈԽͰ͖Δ
    w &$࡟আͪΌΜͱ"VUP4DBMJOHͷઃఆ͓ͯ͘͠
    w ௨஌಺༰͸ϝʔϧ௚ͩͱݟͮΒ͍͔Β੔ܗͯ͠4MBDLͱ͔ʹ
    ग़ͨ͠Β͍͍
    

    View Slide

53. ͋ΘͤͯಡΈ͍ͨ
    
    -BNCEBͷʮ#MVFQSJOUʯͰ؆୯ʹ4MBDLͱ
    $MPVE8BUDIΛ࿈ܞͯ͠Έͨ ೥൛
    
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTMBNCEBCMVFQSJOUTMBDLDMPVEXBUDI
    ϝʔϧͰड͚औΔͷ͸ͭΒ͍Μ΍Ͱʜ
    

    View Slide

54. 44.ʹΑΔηΩϡϦςΟӡ༻ࣗಈԽ
    

    View Slide

55. ೰·͍͠ӡ༻ͷҰͭ͸੬ऑੑͷ؅ཧ
    
    ͳΔ΂ࣗ͘ಈԽ͍ͨ͠
    

    View Slide

56. "844ZTUFNT.BOBHFSٴͼͦͷίϯϙʔωϯτ
    ׆༻Ͱ͖ΔαʔϏε
    
    Systems Manager
    Patch Manager
    Run Command
    Automation
    Maintenance
    Windows
    

    View Slide

57. 4ZTUFNT.BOBHFSͱ͸
    
    w ӡ༻Λշదʹ͢Δπʔϧ܊
    w ௨শ44.
    w ΠϯελϯεʹΠϯετʔϧ͞ΕͨΤʔδΣϯτͰ
    ಈ࡞
    w &$ʹϩάΠϯ͠ͳͯ͘΋͍Ζ͍ΖͰ͖Δ
    

    View Slide

58. 44.ͷίϯϙʔωϯτΛগ͠঺հ
    
    w 3VO$PNNBOE
    w &$ʹϩάΠϯ͠ͳ͍Ͱ೚ҙͷίϚϯυΛൃߦ
    w TZTUFNDUMTUBUVTIUUQEͱ͔Ͱ͖Δ
    w 44)ͷϙʔτΛ։͚ͳͯ͘΋͍͍
    w τϥϒϧγϡʔτʹ΋ศར
    Run Command
    

    View Slide

59. 44.ͷίϯϙʔωϯτΛগ͠঺հ
    
    w "VUPNBUJPO
    w ࣗಈԽυΩϡϝϯτΛఆٛͯ͠ɺखॱ௨Γʹࣗಈ࣮ߦ
    w ҎԼͷΑ͏ͳϫʔΫϑϩʔΛఆٛͰ͖Δ
    w &$Λ"VUP4DBMJOH͔Β੾Γ཭͠
    w &$Λఀࢭ
    w ".*Λऔಘ
    w &$ͷىಈ
    w &$Λ"VUP4DBMJOHʹ໭͢
    Automation
    

    View Slide

60. 44.ͷίϯϙʔωϯτΛগ͠঺հ
    
    w .BJOUFOBODF8JOEPX
    w ࣌ؒ΍ִؒΛࢦఆͯ͠ॲཧΛεέδϡʔϦϯά͢Δ
    w "VUPNBUJPO΍3VO$PNNBOE౳Λ࣮ߦ͢Δ
    w ෳ਺ͷΠϯελϯεʹॱ൪ʹॲཧͨ͠ΓͰ͖Δ
    Maintenance
    Windows
    

    View Slide

61. 44.ͷίϯϙʔωϯτΛগ͠঺հ
    
    w 1BUDI.BOBHFS
    w ύονͷϧʔϧ ϕʔεϥΠϯ
    Λఆٛͯ͠ύονΛ؅ཧ
    w ϕʔεϥΠϯͷྫ
    w ෼ྨ͕4FDVSJUZͰॏཁ౓͕$SJUJDBMͷύον͸͙͢ద༻
    w ͦΕҎ֎͸ϦϦʔε೔ޙʹద༻
    w ύονͷద༻͸3VO$PNNBOE౳͔Β࣮ࢪ
    w ঢ়گΛ֬ೝ͢Δ4DBOͱద༻΋ߦ͏*OTUBMMΛબ΂Δ
    w 8JOEPXT4FSWFS΍֤छ-JOVY΋ରԠ
    Patch Manager
    

    View Slide

62. ͋ΘͤͯಡΈ͍ͨ
    
    &$4ZTUFNT.BOBHFSશ෦·ͱΊͯ঺հ͠·
    ͢ʂBXTQSFNJFS
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTZTUFNNBOBHFSNBUPNF
    େ·͔ͳ֓ཁ͸ͪ͜Β
    ΋͏গ͠ࡉ͔͍ͱ͜Ζ
    IUUQTXXXTMJEFTIBSFOFU"NB[PO8FC4FSWJDFT+BQBOBXTCMBDLCFMUPOMJOF
    TFNJOBSBXTTZTUFNTNBOBHFS
    

    View Slide

63. ࣗಈԽ͢Δπʔϧ͸ἧ͍ͬͯΔ͕ʜ
    
    ຊ౰ʹύονద༻ΛࣗಈԽ͍͍ͯ͠ͷʁ
    

    View Slide

64. ύονద༻ࣗಈԽͷͨΊʹߟ͑Δ͜ͱ
    
    w σάϨ΍ΞϓϦ΁ͷࢧো͕ग़ΔՄೳੑ͸ݕূ؀ڥͰ௵͢
    w ·ͣ͸ݕূ؀ڥͰࣗಈతʹద༻͔ͯ͠Β໰୊ͳ͚Ε͹ຊ൪؀ڥʹ΋ద༻
    ͢Δ
    w ਖ਼ৗͱ൑அ͢Δج४͸ઃ͚͓ͯ͘
    w )551ΞΫηε͕ਖ਼ৗͳΒ͍͍ͷ͔
    w ಛఆͷಈ࡞Λ֬ೝ͢Δͷ͔
    w ςετέʔε͕ແ͍ͷʹ൑அ͢Δͷ͸ແཧ
    w ਖ਼ৗੑςετΛࣗಈԽ͢Δ
    w ཧ૝
    w ೔࿨ݟΞοϓσʔτ΋͋Γ
    w όοΫΞοϓ͔Βͷ෮چखॱཱ͕͍֬ͯ͠Ε͹ɺΨϯΨϯ্͛Ε͹͍͍
    

    View Slide

65. େࣄͳͷ͸
    
    ύον౰ͯͳ͍ͰΠϯγσϯτى͖ͨΒ
    ੹೚ॏେͰͬͤ
    ΍Βͳ͍ࣦഊΑΓ΍ࣦͬͯഊ͢Δ΂͠
    

    View Slide

66. 44.ͷύονద༻ͷख๏ྫ
    
    "VUP4DBMJOHͰ୆ͣͭࣗಈతʹύονΛ౰ͯΔ
    44."VUPNBUJPO΍ͬͯΈͨ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTTNBVUPNBUJPOQBUDIBTHJOTUBODF
    ؀ڥΛॖୀͭͭ͠ఀࢭͤ͞ͳ͍ͰϩʔϦϯάΞοϓσʔτ
    

    View Slide

67. ॲཧ಺༰
    
    w "VUP4DBMJOH͔Β୆ΠϯελϯεΛબͿ
    w "VUP4DBMJOH͔Β੾Γ཭͢ 4UBOECZ
    
    w ύονͷద༻
    w ΠϯελϯεΛ໭͢
    w Πϯελϯε͕ͳ͘ͳΔ·Ͱ܁Γฦ͢
    

    View Slide

68. ৄ͘͠ղઆ
    
    લఏͷ؀ڥ
    &-#"VUP4DBMJOH഑Լʹ
    &$͕ෳ਺୆͋Δ
    44.ΤʔδΣϯτ͸Πϯετʔ
    ϧࡁΈ
    ඞཁͳ*".3PMFΞλονࡁΈ
    

    View Slide

69. ϝϯςφϯε΢Πϯυ΢͔Β࣮ߦ
    
    λʔήοτΛ
    "VUP4DBMJOH(SPVQʹઃఆ
    εέδϡʔϧ௨Γʹ։࢝
    ྫຖि݄༵೔͔࣌Βͱ͔
    
    ϝϯςφϯε΢Πϯυ΢͔Β
    Πϯελϯεͭͷ৘ใΛ
    "VUPNBUJPOʹ౉͢
    

    View Slide

70. "VUPNBUJPOͷॲཧ
    
    "VUPNBUJPO͕Πϯελϯε
    Λ"VUP4DBMJOH͔Β੾Γ཭͢
    ਖ਼֬ʹ͸"VUPNBUJPO͔Β
    $MPVE'PSNBUJPOͰ
    -BNCEB͕࡞੒͞Εɺ
    -BNCEBͰ੾Γ཭͢
    
    

    View Slide

71. 3VO$PNNBOEͰύονద༻
    
    3VO$PNNBOE͔Βύον
    ద༻Λߦ͏
    ద༻͢ΔϕʔεϥΠϯ͸1BUDI
    .BOBHFSͰఆٛ͞Ε͍ͯΔ΋
    ͷΛར༻͢Δ
    

    View Slide

72. ݩʹ໭͢܁Γฦ͢
    
    "VUPNBUJPOͰ੾Γ཭ͨ͠Π
    ϯελϯεΛݩʹ໭͢
    ਖ਼֬ʹ͸ɺಉ͘͡
    $MPVE'PSNBUJPOͰల։͞
    Εͨ-BNCEBͰ໭͢
    
    ࣍ͷΠϯελϯεͰಉ͡ॲཧΛ
    ࣮ࢪ͢Δ
    

    View Slide

73. ύονద༻ࣗಈԽͬͯ
    
    εςΩ͡Όͳ͍Ͱ͔͢ʁ
    

    View Slide

74. ηΩϡϦςΟӡ༻ࣗಈԽͷεεϝ
    
    w ࣗಈԽ͢ΔͨΊͷઃܭΛ͔ͬ͠Γߦ͏
    w ݕূ؀ڥɾςετख๏ɾධՁج४
    w ύονϕʔεϥΠϯͷઃఆ
    w ύονద༻ॱং౳ͷઃܭ
    w ্ه͸ͲͷΈͪ͋Μ·ΓܾΊͳ͍Ͱӡ༻ʹؙ౤͛ͨ͠Βɺ
    ӡ༻Ͱۤ࿑͢Δ͔ΒઃܭͰ΍Δ
    w ઃܭͰ͖ͨͳΒࣗಈԽ͠Α͏
    

    View Slide

75. ·ͱΊ
    
    w ӡ༻ʹؙ౤͛͠ͳ͍ͰɺηΩϡΞͳ؀ڥΛઃܭ͢Δ
    w ϚωʔδυαʔϏεΛ׆༻ͯ͠ͳΔ΂ָ͘ͳ؀ڥʹ
    ͢Δ
    w ؂ࢹ΍ύονద༻ͷӡ༻ํ๏ΛͪΌΜͱܾΊΔ
    w ઃܭͪΌΜͱͰ͖ͨͳΒࣗಈԽͰ͖Δɺ͖ͬͱ
    

    View Slide

76. ӡ༻ઃܭΛͪΌΜͱ΍ͬͯ
    
    Α͍ࣗಈԽϥΠϑΛ
    Α͍ηΩϡϦςΟϥΠϑΛ
    

    View Slide

77. ͓·͚
    ͜͜࠷ۙͷηΩϡϦςΟܥࢀߟࢿྉ
    

    View Slide

78. ͓·͚
    
    w ʮ4Ͱޡͬͨσʔλͷެ։Λ๷͙ύϒϦοΫΞΫηεઃఆػೳ͕௥
    Ճ͞Ε·ͨ͠ʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTCMPDLQVCMJDBDDFTT
    w ΄΅͢΂ͯͷ"84Ϣʔβ͕͜ͷઃఆΛࠓ͙͢༗ޮԽ͢΂͖4ͷσʔλ
    ΛकΔػೳ
    w ʮ$MPVE5SBJMͷηΩϡϦςΟ؂ࢹΛͪΐʔ؆୯ʹ΍ͬͯΈͨ
    ʲ4VNP-PHJDʳʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDMPVEUSBJMTFDVSJUZBOBMZUJDTXJUITVNPMPHJD
    w "84ηΩϡϦςΟͷͨΊͷϩά෼ੳΛ؆୯ʹߦ͏ํ๏
    

    View Slide

79. ͓·͚
    
    w ʮ<଎ใ>ηΩϡϦςΟ৘ใΛҰׅͰ؅ཧͰ͖Δ"844FDVSJUZ
    )VC͕ൃද͞ΕͨͷͰ࢖ͬͯΈ·ͨ͠ʂSFJOWFOUʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDVSJUZ
    IVC
    w ৽ػೳ4FDVSJUZ)VCͰηΩϡϦςΟ৘ใͷҰׅ؅ཧ
    w ʮ<Ϩϙʔτ>4&$"84ͷϑΥϨϯδοΫΛαʔόϨεʹߦ
    ͏ํ๏SFJOWFOUʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU
    w &$ͷϑΥϨϯδοΫΛαʔόϨεʹ࣮ݱ͢ΔTTNBDRVJSFͷ঺հ
    

    View Slide

80. ͓·͚
    
    w ʮ"848"'ͷϩάΛ'JSFIPTFͰ4ʹग़ྗ͠ϒϩοΫϩ
    άΛ44FMFDUͰ֬ೝͯ͠Έͨʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXGXBGDPNQSFIFOTJWFMPHHJOH
    w "848"'ͷϩάऔಘํ๏
    w ʮ"848"'ͷϑϧϩάΛ"UIFOBͰ෼ੳͰ͖ΔΑ͏ʹͯ͠
    Έͨʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTRVFSZBXTXBGGVMMMPHCZBUIFOB
    w "848"'ͷϩά෼ੳํ๏
    

    View Slide

81. ͓·͚
    
    w ʮ",*#""84Ͱʮ"84ݻ༗ͷηΩϡϦςΟϦεΫͱ
    ରࡦʯͱ͍͏λΠτϧͰ஻Γ·ͨ͠ʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBLJCBBXTTQFDJpDBXTTFDVSJUZ
    w "84ݻ༗ͷϦεΫ΋͋Γ·͢
    w ʮ4FDVSJUZ+"84ୈճϨϙʔτTFDKBXT
    TFDKBXTKBXTVHʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZKBXTSFQPSU
    w 4FDVSJUZ+"84ͷϨϙʔτ
    

    View Slide