[初心者向け]AWS環境のセキュリティ運用(設計)をはじめてみよう

JAWS DAYS 2019での登壇資料です。
ブログ: https://dev.classmethod.jp/cloud/aws/jaws-days-2019-a-security/
JAWSDAYS: https://jawsdays2019.jaws-ug.jp/session/1270/

Transcript

1. <ॳ৺ऀ޲͚>
   "84؀ڥͷηΩϡϦςΟӡ༻ ઃܭ Λ
   ͸͡ΊͯΈΑ͏ 
   4FDVSJUZ+"84
   ӓాɹՂ༞
2. ࣗݾ঺հ
    ӓాɹՂ༞
   ɾΫϥεϝιουגࣜձࣾ
   ɾ"84ࣄۀຊ෦
   ɹιϦϡʔγϣϯΞʔΩςΫτ
   ɹɹηΩϡϦςΟνʔϜ
   ɾ4FDVSJUZ+"84ӡӦ
   ɾ޷͖ͳαʔϏε
   ɹ"84
   8"'Ϛωʔδυϧʔϧ AWS WAF
3. ͜ͷηογϣϯͷλʔήοτ
    w "84ॳ৺ऀ
   w ઃܭɾߏஙɾӡ༻ɾอकʹܞΘΔํ
   w ηΩϡϦςΟ୲౰ऀ
   w "84ࣗମͷηΩϡϦςΟʹ͸໰୊ͳ͍͜ͱ͕ Θ͔͍ͬͯΔํ
4. ͪͳΈʹηΩϡϦςΟ͕ෆ҆ͱ͍͏ํ͸ʜ
    ɾ"84ͷηΩϡϦςΟ͕ෆ҆
   ɾ৬৔Ͱ"84͕৮Εͳ͍ͷΛͳΜͱ͔͍ͨ͠
   Ҏ্ͷํ͸ڈ೥ͷࢿྉΛࢀߟʹ͍ͯͩ͘͠͞
   IUUQTEFWDMBTTNFUIPEKQDMPVEBXTKBXTEBZTJTFDVSJUZ
5. ࠓճ͸
    ࣮ࡍͲΜͳ؀ڥΛ࡞ͬͯ ηΩϡϦςΟΛอ͍͔ͬͯ͘ͱ͍͏࿩
6. ίϯηϓτ
    ָʹڧ͘कΔ
7. ӡ༻ͰͷηΩϡϦςΟͷΠϝʔδ
    w ͭΒ͍
   w ͍ͨ΁Μ
   w ੹೚ॏେ
   w ϧʔνϯϫʔΫ
   w ͭ·Βͳ͍
   Ͳ͏ͯ͜͠ΜͳΠϝʔδʹͳΔͷ͔ʁ
8. ࣮ࡍͲΜͳ͜ͱΛ΍͍ͬͯΔ͔
    w ηΩϡϦςΟάϧʔϓͷઃఆΛมߋ͢Δ
   w Ϧιʔεͷ؂ࢹ ϝτϦΫεͷಈ͖ͷ֬ೝͱ͔
   w ϩάʹมͳ΋ͷ͕ͳ͍͔֬ೝ͢Δ
   w ੬ऑੑͷ֬ೝ
   w ύονΛ౰ͯΔ
   w ଞʹ΋͍Ζ͍Ζ
   ຊ౰ʹਓྗͰ΍Δඞཁ͕͋Γ·͔͢ʁ
9. ηΩϡϦςΟʹݶΒͣͰ͕͢
    ӡ༻͸ݱ৔Ͱى͍ͬͯ͜ΔͷͰ͸ͳ͍ ઃܭஈ֊͔Β࢝·͍ͬͯΔͷͩ
10. ͳΜͰ΋ӡ༻ʹؙ౤͛ʹͳͬͯͳ͍Ͱ͔͢ʁ
     ͳΔ΂͘ઃܭͰ௵͠·͠ΐ͏Ͷ
11. ΞδΣϯμ
      ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ
     ؂ࢹͷઃܭ
     44.ʹΑΔηΩϡϦςΟӡ༻ࣗಈԽ
12. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ
    "84શମ
13. "84؀ڥશମͷίϯϙʔωϯτ
     ·ͣ͸͢΂ͯͷΞΧ΢ϯτͰར༻͞ΕΔ΂͖΋ͷ
    w "84
    $MPVE5SBJM
    w "84
    $POpH
    w "NB[PO
    (VBSE%VUZ
    w "84
    4IJFME
14. $MPVE5SBJM
     "84
    $MPVE5SBJMʹΑΓૢ࡞ϩάΛऔಘ͢Δ
    $MPVE5SBJM͸"1*ૢ࡞ͳͲͷΞΫγϣϯΛϩΪϯά͢ ΔαʔϏε
    ηΩϡϦςΟΠϯγσϯτ౳͕ൃੜͨ͠ࡍʹ෼ੳʹ׆༻
    શϦʔδϣϯͰͷ༗ޮԽΛਪ঑ AWS CloudTrail
15. ͋ΘͤͯಡΈ͍ͨ
     ৽نΞΧ΢ϯτͰ΋͜ΕҰൃʂ$MPVE5SBJMΛશ ϦʔδϣϯͰ༗ޮԽ͢ΔεΫϦϓτΛॻ͍ͨ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDMPVEUSBJMBDUJWBUF
    ·ͩ༗ޮʹͳ͍ͬͯͳ͍ΞΧ΢ϯτ͸ҰൃೖΕ͓͖ͯ·͠ΐ͏
16. "84
    $POpH
     "84
    $POpHͱ͸
    ηΩϡϦςΟͱΨόφϯεΛՄೳʹ͢Δߏ੒มߋͷ௨ ஌ɺߏ੒ཤྺɺ"84ϦιʔεͷΠϯϕϯτϦʔΛ͓ ٬༷΁ఏڙ͢Δ׬શϚωʔδυܕͷαʔϏεͰ͢ɻ
    ؆୯ʹ"84Ϧιʔεͷߏ੒΍มߋΛՄࢹԽ͢Δ͜ͱ ͕ग़དྷ·͢ɻ AWS Config
17. ͋ΘͤͯಡΈ͍ͨ
     "84
    $POpH͸ͱΓ͋͑ͣ༗ޮʹ͠Α͏
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTDPOpHTUBSU
    ·ͣ͸͜ΕΛϕʔεʹ༗ޮԽʂ
18. (VBSE%VUZ
     ڴҖݕ஌ͷϚωʔδυαʔϏε
    ػցֶशʹΑΓτϥϑΟοΫϩά౳͔Β
    ո͍͠௨৴Λݕ஌͢Δ
    ྫ͑͹44)΁ͷϒϧʔτϑΥʔε΍Ϛϧ΢ΣΞ ͷ௨৴ɺϏοτίΠϯͷϚΠχϯάʹ࢖ΘΕ͍ͯ Δ৵֐͞Εͨ
    &$
    ΠϯελϯεΛݕग़Ͱ͖·͢ɻ Amazon GuardDuty
19. ͋ΘͤͯಡΈ͍ͨ
     ҰൃͰ(VBSE%VUZΛશϦʔδϣϯ༗ޮԽͯ͠௨஌ઃ ఆ͢ΔςϯϓϨʔτ࡞ͬͨ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFUHVBSEEVUZBMMSFHJPO
    ·ͣ͸Ұൃ༗ޮԽʂ
20. "84
    4IJFME
     Ϛωʔδυͳ%%P4อޢαʔϏεͰ
    ແྉͰ࠷ॳ͔Β--Ϩϕϧ͕อޢ͞Ε͍ͯΔ 4UBOEBSEϓϥϯͱɺ"84ͷ%%P4ઐ໳νʔ Ϝͱ࿈ܞͯ͠-΍େن໛ͳ%%P4ʹର߅͢Δ "EWBODFEϓϥϯ͕͋Δ
    4UBOEBSE͸ͱ͘ʹઃఆͷඞཁͳ͠ AWS Shield
21. ͪΌΜͱ༗ޮԽʹͯ͠·͔ͨ͠ʁ
     w ΋͠·ͩͳΒ͙͢νΣοΫ͠·͠ΐ͏
    w ͲΕ΋͍͟ͱ͍͏ͱ͖ʹ໾ཱͭ΋ͷͰ͢ɺීஈ͔Β ༗ޮԽͯ͠ͳ͍ͱઈରࠔΓ·͢
    w ྉۚ͸&$ͱ͔ͱൺ΂Δͱ΄ͱΜͲؾʹͳΔ΋ͷͰ ͸ͳ͍ͷͰແࢹ͠·͠ΐ͏
    w අ༻ରޮՌ͸ઈେͰ͢
22. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ
    71$؀ڥपΓ
23. 
     ·ͣ͸ཧ૝ͷߏ੒
24. ҰൠతʹηΩϡΞͳߏ੒
     w ࡾ૚ωοτϫʔΫ
    w ϑϩϯτҎ֎͸ϓϥΠϕʔτ
    w Ϛϧν";
    w "VUP4DBMJOH
    w ֎෦௨৴͸/"5ܦ༝
    w ඞཁʹԠ͡$MPVE'SPOU΍ 8"'Λಋೖ
25. 
     μϝͳύλʔϯ
26. &$͕୆ͷΈɺ௚઀Πϯλʔωοτʹ໘͍ͯ͠Δ
     w ৑௕Խ͞Εͯͳ͍
    w αʔϏεͱ؅ཧΞΫηε͕ ಉ͡*1
    w εέʔϧ͠ͳ͍
    w ΠϯελϯεམͪͨΒ෮چ ͠ͳ͍
    ͍Ζ͍ΖϦεΩʔ
27. ઃܭͷجຊ
     Design for Failure ো֐͕ى͖Δ͜ͱΛલఏʹઃܭ͠·͠ΐ͏
28. ࠷௿ݶͷϥΠϯ
     w Ϛϧν";Ͱ৑௕Խ͢Δ
    w ";ো֐͕ͳͯ͘΋Πϯελϯε͕ࢮ͵Մೳੑ͕͋Δ
    w ϦλΠΞϝϯτ΍αʔό಺ͷϝϞϦϦʔΫͳͲ
    w αʔϏε͕গ͠ࢭ·͍͍ͬͯͳΒγϯάϧ";Ͱ΋͍͍
    w "VUP4DBMJOH(SPVQʹೖΕΔ
    w Πϯελϯε୆Ͱ΋࢖͏
    w ো֐࣌ʹࣗಈ෮چͯ͘͠ΕΔ
    w ΠϯελϯεΛࣗಈతʹɾ؆୯ʹ૿΍ͤΔ ౰ॳ༧ఆ͕ͳͯ͘΋ٸ ʹ૿΍ͨ͘͠ͳͬͨͱ͖ʹศར
29. ࠷௿ݶͷϥΠϯ
     w &-#ɾ/BU
    (BUFXBZΛۦ࢖ͯ͠&$͸ϓϥΠϕʔτʹ
    w ௚઀֎෦ʹࡽ͞ΕΔͷ͸ྑ͘ͳ͍
    w &-#͸Πϯελϯε୆͔ΒͰ΋ϝϦοτ͸͍ͬͺ͍͋Δ
    w 5-4ऴ୺Ͱ͖Δ
    w "84
    8"'͕ར༻Ͱ͖Δ
    w &$ͷ੾Γସ͕͑༰қ
    w )551पΓͷϝτϦΫεΛऩूͰ͖Δ
30. ͋ΘͤͯಡΈ͍ͨ
     ",*#"BXT
    ୈճ
    جૅฤͰʮෛՙ෼ࢄ͚ͩ͡Όͳ ͍&-#ͷϝϦοτʯΛ࿩͠·ͨ͠
    IUUQTEFWDMBTTNFUIPEKQFUDBLJCBBXT—FMCNFSJU
    ϝϦοτ͍ͬͺ͍Ͱ͢Α
31. ΋͏গ͠ؤுΔͳΒ
     w $MPVE'SPOUͰ੩తίϯςϯπΛΩϟογϡ͢Δ
    w ΞΫηε͕େྔʹདྷͯ΋අ༻ΛकΕΔ
    w ͳΜͳΒόοΫΤϯυΛ4ʹ͢Δ
    w ϛυϧ΢ΣΞ͕ͳ͘ͳΔͷͰ੬ऑੑ؅ཧָ͕ʹ
    w "84
    8"'Λ࢖͏
    w ༻్ʹ߹ΘͤͨϚωʔδυϧʔϧΛ࢖͏ͱָʹ׆༻Ͱ͖Δ
    w ཁ͕݅໌֬ͳΒݸผʹϧʔϧΛνϡʔχϯά
32. ͋ΘͤͯಡΈ͍ͨ
     $MPVE'PSNBUJPO
    Ͱ
    0"*
    Λ࢖ͬͨ
    $MPVE'SPOU
    
    4
    ͷ ੩తίϯςϯπ഑৴ΠϯϑϥΛ࡞Δ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTDMPVEGSPOUXJUIPBJCZDMPVEGPSNBUJPO
    $'
    
    4ͳΒ4Λ੩తϗεςΟϯάͤͣ0"*Λར༻͠·͠ΐ͏
33. ͋ΘͤͯಡΈ͍ͨ
     ʲ৽ػೳʳ"84
    8"'ϚωʔδυϧʔϧΛ࢖ͬͯ 8PSE1SFTTʹର͢Δ߈ܸΛ๷͍ͰΈͨ
    SFJOWFOU
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTSFJOWFOUXBGNBOBHFESVMFUSZ
    Ϛωʔδυϧʔϧͷྑ͞ʹ͍ͭͯৄ͘͠ղઆ͠ɺ߹Θ࣮ͤͯಈ࡞ͷݕূ Λߦͳ͍ͬͯ·͢
34. 4FDVSJUZ(SPVQͷ࢖͍ํ
     w /"$-͸࠷௿ݶʹͯ͠ΞΫηε੍ݶ͸جຊ4(دͤ
    w Ϧιʔεʹෳ਺4(ΞλονՄೳͳͨΊɺ໾ׂ͝ͱͷ4(Λ࡞੒͢ΔɻҎԼྫ
    w &-#4(
    &-#༻ɻ
    QPSUΛڐՄ͢Δ
    w 8FC4(
    8FCαʔό༻ɻ&-#4(͔ΒͷΛڐՄ
    w 0GpDF4(
    0GpDF͔Βͷ؅ཧΞΫηε  ΛڐՄ
    w ໾ׂؒ͸4(ͷ*%ͰڐՄ͢Δ αϒωοτͷ*1Ϩϯδ͸࢖Θͳ͍
    w Ұ࣌తͳ࡞ۀ͸4(ʹ*1Λ௥هͰ͸ͳͯ͘ɺ࡞ۀ༻4(ΛΞλον͢ΔΑ͏ʹ͢Δ
    w ࡞ۀϛεͰϧʔϧΛফͨ͠Γ͢Δ͜ͱ͕ͳ͘ͳΔ
    w ܁Γฦ͠ߦ͏ͱ͖ʹ࢖͍΍͍͢
35. ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ
    ͦͷଞ
36. "84
    5SVTUFE
    "EWJTPSͰηΩϡϦςΟϦεΫͷ؂ࢹ
     "84
    5SVTUFE
    "EWJTPS͸ʮίετ࠷దԽʯɺʮύϑΥʔϚϯεʯɺ ʮηΩϡϦςΟʯɺʮϑΥʔϧττϨʔϥϯεʯͷ̐ͭͷ؍఺͔Βɺ ར༻ऀͷ"84؀ڥΛ"84͕ࣗಈͰਫ਼ࠪ͠ɺਪ঑ઃఆͷ͓஌ΒͤΛ͠ ͯ͘ΕΔػೳͰ͢ɻ
    *".΍4ͷઃఆͳͲ͕໰୊ͳ͍͔νΣοΫͯ͘͠ΕΔɻ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDNBEWFOUDBMFOEBSHFUUJOHTUBSUFEBHBJOBXTUE
37. ͋ΘͤͯಡΈ͍ͨ
     "84ίϯιʔϧͷϩάΠϯ༻ΞΧ΢ϯτΛ*".ͷϕε τϓϥΫςΟεʹैͬͯ࡞੒ͯ͠Έͨ ઃఆฤ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTJBNMPHJOVTFSCFTUQSBDUJDFT
    ࣮ࡍʹ*".ϕετϓϥΫςΟεΛຬͨ͢Α͏ʹઃఆ͢Δํ๏Λ֬ೝͰ͖·͢
38. *".ͷ؅ཧ͸Ԟ͕ਂ͍͚Ͳɺख͸ൈ͔ͳ͍Α͏ʹ
     w ਓ͕࢖͏*".
    6TFS͸.'"ඞਢ
    w ਓ͕࢖Θͳ͍*".
    6TFS͸࠷௿ݶͷΈ
    w *".
    3PMF͕࢖͑Δ৔߹͸3PMFΛ࢖͏
    w ෳ਺ΞΧ΢ϯτΛ·͕ͨΔ৔߹ɺͭͷΞΧ΢ϯτʹਓ͕࢖͏*".
    6TFSΛ ू໿ͯ͠ɺ4XJUDI
    3PMF͢Δ
    w ΫϨσϯγϟϧ͕୔ࢁੜ੒͞Εͳ͍ͷͰ؅ཧ͠΍͍͢
    w *".
    3PMF͸৭Μͳ৔໘Ͱ࡞੒͢Δඞཁ͕͋ΔͨΊɺ؅ཧऀ͕ੜ੒͢ΔΑ͏ ʹ͢Δͱਏ͍
    w ՄೳͳݶΓϦςϥγʔڭҭͱ"84
    $POpHϧʔϧΛ׆༻ͯ͠։ൃऀͰ΋࡞੒Ͱ͖ ΔΑ͏ʹ͢Δ
39. ͋ΘͤͯಡΈ͍ͨ
     େ͖ͳ૊৫ʹͳ͖ͬͯͨΒϚϧνΞΧ΢ϯτઓུͱͯ͠
    -BOEJOH
    ;POFͷߟ͑ํΛ׆༻͢Δ
    <Ϩϙʔτ>4&$
    r
    "SDIJUFDUJOH
    4FDVSJUZ
    
    (PWFSOBODF
    BDSPTT
    ZPVS
    "84
    -BOEJOH
    ;POF
    SFJOWFOU
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU
40. ো֐࣌ͷ෮چํ๏Λ༧Ίݕ౼
     w ෮چ͢ΔͨΊͷखஈ͸੔͓͑ͯ͜͏Ͷ
    w &#4εφοϓγϣοτɺ".*࡞੒
    w $MPVE'PSNBUJPOςϯϓϨʔτ
    w ՄೳͳݶΓࣗಈԽ͓͍ͯͯ͠ खॱॻͱ͔
    w σʔλɾϩά͸ߴ଱ٱੑͷ4΁อଘ
41. ͋Δ͋Δࣦഊྫ
     w εΫϦϓτ౳Ͱ*1΍Πϯελϯε*%ΛݻఆύϥϝʔλͰࢦఆ͢Δ
    w 3%4΍&-#ͷࢦఆ͸'2%/Λ࢖͏
    w Πϯελϯε*%౳͸BXTDMJϝλσʔλΛ׆༻
    w ಈతͳ஋͸ຒΊࠐ·ͣ44.ύϥϝʔλετΞΛ׆༻
    w &$͕"VUP4DBMJOHͰೖΕସΘͬͯϩά͕࢒͍ͬͯͳ͍
    w ϩά͸qVFOUE౳Ͱ4ʹग़͢
    w 4ʹग़ͨ͠ϩά͸4
    4FMFDU΍"UIFOBͰݕࡧՄೳ
    w $MPVE8BUDI
    "HFOUͰ$MPVE8BUDI
    -PHTͰ΋͍͍
42. ͋ΘͤͯಡΈ͍ͨ
     &$
    4ZTUFNT
    .BOBHFS
    ͷύϥϝʔλετΞΛར ༻ͨ͠ΞϓϦέʔγϣϯ؀ڥઃఆͷ؅ཧ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXT QBSBNFUFSTUPSFBQQMJDBUJPODPOpH
    
43. ͋ΘͤͯಡΈ͍ͨ
     'MVFOUEͰ4ʹϩάΛऩूͯ͠ΈΔ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXT qVFOUET
    ϩά͸4ʹग़ͨ͠΄͏͕͍҆Ͱ͢
44. "84͚ͩͰ͸ग़དྷͳ͍ηΩϡϦςΟରࡦ
     αʔυύʔςΟ΋׆༻͍ͯͩ͘͠͞
    ۩ମతͳ੡඼͸ׂѪ
    w ΞϯνϚϧ΢ΣΞ
    w ৵ೖݕ஌
    w ϑΥϨϯδοΫ
    w ߴ౓ͳϩά෼ੳ
45. ؂ࢹͷઃܭ
46. ҟৗʹؾͮ͘ʹ͸؂ࢹ͕ඞਢ
     ͍͍ͩͨ͸$MPVE8BUDIϝτϦΫεͰ֬ೝͰ͖·͢
    ઃܭͰ΍Δ͜ͱ
    w ԿΛݟΔͷ͔ΛܾΊ͓ͯ͘
    w μογϡϘʔυΛ࡞੒͓ͯ͘͠
    w ΞϥʔϜΛઃఆ͓ͯ͘͠
47. $MPVE8BUDIϝτϦΫεͰԿ͕ݟΕΔͷʁ
     ଟ͗ͯ͢ॻ͚ͳ͍ͷͰ Ϧιʔε͝ͱάά͍ͬͯͩ͘͞
48. &$पΓͷ؂ࢹϝτϦΫεྫ
     w "-#5BSHFU(SPVQͷϝτϦΫεͰશମΛ֬ೝ
    w $POTVNFE-$6T
    ෛՙঢ়گͷ֬ೝ
    w 5BSHFU3FTQPOTF5JNF
    όοΫΤϯυ͔ΒͷϨεϙϯελΠϜ
    w 6O)FBMUIZ)PTU$PVOU
    Ϩεϙϯε͕ͳ͍ϗετͷ֬ೝ
    w )551$PEF@5BSHFU@99@$PVOU
    αʔόΤϥʔͷΧ΢ϯτ
    w ݸผͷ&$Ͱ֬ೝ
    w $166UJMJ[BUJPO
    $16࢖༻཰
    w .FNPSZ6UJMJ[BUJPO ΧελϜϝτϦΫε 
    ϝϞϦ࢖༻཰
    w %JTL6TBHF ΧελϜϝτϦΫε 
    σΟεΫ࢖༻཰
    w $16$SFEJU#BMBODF
    όʔετΠϯελϯεͷ৔߹ͷ࢒ΓΫϨδοτ
49. ͋ΘͤͯಡΈ͍ͨ
     3VO
    $PNNBOEͰෳ਺ͷ&$ΠϯελϯεͷΧε λϜϝτϦΫεΛҰׅઃఆ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBNB[POMJOVYQVUDVTUPNNFUSJDTXJUISVODPNNBOE
    ೖΕ͓ͯ͘ͱศརͰ͢
50. ݟΔ΋ͷΛܾΊͨΒ$MPVE8BUDIμογϡϘʔυ࡞੒
     ॏͶͨ΄͏͕͍ ͍ϝτϦΫε͸ ॏͶΔ
    ༻్ʹ߹Θͤͯ μογϡϘʔυ Λ࡞Δ
51. ͋ΘͤͯಡΈ͍ͨ
     $MPVE8BUDIμογϡϘʔυΛར༻ͯ͠Φʔτεέʔ ϧ؀ڥͷՔಇঢ়ଶΛՄࢹԽͯ͠Έͨ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBVUPTDBMMJOHXJUIDMPVEXBUDIEBTICPBSE
    ۩ମతͳμογϡϘʔυͷྫ͸ͪ͜ΒΛࢀর
52. ΞϥʔϜΛઃఆ͢Δ
     w ͱΓ͋͑ͣᮢ஋͸ෳ਺ઃఆ͓͚ͯ͠͹͍͍    ͱ͔
    w ௨஌དྷͨΒͲ͏͢Δ͔΋ܾΊ͓ͯ͘
    w SFTUBSU
    IUUQE
    
    ࣗಈԽͰ͖Δ
    w &$࠶ىಈ
    
    ࣗಈԽͰ͖Δ
    w &$࡟আ
    
    ͪΌΜͱ"VUP4DBMJOHͷઃఆ͓ͯ͘͠
    w ௨஌಺༰͸ϝʔϧ௚ͩͱݟͮΒ͍͔Β੔ܗͯ͠4MBDLͱ͔ʹ ग़ͨ͠Β͍͍
53. ͋ΘͤͯಡΈ͍ͨ
     -BNCEBͷʮ#MVFQSJOUʯͰ؆୯ʹ4MBDLͱ $MPVE8BUDIΛ࿈ܞͯ͠Έͨ ೥൛
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTMBNCEBCMVFQSJOUTMBDLDMPVEXBUDI
    ϝʔϧͰड͚औΔͷ͸ͭΒ͍Μ΍Ͱʜ
54. 44.ʹΑΔηΩϡϦςΟӡ༻ࣗಈԽ
55. ೰·͍͠ӡ༻ͷҰͭ͸੬ऑੑͷ؅ཧ
     ͳΔ΂ࣗ͘ಈԽ͍ͨ͠
56. "84
    4ZTUFNT
    .BOBHFSٴͼͦͷίϯϙʔωϯτ ׆༻Ͱ͖ΔαʔϏε
     Systems Manager Patch Manager Run Command Automation Maintenance Windows
57. 4ZTUFNT
    .BOBHFSͱ͸
     w ӡ༻Λշదʹ͢Δπʔϧ܊
    w ௨শ44.
    w ΠϯελϯεʹΠϯετʔϧ͞ΕͨΤʔδΣϯτͰ ಈ࡞
    w &$ʹϩάΠϯ͠ͳͯ͘΋͍Ζ͍ΖͰ͖Δ
58. 44.ͷίϯϙʔωϯτΛগ͠঺հ
     w 3VO
    $PNNBOE
    w &$ʹϩάΠϯ͠ͳ͍Ͱ೚ҙͷίϚϯυΛൃߦ
    w 
    TZTUFNDUM
    TUBUVT
    IUUQEͱ͔Ͱ͖Δ
    w 44)ͷϙʔτΛ։͚ͳͯ͘΋͍͍
    w τϥϒϧγϡʔτʹ΋ศར Run Command
59. 44.ͷίϯϙʔωϯτΛগ͠঺հ
     w "VUPNBUJPO
    w ࣗಈԽυΩϡϝϯτΛఆٛͯ͠ɺखॱ௨Γʹࣗಈ࣮ߦ
    w ҎԼͷΑ͏ͳϫʔΫϑϩʔΛఆٛͰ͖Δ
    w &$Λ"VUP4DBMJOH͔Β੾Γ཭͠
    w &$Λఀࢭ
    w ".*Λऔಘ
    w &$ͷىಈ
    w &$Λ"VUP4DBMJOHʹ໭͢ Automation
60. 44.ͷίϯϙʔωϯτΛগ͠঺հ
     w .BJOUFOBODF
    8JOEPX
    w ࣌ؒ΍ִؒΛࢦఆͯ͠ॲཧΛεέδϡʔϦϯά͢Δ
    w "VUPNBUJPO΍3VO
    $PNNBOE౳Λ࣮ߦ͢Δ
    w ෳ਺ͷΠϯελϯεʹॱ൪ʹॲཧͨ͠ΓͰ͖Δ Maintenance Windows
61. 44.ͷίϯϙʔωϯτΛগ͠঺հ
     w 1BUDI
    .BOBHFS
    w ύονͷϧʔϧ ϕʔεϥΠϯ Λఆٛͯ͠ύονΛ؅ཧ
    w ϕʔεϥΠϯͷྫ
    w ෼ྨ͕4FDVSJUZͰॏཁ౓͕$SJUJDBMͷύον͸͙͢ద༻
    w ͦΕҎ֎͸ϦϦʔε೔ޙʹద༻
    w ύονͷద༻͸3VO
    $PNNBOE౳͔Β࣮ࢪ
    w ঢ়گΛ֬ೝ͢Δ4DBOͱద༻΋ߦ͏*OTUBMMΛબ΂Δ
    w 8JOEPXT
    4FSWFS΍֤छ-JOVY΋ରԠ Patch Manager
62. ͋ΘͤͯಡΈ͍ͨ
     &$
    4ZTUFNT
    .BOBHFSશ෦·ͱΊͯ঺հ͠· ͢ʂ
    BXTQSFNJFS
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTZTUFNNBOBHFSNBUPNF
    େ·͔ͳ֓ཁ͸ͪ͜Β
    ΋͏গ͠ࡉ͔͍ͱ͜Ζ
    IUUQTXXXTMJEFTIBSFOFU"NB[PO8FC4FSWJDFT+BQBOBXTCMBDLCFMUPOMJOF TFNJOBSBXTTZTUFNTNBOBHFS
63. ࣗಈԽ͢Δπʔϧ͸ἧ͍ͬͯΔ͕ʜ
     ຊ౰ʹύονద༻ΛࣗಈԽ͍͍ͯ͠ͷʁ
64. ύονద༻ࣗಈԽͷͨΊʹߟ͑Δ͜ͱ
     w σάϨ΍ΞϓϦ΁ͷࢧো͕ग़ΔՄೳੑ͸ݕূ؀ڥͰ௵͢
    w ·ͣ͸ݕূ؀ڥͰࣗಈతʹద༻͔ͯ͠Β໰୊ͳ͚Ε͹ຊ൪؀ڥʹ΋ద༻ ͢Δ
    w ਖ਼ৗͱ൑அ͢Δج४͸ઃ͚͓ͯ͘
    w )551ΞΫηε͕ਖ਼ৗͳΒ͍͍ͷ͔
    w ಛఆͷಈ࡞Λ֬ೝ͢Δͷ͔
    w ςετέʔε͕ແ͍ͷʹ൑அ͢Δͷ͸ແཧ
    w ਖ਼ৗੑςετΛࣗಈԽ͢Δ
    w ཧ૝
    w ೔࿨ݟΞοϓσʔτ΋͋Γ
    w όοΫΞοϓ͔Βͷ෮چखॱཱ͕͍֬ͯ͠Ε͹ɺΨϯΨϯ্͛Ε͹͍͍
65. େࣄͳͷ͸
     ύον౰ͯͳ͍ͰΠϯγσϯτى͖ͨΒ ੹೚ॏେͰͬͤ ΍Βͳ͍ࣦഊΑΓ΍ࣦͬͯഊ͢Δ΂͠
66. 44.ͷύονద༻ͷख๏ྫ
     "VUP4DBMJOHͰ୆ͣͭࣗಈతʹύονΛ౰ͯΔ 44.
    "VUPNBUJPO΍ͬͯΈͨ
    IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTTNBVUPNBUJPOQBUDIBTHJOTUBODF
    ؀ڥΛॖୀͭͭ͠ఀࢭͤ͞ͳ͍ͰϩʔϦϯάΞοϓσʔτ
67. ॲཧ಺༰
     w "VUP4DBMJOH͔Β୆ΠϯελϯεΛબͿ
    w "VUP4DBMJOH͔Β੾Γ཭͢ 4UBOECZ
    w ύονͷద༻
    w ΠϯελϯεΛ໭͢
    w Πϯελϯε͕ͳ͘ͳΔ·Ͱ܁Γฦ͢
68. ৄ͘͠ղઆ
     લఏͷ؀ڥ
    &-#
    
    "VUP4DBMJOH഑Լʹ &$͕ෳ਺୆͋Δ
    44.ΤʔδΣϯτ͸Πϯετʔ ϧࡁΈ
    ඞཁͳ*".
    3PMFΞλονࡁΈ
69. ϝϯςφϯε΢Πϯυ΢͔Β࣮ߦ
     λʔήοτΛ "VUP4DBMJOH(SPVQʹઃఆ
    εέδϡʔϧ௨Γʹ։࢝
    ྫ
    ຖि݄༵೔͔࣌Βͱ͔
    ϝϯςφϯε΢Πϯυ΢͔Β Πϯελϯεͭͷ৘ใΛ "VUPNBUJPOʹ౉͢
70. "VUPNBUJPOͷॲཧ
     "VUPNBUJPO͕Πϯελϯε Λ"VUP4DBMJOH͔Β੾Γ཭͢
    ਖ਼֬ʹ͸"VUPNBUJPO͔Β $MPVE'PSNBUJPOͰ -BNCEB͕࡞੒͞Εɺ -BNCEBͰ੾Γ཭͢
71. 3VO
    $PNNBOEͰύονద༻
     3VO
    $PNNBOE͔Βύον ద༻Λߦ͏
    ద༻͢ΔϕʔεϥΠϯ͸1BUDI
    .BOBHFSͰఆٛ͞Ε͍ͯΔ΋ ͷΛར༻͢Δ
72. ݩʹ໭͢
    
    ܁Γฦ͢
     "VUPNBUJPOͰ੾Γ཭ͨ͠Π ϯελϯεΛݩʹ໭͢
    ਖ਼֬ʹ͸ɺಉ͘͡ $MPVE'PSNBUJPOͰల։͞ Εͨ-BNCEBͰ໭͢
    ࣍ͷΠϯελϯεͰಉ͡ॲཧΛ ࣮ࢪ͢Δ
73. ύονద༻ࣗಈԽͬͯ
     εςΩ͡Όͳ͍Ͱ͔͢ʁ
74. ηΩϡϦςΟӡ༻ࣗಈԽͷεεϝ
     w ࣗಈԽ͢ΔͨΊͷઃܭΛ͔ͬ͠Γߦ͏
    w ݕূ؀ڥɾςετख๏ɾධՁج४
    w ύονϕʔεϥΠϯͷઃఆ
    w ύονద༻ॱং౳ͷઃܭ
    w ্ه͸ͲͷΈͪ͋Μ·ΓܾΊͳ͍Ͱӡ༻ʹؙ౤͛ͨ͠Βɺ ӡ༻Ͱۤ࿑͢Δ͔ΒઃܭͰ΍Δ
    w ઃܭͰ͖ͨͳΒࣗಈԽ͠Α͏
75. ·ͱΊ
     w ӡ༻ʹؙ౤͛͠ͳ͍ͰɺηΩϡΞͳ؀ڥΛઃܭ͢Δ
    w ϚωʔδυαʔϏεΛ׆༻ͯ͠ͳΔ΂ָ͘ͳ؀ڥʹ ͢Δ
    w ؂ࢹ΍ύονద༻ͷӡ༻ํ๏ΛͪΌΜͱܾΊΔ
    w ઃܭͪΌΜͱͰ͖ͨͳΒࣗಈԽͰ͖Δɺ͖ͬͱ
76. ӡ༻ઃܭΛͪΌΜͱ΍ͬͯ
     Α͍ࣗಈԽϥΠϑΛ Α͍ηΩϡϦςΟϥΠϑΛ
77. ͓·͚
    ͜͜࠷ۙͷηΩϡϦςΟܥࢀߟࢿྉ
78. ͓·͚
     w ʮ4Ͱޡͬͨσʔλͷެ։Λ๷͙ύϒϦοΫΞΫηεઃఆػೳ͕௥ Ճ͞Ε·ͨ͠ʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTCMPDLQVCMJDBDDFTT
    w ΄΅͢΂ͯͷ"84Ϣʔβ͕͜ͷઃఆΛࠓ͙͢༗ޮԽ͢΂͖4ͷσʔλ ΛकΔػೳ
    w ʮ$MPVE5SBJMͷηΩϡϦςΟ؂ࢹΛͪΐʔ؆୯ʹ΍ͬͯΈͨ ʲ4VNP
    -PHJDʳʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDMPVEUSBJMTFDVSJUZBOBMZUJDTXJUITVNPMPHJD
    w "84ηΩϡϦςΟͷͨΊͷϩά෼ੳΛ؆୯ʹߦ͏ํ๏
79. ͓·͚
     w ʮ<଎ใ>ηΩϡϦςΟ৘ใΛҰׅͰ؅ཧͰ͖Δ"84
    4FDVSJUZ
    )VC͕ൃද͞ΕͨͷͰ࢖ͬͯΈ·ͨ͠ʂ
    SFJOWFOUʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDVSJUZ IVC
    w ৽ػೳ4FDVSJUZ
    )VCͰηΩϡϦςΟ৘ใͷҰׅ؅ཧ
    w ʮ<Ϩϙʔτ>4&$
    "84ͷϑΥϨϯδοΫΛαʔόϨεʹߦ ͏ํ๏
    SFJOWFOUʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU
    w &$ͷϑΥϨϯδοΫΛαʔόϨεʹ࣮ݱ͢ΔTTNBDRVJSFͷ঺հ
80. ͓·͚
     w ʮ"84
    8"'ͷϩάΛ'JSFIPTFͰ4ʹग़ྗ͠ϒϩοΫϩ άΛ44FMFDUͰ֬ೝͯ͠Έͨʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXGXBGDPNQSFIFOTJWFMPHHJOH
    w "84
    8"'ͷϩάऔಘํ๏
    w ʮ"84
    8"'ͷϑϧϩάΛ"UIFOBͰ෼ੳͰ͖ΔΑ͏ʹͯ͠ Έͨʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTRVFSZBXTXBGGVMMMPHCZBUIFOB
    w "84
    8"'ͷϩά෼ੳํ๏
81. ͓·͚
     w ʮ",*#""84
    Ͱʮ"84ݻ༗ͷηΩϡϦςΟϦεΫͱ ରࡦʯͱ͍͏λΠτϧͰ஻Γ·ͨ͠ʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBLJCBBXTTQFDJpDBXTTFDVSJUZ
    w "84ݻ༗ͷϦεΫ΋͋Γ·͢
    w ʮ4FDVSJUZ+"84
    ୈճϨϙʔτ
    TFDKBXT
    TFDKBXT
    KBXTVHʯ
    w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZKBXTSFQPSU
    w 4FDVSJUZ+"84ͷϨϙʔτ