about AWS Startup Security Baseline (AWS SSB)

"844UBSUVQ4FDVSJUZ#BTFMJOF +.-5WPM-5ൃද $ZQIFS5FD*OD ZVGVKJPLB ˞ൃݴ͸ݸਓͷݟղͰ͢ɻ

"844UBSUVQ4FDVSJUZ#BTFMJOFͱ͸ "QSJMʹ"84͕ൃදͨ͠"841SFTDSJQUJWF(VJEBODFͷҰͭ IUUQTEPDTBXTBNB[PODPNQSFTDSJQUJWFHVJEBODFMBUFTUBXTTUBSUVQTFDVSJUZCBTFMJOFXFMDPNFIUNM ॳظͷελʔτΞοϓΛ೦಄ʹஔ͍ͯઃܭ͞Εͨɺ"84্ͰηΩϡΞ ͳج൫ߏஙΛ͢ΔͨΊͷ࠷௿ݶͷίϯτϩʔϧηοτ܈ ΫϨσϯγϟϧͷอޢɺϩάͱՄࢹੑͷ༗ޮԽɺ࿈བྷઌ৘ใͷ؅ཧɺ ͓Αͼجຊతͳσʔλڥքͷ࣮૷ʹॏ఺Λஔ͍͍ͯΔ ΞΧ΢ϯτͱϫʔΫϩʔυͷͭͷΧςΰϦʹ෼͔Ε͍ͯΔɻ

ελʔτΞοϓͷηΩϡϦςΟ͸ಛผʁ ಛผͳࢪࡦ͕ඞཁͱ͍͏Θ͚Ͱ͸ͳ͘ɺϝϯόʔ͕গͳ͘ɺҰํͰ ։ൃεϐʔυ͕ٻΊΒΕΔݱ৔ʹ͓͍ͯɺηΩϡϦςΟ͸ޙճ͠ʹ ͳΓ͕ͪ ͜͜Ͱ͸جૅతͰ࠷௿ݶߦ͏΂͖؅ཧࡦΛఏ͍ࣔͯ͠Δ ҰํͰΑΓن໛͕֦େ͠ɺߴ౓Խͨ͠اۀ͸ඞཁʹԠͯ͡௥Ճͷ؅ ཧࡦΛݕ౼͢Δඞཁ͕͋Δ

4FDVSJOHZPVSBDDPVOU Ұͭ໨ͷப͸ΞΧ΢ϯτ؅ཧʢ*OGP4FDʣ *".ɺ(SPVQɺ3PMFͷ࢖༻ͱϧʔτϢʔβʔͷ੍ݶɺଟཁૉೝূΛ FNQIBTJ[F "845SVTUFE"EWJTPSɺ"NB[PO(VBSE%VUZɺ"84#VEHFUTͳͲ ͷ؂ࢹαʔϏεΛઃఆ͠ɺΞΧ΢ϯτ಺ͷΞΫςΟϏςΟ͕௨஌͞Εɺ ͦΕ͕ෆਖ਼ɺ·ͨ͸༧ظ͠ͳ͍΋ͷͰ͋Δ৔߹ɺਝ଎ʹରԠͰ͖ΔΑ ͏ʹ͢Δ

4FDVSJOHZPVSBDDPVOU ͜ͷষʹؚ·ΕΔτϐοΫ "$$5ΞΧ΢ϯτϨϕϧͷ࿈བྷઌΛ༗ޮͳϝʔϧ഑৴Ϧετʹઃఆ͢Δ "$$5SPPUϢʔβʔͷ࢖༻Λ੍ݶ͢Δ "$$5֤ϢʔβʔͷίϯιʔϧΞΫηεΛઃఆ͢Δ "$$5*".ϢʔβʔάϧʔϓΛ࢖༻ͯ͠ݖݶΛׂΓ౰ͯΔ "$$5ϩάΠϯ࣌ʹଟཁૉೝূ .'" Λཁٻ͢Δ "$$5ύεϫʔυϙϦγʔͷద༻
"$$5$MPVE5SBJMͷϩάΛอޢ͞Εͨ4όέοτʹ഑৴͢Δ "$$5ϓϥΠϕʔτ4όέοτ΁ͷύϒϦοΫΞΫηεΛ๷ࢭ͢Δ "$$5ະ࢖༻ͷ71$ɺαϒωοτɺ͓ΑͼηΩϡϦςΟάϧʔϓΛ࡟আ͢Δ "$$5"84όδΣοτΛߏ੒ͯ͠ࢧग़Λ؂ࢹ͢Δ "$$5(VBSE%VUZ௨஌Λ༗ޮʹͯ͠ରԠ͢Δ "$$55SVTUFE"EWJTPSΛ࢖༻ͯ͠ߴϦεΫͷ໰୊Λ؂ࢹ͠ղܾ͢Δ

"$$5ΞΧ΢ϯτϨϕϧͷ࿈བྷઌΛ༗ޮͳϝʔϧ഑৴Ϧετʹઃఆ͢Δ ݸਓͷϝΞυ͡Όͳ͘ɺग़ೖΓͤ͞΍͍͢ϝʔϦεΛ࢖͏͜ͱ ੥ٻɺӡ༻ɺ͓ΑͼηΩϡϦςΟ௨஌ͷͨΊͷϝʔϦεΛ༻ҙ͓ͯ͘͠ͱྑ͍ "$$5SPPUϢʔβʔͷ࢖༻Λ੍ݶ͢Δ SPPUϢʔβʔͷ࢖༻͸5BTLTUIBUSFRVJSFSPPUVTFSDSFEFOUJBMTʹ੍ݶ͢Δ "$$5Ͱઆ໌͢Δ௨ΓɺSPPUϢʔβʔʹ͸.'"Λཁٻ͢Δ "$$5֤ϢʔβʔͷίϯιʔϧΞΫηεΛઃఆ͢Δ جຊͱͯ͠ɺϚωδϝϯτίϯιʔϧʹΞΫηε͢ΔਓͦΕͧΕʹ*".ϢʔβʔΛ࡞੒͢Δ ϢʔβʔؒͰೝূ৘ใΛڞ༗͠ͳ͍͜ͱ "84γϯάϧαΠϯΦϯʢ"84440ʣɺ0LUBɺ"DUJWF%JSFDUPSZɺ1JOH*EFOUJUZͳͲͷ
*%ϓϩόΠμʔ͔ΒϑΣσϨʔτͨ͠ϢʔβʔΛ࢖༻͢Δ͜ͱΛਪ঑ʢϢʔβʔʹͱͬͯ΋ ศརͩ͠ʣ "$$5*".ϢʔβʔάϧʔϓΛ࢖༻ͯ͠ݖݶΛׂΓ౰ͯΔ *".ϢʔβʔάϧʔϓΛ࡞੒ͯ͠ɺϢʔβʔͷ৬຿ʹج͍ͮͯάϧʔϓΛׂΓ౰ͯΔ ଟ͘ͷ৔߹ϚωʔδυϙϦγʔ͕࢖͑Δ͕ɺΧελϚΠζ͢Δ৔߹͸࠷খಛݖͷϕετϓϥ ΫςΟεʹै͏

"$$5ϩάΠϯ࣌ʹଟཁૉೝূ .'" Λཁٻ͢Δ 3PPUϢʔβʔͱɺߴ͍ݖݶΛ࣋ͭओཁϢʔβʔʹରͯ͠.'"Λ༗ޮʹ͢Δ "$$5ύεϫʔυϙϦγʔͷద༻ $*4ʢ$FOUFSGPS*OUFSOFU4FDVSJUZʣͰఆΊΔ1BTTXPSE1PMJDZ(VJEFʹै͍ɺڧྗͳ ύεϫʔυϙϦγʔΛద༻͢Δ DVTUPN*".QBTTXPSEQPMJDZͰઃఆͰ͖Δ "$$5$MPVE5SBJMͷϩάΛอޢ͞Εͨ4όέοτʹ഑৴͢Δ ϢʔβʔɺϩʔϧɺαʔϏεʹΑ࣮ͬͯߦ͞ΕͨΞΫγϣϯ͸ɺ"84$MPVE5SBJMʹΠϕϯ
τͱͯ͠ه࿥͞Εͯɺ೔อ࣋͞ΕΔ ೔Ҏ্อ࣋͢ΔͨΊʹɺ͜ΕΒͷ৘ใΛ4όέοτʹసૹ͓ͯ͘͠ ʢॴݟʣΠϯγσϯτؾ෇͘ͷͬͯ೔Ҏ্ֻ͔ͬͨΓ͠·͢ΑͶɾɾɾ "$$5ϓϥΠϕʔτ4όέοτ΁ͷύϒϦοΫΞΫηεΛ๷ࢭ͢Δ ֤όέοτͰ#MPDL1VCMJD"DDFTTΛ༗ޮʹ͢Δ͜ͱͰɺޡͬͯެ։͢Δ͜ͱΛ཈ࢭ͢Δ ެ։͢ΔΑ͏ͳόέοτ͕ͦ΋ͦ΋ͳ͚Ε͹ɺ"84ΞΧ΢ϯτϨϕϧͰ͜ͷઃఆΛ༗ޮʹ Ͱ͖Δ

"$$5ະ࢖༻ͷ71$ɺαϒωοτɺ͓ΑͼηΩϡϦςΟάϧʔϓΛ࡟আ͢Δ ࢖༻͞Ε͍ͯͳ͍Ϧιʔε͸࡟আ͢Δ͜ͱɻ ࣗಈతʹ࡞੒͞ΕΔσϑΥϧτ71$ͳͲʹ΋஫ҙ "$$5"84#VEHFUTΛߏ੒ͯ͠ࢧग़Λ؂ࢹ͢Δ "84#VEHFUTͰຖ݄ͷίετͱ࢖༻ྔΛ؂ࢹ͠ɺίετ͕໨ඪ஋Λ௒͑Δͱ༧ଌ͞ΕΔ ৔߹ʹ௨஌͢Δ͜ͱ͕Ͱ͖Δ ίετͷ༧ଌ௨஌͸ɺ༧ظ͠ͳ͍ΞΫςΟϏςΟͷஹީΛࣔ͢͜ͱ΋͋ΔͷͰɺ௥Ճͷ๷ ޚͱͯ͠΋༗ޮ "$$5(VBSE%VUZ௨஌Λ༗ޮʹͯ͠ରԠ͢Δ (VBSE%VUZ͸͝ଘ͡ͷ௨Γɻ༗ޮʹ͠ɺݕ஌಺༰ʹରԠ͢Δ͜ͱͰɺ"84؀ڥʹ͓͚Δ
જࡏతͳѱҙ΍ෆਖ਼ͳಈ࡞Λ્ࢭ͢Δ $MPVE8BUDI&WFOUTͱ"NB[PO4/4Λ࿈ܞͯࣗ͠ಈ௨஌Λ "$$55SVTUFE"EWJTPSΛ࢖༻ͯ͠ߴϦεΫͷ໰୊Λ؂ࢹ͠ղܾ͢Δ 5SVTUFE"EWJTPSͰύογϒͳεΩϟϯΛߦ͍ɺௐࠪ݁ՌΛఆظతʹ֬ೝ͠ɺඞཁʹԠ͡ ͯ໰୊Λվળ͢Δ͜ͱ

4FDVSJOHZPVSXPSLMPBET ೋͭ໨ͷப͸ϫʔΫϩʔυʢ"QQ4FDʣ BQQMJDBUJPOTFDSFUTͷ؅ཧͱΞΫηεൣғ ϓϥΠϕʔτϦιʔε΁ͷΞΫηεϧʔτͷ࠷খԽ΍σʔλอޢͷͨΊ ͷ҉߸Խʹؔ͢ΔϓϥΫςΟεΛFNQIBTJ[F

4FDVSJOHZPVSXPSLMPBET ͜ͷষʹؚ·ΕΔτϐοΫ 8,-%DPNQVUFFOWJSPONFOUͷΞΫηεڐՄʹ*".ϩʔϧΛ࢖༻͢Δ 8,-%SFTPVSDFCBTFEQPMJDJFTʹΑΔݖݶͰΫϨσϯγϟϧͷ࢖༻ൣғΛ੍ݶ͢Δ 8,-%FQIFNFSBMTFDSFUT·ͨ͸TFDSFUTNBOBHFNFOUαʔϏεΛ࢖༻͢Δɻ 8,-%ΞϓϦέʔγϣϯͷγʔΫϨοτ͕ެ։͞Εͳ͍Α͏ʹ͢Δ 8,-%๫࿐͞ΕͨγʔΫϨοτͷݕग़ͱम෮ 8,-%44)΍3%1ͷ୅ΘΓʹ4ZTUFNT.BOBHFSΛ࢖༻͢Δ 8,-%ػີσʔλΛؚΉ4όέοτͷσʔλΠϕϯτΛϩάʹه࿥͢Δ 8,-%"NB[PO&#4ϘϦϡʔϜΛ҉߸Խ͢Δ
8,-%"NB[PO3%4σʔλϕʔεΛ҉߸Խ͢Δ 8,-%ϓϥΠϕʔτϦιʔεΛϓϥΠϕʔταϒωοτʹ഑උ͢Δ 8,-%ηΩϡϦςΟάϧʔϓΛ࢖༻ͯ͠ωοτϫʔΫΞΫηεΛ੍ݶ͢Δ 8,-%71$ΤϯυϙΠϯτΛ࢖༻ͯ͠αϙʔτ͞ΕΔαʔϏεʹΞΫηε͢Δ 8,-%͢΂ͯͷύϒϦοΫ8FCΤϯυϙΠϯτʹ)5514Λཁٻ͢Δ 8,-%ύϒϦοΫΤϯυϙΠϯτʹΤοδϓϩςΫγϣϯαʔϏεΛ࢖༻͢Δ 8,-%ςϯϓϨʔτͰηΩϡϦςΟ੍ޚΛఆٛ͠ɺ$*$%ϓϥΫςΟεΛ࢖༻ͯ͠σϓϩΠ͢Δ

8,-%DPNQVUFFOWJSPONFOUͷΞΫηεڐՄʹ*".ϩʔϧΛ࢖༻͢Δ &$Πϯελϯε΍'BSHBUFλεΫɺ-BNCEBͳͲͰಈ࡞͢ΔΞϓϦέʔγϣϯʹ͸ϩʔϧͰࢿ ֨৘ใΛ؅ཧ͢Δ 8,-%SFTPVSDFCBTFEQPMJDJFTʹΑΔݖݶͰΫϨσϯγϟϧͷ࢖༻ൣғΛ੍ݶ͢Δ ϙϦγʔ͸ΞΠσϯςΟςΟϕʔεͱϦιʔεϕʔεͷ΋ͷ͕͋Γɺޙऀ͸4΍71$ΤϯυϙΠ ϯτͳͲͷϦιʔεʹରԠ͍ͯ͠Δ ޙऀͰ͸BXT1SJODJQBM0SH*%ɺBXT4PVSDF7QD΍BXT4PVSDF7QDFɺBXT4PVSDF*QͳͲΛࢦ ఆ͠ɺϦιʔε΁ͷΞΫηεΛ੍ݶ͢Δ͜ͱΛਪ঑ 8,-%FQIFNFSBMTFDSFUT·ͨ͸TFDSFUTNBOBHFNFOUαʔϏεΛ࢖༻͢Δɻ ΩʔϖΞɺΞΫηετʔΫϯɺσδλϧূ໌ॻɺ*%1BTTXPSEͳͲͷೝূ৘ใ͸ɺFQIFNFSBM
୹ ࣌ؒಈతੜ੒͞ΕΔ΋ͷ ͔ϚωδϝϯταʔϏεΛ࢖༻͢Δ ϚωδϝϯταʔϏε͸1BSBNFUFS4UPSFͱ"844FDSFUT.BOBHFSͷ૊Έ߹ΘͤΛਪ঑ 8,-%ΞϓϦέʔγϣϯͷγʔΫϨοτ͕ެ։͞Εͳ͍Α͏ʹ͢Δ ޡͬͯϦϙδτϦʹνΣοΫΠϯ͞Εͳ͍Α͏ʹɺπʔϧΛ࢖༻ͯ͠ɺൿີ͕νΣοΫΠϯ͞ΕΔ ͷΛ๷ࢭ͢Δɻެ։͞ΕͨγʔΫϨοτͷνΣοΫΛखಈίʔυϨϏϡʔϓϩηεͷҰ෦ͱͯ͠૊ ΈೖΕΔɻ (JUMFBLTɺ8IJTQFSTɺEFUFDUTFDSFUTɺHJUTFDSFUTɺ5SV ffl F)PH

8,-%ػີ࿙Ӯͷݕ஌ͱରԠ 8,-%ɺ͸γʔΫϨοτ࿙Ӯͷ๷ࢭࡦͰɺͪ͜Β͸ݕ஌ͷॏཁੑ "NB[PO$PEF(VSV3FWJFXFSͰίʔυ಺ͷγʔΫϨοτΛݕग़ɺੋਖ਼Ͱ͖ ΔɻͰ৮Εͨπʔϧʹ΋طଘͷݕग़͕Ͱ͖Δ΋ͷ΋͋Δ 8,-%44)΍3%1ͷ୅ΘΓʹ4ZTUFNT.BOBHFSΛ࢖༻͢Δ "844ZTUFNT.BOBHFSͷ4FTTJPO.BOBHFSΛ࢖༻ͯ͠ɺ؅ཧίϯιʔϧ ΍"84$-*Λհͯ͠ηΩϡΞʹ઀ଓͰ͖Δ 44)΍3%1ͷΑ͏ʹ௥Ճͷࢿ֨৘ใΛ؅ཧ͢ΔखؒͱϦεΫ͕ল͚Δ 8,-%ػີσʔλΛؚΉ4όέοτͷσʔλΠϕϯτΛϩάʹه࿥͢Δ $MPVE5SBJM͸4ͷΦϒδΣΫτʹର͢ΔಡΈऔΓ·ͨ͸ॻ͖ࠐΈૢ࡞ΛΩϟ
ϓνϟ͠ͳ͍ͷͰɺ͜ΕΒͷσʔλΠϕϯτͷه࿥Λ༗ޮԽ͢Δ 8,-%"NB[PO&#4ϘϦϡʔϜΛ҉߸Խ͢Δ "84ΞΧ΢ϯτͷσϑΥϧτͷಈ࡞ͱͯ͠&#4ϘϦϡʔϜͷ҉߸ԽΛڧ੍Ͱ ͖Δ

8,-%"NB[PO3%4σʔλϕʔεΛ҉߸Խ͢Δ &#4ϘϦϡʔϜͱಉ༷ʹɺ3%4ϘϦϡʔϜ΋҉߸Խ͢Δ 8,-%ϓϥΠϕʔτϦιʔεΛϓϥΠϕʔταϒωοτʹ഑උ͢Δ &$ΠϯελϯεɺσʔλϕʔεɺΩϡʔɺΩϟογϡͳͲɺΠϯλʔωοτ΁ͷ௚ ઀ΞΫηεΛඞཁͱ͠ͳ͍Ϧιʔε͸71$ϓϥΠϕʔταϒωοτʹσϓϩΠ͢Δ ωοτϫʔΫͷ෼཭ʹ͍ͭͯ͸*OGSBTUSVDUVSFTFDVSJUZJO"NB[PO71$Λࢀর 8,-%ηΩϡϦςΟάϧʔϓΛ࢖༻ͯ͠ωοτϫʔΫΞΫηεΛ੍ݶ͢Δ &$Πϯελϯεɺ3%4ͳͲͷϦιʔε΁ͷτϥϑΟοΫΛ੍ޚ͢ΔͨΊʹηΩϡϦ ςΟάϧʔϓΛ࢖༻͢Δ ηΩϡϦςΟάϧʔϓ͸Ծ૝తͳϑΝΠΞ΢Υʔϧͱͯ͠ػೳ͠ɺΠϯό΢ϯυͱΞ΢
τό΢ϯυͷτϥϑΟοΫΛڐՄ͢ΔϧʔϧΛҰ؏ͯ͠ఆٛ͢Δ 3F ff FS$POUSPMUSB ffi DUPSFTPVSDFTVTJOHTFDVSJUZHSPVQT 8,-%71$ΤϯυϙΠϯτΛ࢖༻ͯ͠αϙʔτ͞ΕΔαʔϏεʹΞΫηε͢Δ 71$ʹ͓͍ͯ֎෦αʔϏεʹΞΫηε͢Δࡍ͸ɺ71$ΤϯυϙΠϯτΛ࢖༻͠ɺϙ Ϧγʔ΍ηΩϡϦςΟάϧʔϓΛΞλονͯ͠τϥϑΟοΫΛ੍ޚ͢Δ

8,-%͢΂ͯͷύϒϦοΫ8FCΤϯυϙΠϯτʹ)5514Λཁٻ͢Δ 4Ͱϗετ͞ΕΔ੩తͳ8FCαΠτ͸)5514Λαϙʔτ͍ͯ͠ͳ͍͕ɺ͜Ε͸ $MPVE'SPOUΛ࢖ͬͯରॲͰ͖Δ 8,-%ύϒϦοΫΤϯυϙΠϯτʹ͸ΤοδϓϩςΫγϣϯαʔϏεΛ࢖༻͢Δ ΤοδϓϩςΫγϣϯαʔϏεΛ࢖༻͢Δ͜ͱͰɺΞϓϦέʔγϣϯͱϢʔβʔͷؒͰ௥Ճ ͷηΩϡϦςΟϨΠϠʔ͕ఏڙ͞ΕΔ "848"'ɺ$MPVE'SPOUɺ&MBTUJD-PBE#BMBODJOHɺ"1*(BUFXBZɺ"NQMJGZ)PTUJOHͳ Ͳ $MPVE'SPOUɺ"1*(BUFXBZɺ"NB[PO3PVUFͰ͸ϨΠϠʔd૚ͰແঈͰ%%P4ରࡦ Λఏڙ
8,-%ςϯϓϨʔτͰηΩϡϦςΟ੍ޚΛఆٛ͠ɺ$*$%ϓϥΫςΟεΛ࢖༻ͯ͠σϓ ϩΠ͢Δ "84$MPVE'PSNBUJPOͳͲͷ*B$αʔϏεͰ͸*".ϕʔεͱϦιʔεϕʔεͷ྆ํͷϙϦ γʔ΍"NB[PO(VBSE%VUZɺ"848"'ͳͲͷηΩϡϦςΟαʔϏεΛαϙʔτ͢Δ ΞϓϦέʔγϣϯͷڐՄϙϦγʔͱΞϓϦέʔγϣϯͷίʔυ͸ಉ͡ϦϙδτϦʹίϛοτ ͢Δ

શ෦Ͱ͖ͯ·ͨ͠ʁ ࣗ໌ͷ͜ͱ͕ଟ͍ҰํͰɺϋοͱ͢Δ಺༰΋ͪΐͪ͜ΐ͜ ҰํͰ௥ՃͷαʔϏεΛ࢖༻͢Δ৔߹͸௥ՃͷηΩϡϦςΟ͕ඞཁʹ ͳΔ͸ͣͰɺྫ͑͹&$3Λ࢖͏৔߹͸σϓϩΠ࣌ͷεΩϟϯΛ༗ޮ ʹ͢ΔͳͲɺ૊৫ʹԠͨ͡ΧελϚΠζ͕ඞཁͰ͸ ͜ͷϕʔεϥΠϯ͚ͩΛकΕ͹େৎ෉ɺͱ͍͏Θ͚Ͱ͸ͳ͍ͱࢥ͏ ·ͩए͍υΩϡϝϯτͰࠓޙ΋සൟʹߋ৽͞Ε͍ͯ͘ͱࢥ͏ͷͰɺؾ ʹͳͬͨํ͸ݪจͷνΣοΫΛ $MBTTNFUIPEࣾͷʮ"84શମͷηΩϡϦςΟ؅ཧͱշదͳηΩϡϦ ςΟӡ༻ʯͱ͍͏ࢿྉͱॏͳΔ͜ͱ΋ଟ͔ͬͨɻͦͪΒ΋͓͢͢Ίɻ

3FGFSFODF "844UBSUVQ4FDVSJUZ#BTFMJOF "8444# IUUQTEPDTBXTBNB[PODPNQSFTDSJQUJWFHVJEBODFMBUFTUBXTTUBSUVQTFDVSJUZCBTFMJOFEPDIJTUPSZIUNM 4FDVSJUZCFTUQSBDUJDFTJO*". IUUQTEPDTBXTBNB[PODPN*".MBUFTU6TFS(VJEFCFTUQSBDUJDFTIUNMHSBOUMFBTUQSJWJMFHF 5BTLTUIBUSFRVJSFSPPUVTFSDSFEFOUJBMT IUUQTEPDTBXTBNB[PODPNHFOFSBMMBUFTUHSSPPUWTJBNIUNMBXT@UBTLTUIBUSFRVJSFSPPU $*41BTTXPSE1PMJDZ(VJEF
IUUQTXXXDJTFDVSJUZPSHJOTJHIUTXIJUFQBQFSTDJTQBTTXPSEQPMJDZHVJEF 6TF"844FDSFUT.BOBHFSDMJFOUTJEFDBDIJOHMJCSBSJFTUPJNQSPWFUIFBWBJMBCJMJUZBOEMBUFODZPGVTJOHZPVS TFDSFUT IUUQTBXTBNB[PODPNKQCMPHTTFDVSJUZVTFBXTTFDSFUTNBOBHFSDMJFOUTJEFDBDIJOHMJCSBSJFTUPJNQSPWFUIFBWBJMBCJMJUZBOEMBUFODZ PGVTJOHZPVSTFDSFUT *OGSBTUSVDUVSFTFDVSJUZJO"NB[PO71$ IUUQTEPDTBXTBNB[PODPNWQDMBUFTUVTFSHVJEFJOGSBTUSVDUVSFTFDVSJUZIUNM $POUSPMUSB ffi DUPSFTPVSDFTVTJOHTFDVSJUZHSPVQT IUUQTEPDTBXTBNB[PODPNWQDMBUFTUVTFSHVJEF71$@4FDVSJUZ(SPVQTIUNM "84શମͷηΩϡϦςΟ؅ཧͱշదͳηΩϡϦςΟӡ༻ IUUQTTQFBLFSEFDLDPNDNVTVEBLFJTVLFBXTRVBOUJGBMTFTFLJZVSJUFJHVBOMJUPLVBJTIJOBTFLJZVSJUFJZVOZPOH

about AWS Startup Security Baseline (AWS SSB)

about AWS Startup Security Baseline (AWS SSB)

yu fujioka

More Decks by yu fujioka

Featured

Transcript

"844UBSUVQ4FDVSJUZ#BTFMJOF +.-5WPM-5ൃද $ZQIFS5FD*OD ZVGVKJPLB ˞ൃݴ͸ݸਓͷݟղͰ͢ɻ

4FDVSJOHZPVSXPSLMPBET ೋͭ໨ͷப͸ϫʔΫϩʔυʢ"QQ4FDʣ BQQMJDBUJPOTFDSFUTͷ؅ཧͱΞΫηεൣғ ϓϥΠϕʔτϦιʔε΁ͷΞΫηεϧʔτͷ࠷খԽ΍σʔλอޢͷͨΊ ͷ҉߸Խʹؔ͢ΔϓϥΫςΟεΛFNQIBTJ[F