Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
セキュリティインシデントを乗り越えるために行ったマルチアカウントでの取り組みについて / ...
Search
kenryooo
February 09, 2021
Technology
5.9k
6
Share
セキュリティインシデントを乗り越えるために行ったマルチアカウントでの取り組みについて / AWS multi-account approach in Classi
2021/02/09開催「第二回 AWSマルチアカウント事例祭り」での発表資料です。
kenryooo
February 09, 2021
Other Decks in Technology
See All in Technology
CREがSLOを握ると 何が変わるのか
nekomaho
0
360
Kiro Meetup #7 Kiro アップデート (2025/12/15〜2026/3/20)
katzueno
2
280
最大のアウトプット術は問題を作ること
ryoaccount
0
260
Oracle AI Database@AWS:サービス概要のご紹介
oracle4engineer
PRO
3
2.1k
MCPで決済に楽にする
mu7889yoon
0
170
15年メンテしてきたdotfilesから開発トレンドを振り返る 2011 - 2026
giginet
PRO
2
260
GitHub Actions侵害 — 相次ぐ事例を振り返り、次なる脅威に備える
flatt_security
12
7.2k
「活動」は激変する。「ベース」は変わらない ~ 4つの軸で捉える_AI時代ソフトウェア開発マネジメント
sentokun
0
140
遊びで始めたNew Relic MCP、気づいたらChatOpsなオブザーバビリティボットができてました/From New Relic MCP to a ChatOps Observability Bot
aeonpeople
1
150
BFCacheを活用して無限スクロールのUX を改善した話
apple_yagi
0
140
Cortex Codeでデータの仕事を全部Agenticにやりきろう!
gappy50
0
110
Amazon Qはアマコネで頑張っています〜 Amazon Q in Connectについて〜
yama3133
1
170
Featured
See All Featured
Product Roadmaps are Hard
iamctodd
PRO
55
12k
The Illustrated Children's Guide to Kubernetes
chrisshort
51
52k
How to audit for AI Accessibility on your Front & Back End
davetheseo
0
230
What’s in a name? Adding method to the madness
productmarketing
PRO
24
4k
Designing for Performance
lara
611
70k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
32
2.6k
Utilizing Notion as your number one productivity tool
mfonobong
4
280
Facilitating Awesome Meetings
lara
57
6.8k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
254
22k
Navigating Team Friction
lara
192
16k
My Coaching Mixtape
mlcsv
0
91
Build The Right Thing And Hit Your Dates
maggiecrowley
39
3.1k
Transcript
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ୈೋճ"84ϚϧνΞΧϯτࣄྫࡇΓ ηΩϡϦςΟΠϯγσϯτΛΓӽ͑ΔͨΊʹߦͬͨ ϚϧνΞΧϯτͰͷऔΓΈʹ͍ͭͯ $MBTTJ$PSQ,FOSZP0NJOBNJ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE $ whoami • ,FOSZP0NJOBNJ !LFOSZPPP • ۙ͘Β͍#$αʔϏεΛத৺ʹ%#"ɺαʔό αΠυΤϯδχΞɺ43&Λܦݧɻ
• $MBTTJʹ43&ͱͯ͠δϣΠϯɻ • ͜͜ΠϯϑϥηΩϡϦςΟྖҬΛத৺ʹۀΛ ߦ͍ͬͯΔɻ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE About Classi ʮ$MBTTJʯڭҭݱΛࢧԉ͢Δ ΫϥυαʔϏε • શࠃͷߴߍͷˋ͕ಋೖ • ߴߍੜͷਓʹਓ͕ར༻ •
ར༻ऀສਓ • ઌੜɺੜెɺอޢऀ͕ܨ͕Δ ֶशࢧԉϓϥοτϑΥʔϜ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ͞ͳ͍͜ͱ • ݄ɺ݄ͷߴෛՙʹΑΔΞΫηεোঢ়ଶʹؔ͢ΔऔΓΈʹ͍ͭͯ • ͪ͜Βʹ͍ͭͯԼهΛ͝ཡ͍ͩ͘͞ • $MBTTJ։ൃऀϒϩά IUUQTUFDIDMBTTJKQ
• %FWFMPQFST4VNNJU
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE [PR] Developers Summit 2021 IUUQTFWFOUTIPFJTIBKQEFWTVNJTFTTJPO
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Agenda • ηΩϡϦςΟΠϯγσϯτ • ઓུͱධՁ • "84ΞΧϯτཧ • *%ͱΞΫηεཧ
• ΨʔυϨʔϧ • ࠓޙ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Agenda • ηΩϡϦςΟΠϯγσϯτ • ઓུͱධՁ • "84ΞΧϯτཧ • *%ͱΞΫηεཧ
• ΨʔυϨʔϧ • ࠓޙ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ηΩϡϦςΟΠϯγσϯτʹ͍ͭͯ 4VO 4BU ֎෦ͷ߈ܸऀ͔Βෆਖ਼ΞΫηεΛड͚αʔϏεఀࢭ αʔϏε࣌ؒޙʹ෮چͰ͖ͨͷͷϢʔβʔใྲྀग़ͷՄೳੑΛ֬ೝ ͯ͢ͷϢʔβʔͷύεϫʔυมߋ͕ྃ
֎෦αΠτʹͯɺྲྀग़ͨ͠ݸਓใͷ࿙ӮΛ֬ೝ ΠϯϑϥɺΞϓϦέʔγϣϯͱʹൈຊతͳηΩϡϦςΟͷݟ͠Λ࣮ࢪ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Agenda • ηΩϡϦςΟΠϯγσϯτ • ઓུͱධՁ • "84ΞΧϯτཧ • *%ͱΞΫηεཧ
• ΨʔυϨʔϧ • ࠓޙ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ઓུͱධՁ • શମͷઓུ • "848FMM"SDIJUFDUFE'SBNFXPSL4FDVSJUZ1JMMBS • "84ΞΧϯτཧͷઓུ • #FTU1SBDUJDFTGPS0SHBOJ[BUJPOBM6OJUTXJUI"840SHBOJ[BUJPOT
• ηΩϡϦςΟධՁ • "84ϓϩϑΣογϣφϧαʔϏεͷηΩϡϦςΟධՁ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Agenda • ηΩϡϦςΟΠϯγσϯτ • ઓུͱධՁ • "84ΞΧϯτཧ • *%ͱΞΫηεཧ
• ΨʔυϨʔϧ • ࠓޙ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Classi Organizations -Before- 0SHBOJ[BUJPOT 3PPU 1SPEVDUJPOΞΧϯτ ཧΞΧϯτ "[VSF"% #BTUJPOΞΧϯτ
։ൃ༻ΞΧϯτ ࿈ܞαʔϏε༻ 1SPEVDUJPOΞΧϯτ 4XJUDI3PMF -PH*O
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE • 064$1Λར༻͍ͯ͠ͳ͍ • 1SPEVDUJPOΞΧϯτ͕0SHBOJ[BUJPOͷཧΞΧϯτͱͯ͠ઃఆ • ࠷ݫີʹཧ͍ͨͣ͠ͷΞΧϯτ͕ཧͰ͖ͳ͍ • #BTUJPOΞΧϯτɺ։ൃऀ͕4BOECPYڥͱͯ͠ར༻
• 1SPEVDUJPOΞΧϯτϩάΠϯ͢ΔݩͷΞΧϯτ͕ηΩϡΞͰͳ͍
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ͬͨ͜ͱ • ཧΞΧϯτͷΓସ͑ • ཧΞΧϯτΛ৽ن࡞ • طଘΞΧϯτچ৫Λɺ՝ۚपΓͷઃఆΛՃ͠৽৫Ҡಈ େมʜ
• 0SHBOJ[BUJPOTಋೖ࣌৽نʹཧΞΧϯτΛ࡞Γ·͠ΐ͏ʂ • 06ઃܭͱஔ • ʮ#FTU1SBDUJDFTGPS0SHBOJ[BUJPOBM6OJUTXJUI"840SHBOJ[BUJPOTʯ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Classi Organizations -After- 0SHBOJ[BUJPOT 'PVOEBUJPOBM@06 8PSLMPBET@06 1SPE@06 4%-$@06 *OGSB@06
.BJOUFOBODF@06 4VTQFOEFE@06 3PPU ϚελʔΞΧϯτ ܭըϝϯςφϯε༻ ഇغ༧ఆ 1PMJDZ4UBHJOH@06 ηΩϡϦςΟ ϙϦγʔมߋ༻ ֤छϩά 1SPEVDUJPO 4UBHJOH 4BOECPY #FTU1SBDUJDFTGPS0SHBOJ[BUJPOBM6OJUTXJUI"840SHBOJ[BUJPOT IUUQTBXTBNB[PODPNKQCMPHTNUCFTUQSBDUJDFTGPSPSHBOJ[BUJPOBMVOJUTXJUIBXTPSHBOJ[BUJPOT
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Organiztional Units 06 ༻్ 'PVOEBUJPOBM@06 1SPE4%-$ͷϫʔΫϩʔυͱڞ௨ج൫Λแ͢Δ06 8PSLMPBET@06 1SPE4%-$ͷϫʔΫϩʔυΛแ͢Δ06 1SPE@06
ຊ൪ΞΧϯτͷΈΛแ͢Δ06 4%-$@06 4UBHJOH%FWɺ4BOECPYͳͲΛแ͢Δ06 *OGSB@06 ڞ௨ج൫ ϩάूΞΧϯτηΩϡϦςΟࠪΞΧϯτ Λแ͢Δ06 1PMJDZ4UBHJOH@06 ৫ߏͷมߋ4$1ͷมߋͳͲͷݕূͰར༻͢Δ06 .BJOUFOBODF@06 ࠪܥػೳͷϝϯςφϯεͳͲɺҰ࣌తʹ4$1Λҳ͢Δ࡞ۀΛߦ͏߹ʹར༻͢Δ06 4VTQFOEFE@06 ഇغ༧ఆͷ"84ΞΧϯτΛแ͢Δ06
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Agenda • ηΩϡϦςΟΠϯγσϯτ • ઓུͱධՁ • "84ΞΧϯτཧ • *%ͱΞΫηεཧ
• ΨʔυϨʔϧ • ࠓޙ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE IDͱΞΫηεཧ -Before- 0SHBOJ[BUJPOT 3PPU 1SPEVDUJPOΞΧϯτ ཧΞΧϯτ "[VSF"% #BTUJPOΞΧϯτ ։ൃ༻ΞΧϯτ
࿈ܞαʔϏε༻ 1SPEVDUJPOΞΧϯτ 4XJUDI3PMF -PH*O Ϛωδϝϯτίϯιʔϧར༻ ֤"84ΞΧϯτͰݸผʹΞΫηεΩʔΛൃߦ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE IDͱΞΫηεཧ -Before- • ։ൃऀ͚ʹҎԼͷ௨ΓͰΞΫηεํ๏Λఏڙ • ϚωδϝϯτίϯιʔϧͰͷར༻ • ϩάΠϯํ๏(4VJUFͱ4".-࿈ܞ •
#BTUJPOΞΧϯτΛܦͯɺ࡞ۀ͍ͨ͠ΞΧϯτʹ4XJUDI3PMF͢Δ • ϓϩάϥϜΞΫηεͰͷར༻ • ֤"84ΞΧϯτͰݸผʹΞΫηεΩʔΛൃߦ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE • 3PMFͱΞΫηεΩʔͷཧ • ผʑʹཧΛߦ͏ඞཁ͕͋Γࡶ • ΞΫηεΩʔཧ • ӬଓతͳΞΫηεΩʔͷཧ͕ར༻ऀͤ
• 4XJUDI3PMFͷηΩϡϦςΟ • աڈɺεΠονઌ3PMFͷ1SJODJQBMઃఆϛεʹΑΓఆͯ͠ͳ͍ݖݶͰೖΓ์ʹ ͳ͍ͬͯͨ͜ͱ͕͋ͬͨ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ͬͨ͜ͱ • ϩʔΧϧϚγϯͷରࡦ • BXTMBCTHJUTFDSFUTಋೖ • ΞΫηεΩʔͳͲͷػີใͷ(JUϦϙδτϦͷίϛοτΛ͙
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ͬͨ͜ͱ • "84ଆͷରࡦ • "84440ͷҠߦ • ݄ʹ5PLZP3FHJPOͰϩʔϯνͨ͠λΠϛϯάͰҠߦ • "[VSF"%ͱ࿈ܞ͢Δ͜ͱͰΞΧϯτཧ͕γϯϓϧʹ
• ΞΫηεΩʔͷཧෆཁʹ ˞4BB4͚ͷͷআ͘
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE AWS SSO 0SHBOJ[BUJPOT 'PVOEBUJPOBM@06 8PSLMPBET@06 1SPE@06 4%-$@06 *OGSB@06 .BJOUFOBODF@06
4VTQFOEFE@06 3PPU ϚελʔΞΧϯτ ܭըϝϯςφϯε༻ ഇغ༧ఆ 1PMJDZ4UBHJOH@06 ηΩϡϦςΟ ϙϦγʔมߋ༻ ֤छϩά 1SPEVDUJPO 4UBHJOH 4BOECPY "[VSF"% Ϛωδϝϯτίϯιʔϧ ΞΫηεΩʔ "844JOHMF4JHO0O ֤ΞΧϯτϩάΠϯ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE AWS SSO Ҡߦ࣌ͷτϥϒϧ • ࣄ • 4XJUDI3PMF࣌ͷཧऀ༻3PMFΛআͨ͠ͱ͜ΖɺαʔϏεͰར༻͍ͯ͠ Δ$.,͕ӾཡɺมߋෆՄೳʹͳͬͯ͠·ͬͨ •
"ENJOJTUSBUPSݖݶϢʔβʔͰSPPUͰͲ͏ʹͰ͖ͳ͍ • ݪҼ • আͨ͠ཧऀ3PMFͷΈ͕ΩʔϙϦγʔͱͯ͠ࢦఆ͞Ε͍ͯͨͨΊɺআ͠ ͨ࣌ͰཧऀෆࡏͷΩʔʹͳΔ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE AWS SSO Ҡߦ࣌ͷτϥϒϧ • ରԠ • "84ͷαϙʔτ͍߹ΘͤɺҰ࣌తͳϢʔβʔΛ࡞ɺ1VU,FZ1PMJDZݖݶ Λ༩ͯ͠Β͍ݩͷΩʔϙϦγʔΛ෮׆ͤ͞Δ͜ͱͰ෮چͨ͠ •
ͨͩ͠ɺ࡞ۀλΠϛϯάͳͲίϯτϩʔϧͰ͖ͳ͍ཁૉ͋ΔͷͰɺΩʔϙϦ γʔͷཧऀͱͯ͠ෳͷ6TFS͘͠3PMFΛ༩͓ͯ͘͠ͷ͕Φεεϝ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Agenda • ηΩϡϦςΟΠϯγσϯτ • ઓུͱධՁ • "84ΞΧϯτཧ • *%ͱΞΫηεཧ
• ΨʔυϨʔϧ • ࠓޙ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ༧తΨʔυϨʔϧ • 4$1ͷྫ • ෆ༻Ϧʔδϣϯͷ੍ݶ • ࠪܥૢ࡞ͷ੍ݶ • ڥಛ༗ͷ੍ݶ
ॏཁૢ࡞ͳͲ • શૢ࡞ͷېࢭ • FUD
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Organizational Units and SCP 06 ༻్ 4$1 'PVOEBUJPOBM@06 1SPE4%-$ͷϫʔΫϩʔυͱڞ௨ج൫Λแ͢Δ06
Ϧʔδϣϯ੍ݶɺࠪܥૢ࡞ͷ੍ݶ 8PSLMPBET@06 1SPE4%-$ͷϫʔΫϩʔυΛแ͢Δ06 ։ൃऀ͚ͷ੍ݶ 1SPE@06 ຊ൪ΞΧϯτͷΈΛแ͢Δ06 ڥಛ༗ͷ੍ݶ 4%-$@06 4UBHJOH%FWɺ4BOECPYͳͲΛแ͢Δ06 ڥಛ༗ͷ੍ݶ *OGSB@06 ڞ௨ج൫ ϩάूΞΧϯτηΩϡϦςΟࠪΞΧϯτ Λแ͢Δ06 ڥಛ༗ͷ੍ݶ 1PMJDZ4UBHJOH@06 ৫ߏͷมߋ4$1ͷมߋͳͲͷݕূͰར༻͢Δ06 ݕূ༰ʹΑͬͯมߋ .BJOUFOBODF@06 ࠪܥػೳͷϝϯςφϯεͳͲɺҰ࣌తʹ4$1Λҳ͢Δ࡞ۀΛߦ͏߹ʹར༻͢Δ06 ϝϯς༰ʹΑͬͯมߋ 4VTQFOEFE@06 ഇغ༧ఆͷ"84ΞΧϯτΛแ͢Δ06 શૢ࡞Λېࢭ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Organizational Units and SCP 0SHBOJ[BUJPOT 'PVOEBUJPOBM@06 8PSLMPBET@06 1SPE@06 4%-$@06
*OGSB@06 .BJOUFOBODF@06 4VTQFOEFE@06 3PPU ϚελʔΞΧϯτ ܭըϝϯςφϯε༻ ഇغ༧ఆ 1PMJDZ4UBHJOH@06 ηΩϡϦςΟ ϙϦγʔมߋ༻ ֤छϩά 1SPEVDUJPO 4UBHJOH 4BOECPY Ϧʔδϣϯ੍ݶ ࠪܥૢ࡞ͷ੍ݶ ։ൃऀ͚ͷ੍ݶ 1SPEʹ͓͚Δ ॏཁૢ࡞ͷ੍ݶ ڞ௨ج൫ಛ༗ͷ੍ݶ มߋ มߋ શૢ࡞ͷېࢭ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ൃݟతΨʔυϨʔϧ • $MPVE5SBJMΑΔಛఆૢ࡞ͷࢹ • $POpH • (VBSE%VUZ • 4FDVSJUZ)VC
• 5SVTUFE"EWJTPS ݕͨ͠༰ͷϑΟϧλϦϯάʹؔͯ͠ɺνϡʔχϯάΛਐΊ͍ͯΔ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ൃݟతΨʔυϨʔϧ αʔϏε໊ 0SHBOJ[BUJPOTରԠ ϝϯόʔͷҕ ϝϯόʔͷࣗಈ༗ޮԽ ิ $POpH ˓ ˓
✕ $MPVE'PSNBUJPO4UBDL4FUTΛར༻ͯ͠ɺ ϝϯόʔΞΧϯτͷ༗ޮԽΛࣗಈͰ࣮ࢪ (VBSE%VUZ ˓ ˓ ˓ 4FDVSJUZ)VC ˓ ˓ ˓ ·ͨɺൃݟతΨʔυϨʔϧͰར༻͢ΔҎԼͷαʔϏεʹؔͯ͠ɺ $POpH͚ͩࣗಈ༗ޮԽ͕Ͱ͖ͳ͔ͬͨͨΊ$'O4UBDL4FUTΛར༻͍ͯ͠Δ ૣ͘0SHBOJ[BUJPOTͱͷεϜʔζͳ౷߹͕࣮ݱͯ͠΄͍͠
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE Agenda • ηΩϡϦςΟΠϯγσϯτ • ઓུͱධՁ • "84ΞΧϯτཧ • *%ͱΞΫηεཧ
• ΨʔυϨʔϧ • ࠓޙ
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ࠓޙ • ൃݟతΨʔυϨʔϧͷνϡʔχϯά • $POpH3VMFTͷνϡʔχϯά • (VBSE%VUZ4FDVSJUZ)VCͷݕ༰ͷਫ਼ࠪ • ϩΪϯάͱϞχλϦϯάͷڧԽ
• 4*&.ͷಋೖ 4*&.PO"NB[PO&4Λݕ౼த • ΠϯγσϯτϨεϙϯεͷڧԽ • )BSEFOJOHΠϕϯτͷࢀՃɺݚम
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ·ͱΊ • ΠϯγσϯτҎ߱ɺϚϧνΞΧϯτߏΛ׆͔ͨ͠ܗͰରࡦΛ͢͢Ί͖ͯͨ • "84440Λར༻͢Δ͜ͱͰΞΧϯτཧίετ͕Լ͕ΓηΩϡΞʹͳͬͨ • ༧తɺൃݟతΨʔυϨʔϧͷಋೖͰΑΓηΩϡΞʹͳͬͨ ϚϧνΞΧϯτΛಋೖͯ͠ηΩϡΞͳڥΛखʹೖΕΑ͏
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ʘɹ8F"SF)JSJOHɹʗ IUUQTDPSQDMBTTJKQDBSFFST
$PQZSJHIU$MBTTJ$PSQ"MMSJHIUTSFTFSWFE ͓ΘΓ