Kiro５兄弟のいまどきのセキュリティ基礎知識

Kiro５兄弟のいまどきのセキュリティ基礎知識のまとめ資料です。目玉はKiro Crewの調査結果をまとめた２種類の構成図と１つのシーケンス図です。

Transcript

1. © NTT TechnoCross Corporation
2.          © NTT TechnoCross Corporation 2
3.        © NTT TechnoCross Corporation 3
4.   © NTT TechnoCross Corporation 4
5. © NTT TechnoCross Corporation 5
6.  © NTT TechnoCross Corporation 6
7. © NTT TechnoCross Corporation 7
8.  © NTT TechnoCross Corporation 8
9.  © NTT TechnoCross Corporation 9
10.   © NTT TechnoCross Corporation 10
11. © NTT TechnoCross Corporation 11
12.   © NTT TechnoCross Corporation 12
13.  © NTT TechnoCross Corporation 13
14.  © NTT TechnoCross Corporation 14
15.  © NTT TechnoCross Corporation 15
16.  © NTT TechnoCross Corporation 16
17.  © NTT TechnoCross Corporation 17
18.  【New】五男 Crew © NTT TechnoCross Corporation 18
19. © NTT TechnoCross Corporation 19
20.         © NTT TechnoCross Corporation 20
21.  © NTT TechnoCross Corporation 21
22.   © NTT TechnoCross Corporation 22
23.      © NTT TechnoCross Corporation 23
24.  # ~/.kiro/settings/permissions.yaml … 全プロジェクトに適用 rules: # ---- 拒否（最優先。どのスコープのallowでも上書きできない）---- capability: fs_read effect: deny match: ["**/.env", "**/.env.*", "**/*.pem", "**/*.key", "secrets/**"] - capability: shell effect: deny match: ["rm -rf *", "sudo *"] # ---- 許可 ---- capability: fs_read effect: allow - capability: fs_write effect: allow match: ["src/**", "tests/**"] # npmは許可、ただし公開だけは除外 - capability: shell effect: allow match: ["npm *", "npx *", "git *"] exclude: ["npm publish*"] - capability: mcp effect: allow match: ["awslabs.aws-documentation-mcp-server/*"] © NTT TechnoCross Corporation 24
25.     # ~/.kiro/settings/permissions.yaml rules: - capability: fs_read effect: deny match: ["**/.env"] #・・・・・② © NTT TechnoCross Corporation 25
26.   # ~/.kiro/settings/permissions.yaml # npmコマンドは許可。ただし公開だけは除く rules: - capability: shell effect: allow #・・・・・② match: [“npm *"] exclude: ["npm publish*"] © NTT TechnoCross Corporation 26
27. © NTT TechnoCross Corporation 27
28.     © NTT TechnoCross Corporation 28
29.   © NTT TechnoCross Corporation 29
30.    © NTT TechnoCross Corporation 30
31.   © NTT TechnoCross Corporation 31
32.   ・・・① ・・・② ・・・③ ・・・④ © NTT TechnoCross Corporation 32
33.   © NTT TechnoCross Corporation 33
34.   © NTT TechnoCross Corporation 34
35.   "Statement": [ { "Effect": "Allow", "Principal": { "Service": "q.amazonaws.com" }, "Action": [ "sts:AssumeRole", "sts:SetSourceIdentity" ], © NTT TechnoCross Corporation 35
36.  © NTT TechnoCross Corporation 36
37. © NTT TechnoCross Corporation 37
38.    © NTT TechnoCross Corporation 38
39.   ACP（Agent Client Protocol） kiro-cli(v2系) 設定ファイル:~/.kiro/agents/kirocrew.json(Kiro Crewが生成した) LLM(Bedrock) © NTT TechnoCross Corporation 39
40. © NTT TechnoCross Corporation 40
41.   © NTT TechnoCross Corporation 41
42.      © NTT TechnoCross Corporation 42
43. © NTT TechnoCross Corporation 43
44. © NTT TechnoCross Corporation 44
45. © NTT TechnoCross Corporation 45
46.    © NTT TechnoCross Corporation 46
47.  • • • • • © NTT TechnoCross Corporation 47
48.   © NTT TechnoCross Corporation 48
49. © NTT TechnoCross Corporation 49
50.      © NTT TechnoCross Corporation 50
51.   © NTT TechnoCross Corporation 51
52.   © NTT TechnoCross Corporation 52
53.    © NTT TechnoCross Corporation 53
54.  { "version": 1, "boot": { "fail_closed": true }, "network": { "egress": { "mode": "allow", "allow": ["*.amazonaws.com", "*.kiro.dev", "management.*.kiro.dev", "runtime.*.kiro.dev"] } }, "commands": { "mode": "deny", "deny": ["curl*://*", "wget*://*", "nc *", "ncat *"] } } © NTT TechnoCross Corporation 54
55.   © NTT TechnoCross Corporation 55
56.  © NTT TechnoCross Corporation 56
57.  © NTT TechnoCross Corporation 57
58.  # ~/.kiro/crew/ security_policy.json "mcp": { "mode": "deny", "deny": ["@kirocrew-computer"] } © NTT TechnoCross Corporation 58
59.   © NTT TechnoCross Corporation 59
60.    { "version": 1, "boot": { "fail_closed": true }, "network": { "egress": { "mode": "allow", "allow": ["*.amazonaws.com", "*.kiro.dev", "management.*.kiro.dev", "runtime.*.kiro.dev"] } }, "commands": { "mode": "deny", "deny": ["curl*://*", "wget*://*", "nc *", "ncat *", "ssh *", "scp *", "python -c*", "python3 -c*"] }, "capabilities": { "telemetry": { "enabled": false }, "publish": { "enabled": false }, "theme_install": { "enabled": false } }, "filesystem": { "write": { "mode": "allow", "allow": ["~/work/**", "/tmp/**"] } }, } "mcp": { "mode": "deny", "deny": ["@kirocrew-computer"] } © NTT TechnoCross Corporation 60
61.    © NTT TechnoCross Corporation 61
62. © NTT TechnoCross Corporation 62