Upgrade to Pro — share decks privately, control downloads, hide ads and more …

2023/6/29 AWS re:Inforce 2023 re:Cap Seminar

2023/6/29 AWS re:Inforce 2023 re:Cap Seminar

AWS re:Inforce 2023 re:Cap Seminar - 夜の部 〜セキュリティ最新アップデートを現地の様子とジャパンツアーの魅力と共に振り返る〜 のLT資料です

Masanori Yamaguchi

June 29, 2023
Tweet

More Decks by Masanori Yamaguchi

Other Decks in Technology

Transcript

  1. ݩηΩϡϦςΟΤϯδχΞͷ໨ઢͰݟͨ
    SF*OGPSDF ॳࢀՃϨϙʔτ
    ࢁޱ ਖ਼ಙ .BTBOPSJ:"."(6$)*
    "84SF*OGPSDF SF$BQ4FNJOBS

    View full-size slide

  2. ࢁޱਖ਼ಙ .BTBOPSJ:"."(6$)*

    ϑΥʔδϏδϣϯגࣜձࣾ
    LJOVOPSJ
    +"846(ઍ༿ࢧ෦ॴଐ +"84%":4࣮ߦҕһ௕
    "84"NCBTTBEPS "1/"845PQ&OHJOFFS "1/"--"84$FSUJGJDBUJPOT&OHJOFFST
    "84$PNNVOJUZ)&30 "844BNVSBJ "1"$$PNNVOJUZ"XBSE
    ίϛϡχςΟքͷࡾףԦ
    ೥ ʙ ೥·Ͱɺ αʔόʔɾωοτϫʔΫηΩϡϦςΟ੡඼ͷઃܭɾߏங୲౰ͱͯ͠ɺ
    $IFDL1PJOU੡඼ɺ4OPSUɺ5SJQ8JSFɺ*NQFSWBΛऔΓѻ͍ͬͯ·ͨ͠ɻ

    View full-size slide

  3. SF*OGPSDF Πϕϯτશମ͔Βݟͨॴײ
    $+.PTFTΩʔϊʔτ͔Βड͚औͬͨϝοηʔδ
    ֤ηογϣϯΛ௨ͯ͠ڞ༗͍ͨ͜͠ͱʢ5&".ʣ
    ΞδΣϯμ

    View full-size slide

  4. SF*OGPSDF ࢀՃલͷΠϝʔδ
    ɾSF*OWFOUΑΓ΋ن໛͕খ͘͞ηΩϡϦςΟͷίΞ ͳਓ͕ͨͪू·Δ
    ɾηΩϡϦςΟʹৄ͍͠ਓ޲͚ͳͷͰɺલఏͱͯ͠ٻΊΒΕΔϨϕϧ͕ߴͦ͏
    ɾීஈ͔ΒηΩϡϦςΟʹܞΘ͍ͬͯͳ͍ͱΩϟονΞοϓ͕೉ͦ͠͏
    ɾηΩϡϦςΟʹৄ͘͠ͳ͍ͱɺଞͷࢀՃऀʢओʹ೔ຊਓʣͷํͱͷ
    ίϛϡχέʔγϣϯ΋೉ͦ͠͏
    ཁ໿ɿ SF*OWFOUΑΓલఏ஌ࣝͱ৺ཧతͳࢀՃϋʔυϧ͕ߴͦ͏ͳΠϝʔδ

    View full-size slide

  5. SF*OGPSDF ࢀՃޙͷײ૝
    ΊͬͪΌָ͔ͬͨ͠ʂ࠷ߴͷΠϕϯτମݧʂ
    SF*OGPSDF͸ɺීஈ͔ΒηΩϡϦςΟʹؔΘ͍ͬͯΔΘ͚Ͱ͸ͳ͍ਓɺ
    ηΩϡϦςΟΤϯδχΞͰ͸ͳ͍ਓͦ͜ࢀՃ͢΂͖ΠϕϯτͰ͢ʂ

    View full-size slide

  6. ͳͥͳΒ
    ʮηΩϡϦςΟʹϑΥʔΧε͍ͯ͠ΔΠϕϯτ͔ͩΒηΩϡϦςΟʹৄ͍͠ਓ͕ू·Δʯ
    ͜ͷϕωϑΟοτΛ࠷େݶڗडͰ͖Δ͔Βɻ

    View full-size slide

  7. ໷ͳ໷ͳू·ͬͯσΠϦʔৼΓฦΓΛ͍ͯ͠Δ༷ࢠ
    ʢࣸਅ͸࠷ऴ೔ͷݱ஍଎ใ഑৴෩ܠʣ

    View full-size slide

  8. ηΩϡϦςΟ͕த৺ͷΠϕϯτͰɺηΩϡϦςΟʹؔ͢ΔΠϯϓοτΛड͚ͯɺ
    뱌͖͠Εͳ͍ΠϯϓοτΛηΩϡϦςΟͷεϖγϟϦετͨͪͱձ࿩͢Δ͜ͱͰ
    ࠷୹Ͱࣗ෼ͷ஌ࣝͷछͱͯ͠ఆணͤ͞Δ͜ͱ͕Ͱ͖·ͨ͠ʂ

    View full-size slide

  9. ࠓ೔ɺSF$BQΠϕϯτʹࢀՃ͍ͯ͠Δ͚ͲɺηΩϡϦςΟ͕ຊۀͰ͸ͳ͍ํɺ
    ͥͻདྷ೥ SF*OGPSDF ձ৔Ͱ͓ձ͍͠·͠ΐ͏ʂ

    View full-size slide

  10. SF*OGPSDF Πϕϯτશମ͔Βݟͨॴײ
    $+.PTFTΩʔϊʔτ͔Βड͚औͬͨϝοηʔδ
    ֤ηογϣϯΛ௨ͯ͠ڞ༗͍ͨ͜͠ͱʢ5&".ʣ
    ΞδΣϯμ

    View full-size slide

  11. 4FDVSJUZJTPVUUPQQSJPSJUZ

    View full-size slide

  12. *"."1*ԯϦΫΤετඵ ౸ୡ $+.PTFTLFZOPUFΑΓ

    View full-size slide

  13. SF*OWFOUͷͱ͖͸ ԯϦΫΤετඵ
    SF*OWFOU8FSOFS7PHFMTLFZOPUF

    View full-size slide

  14. ࠷༏ઌͷηΩϡϦςΟɺ"84αʔϏεͷίΞͰ͋Δ*".Ͱମݱ͍ͯ͠Δ
    ʻSF*OWFOU ʙ 8FSOFS7PHMFT LFZOPUFͷҙ༁ʼ
    ɾಉظతͳγεςϜͰ͸ύϑΥʔϚϯεɺػೳ֦ுʹରͯ͠ߴ͍εέʔϥϏϦςΟΛ
    ࣮ݱ͢Δ͜ͱ͸೉͍͠
    ɾඇಉظͰ͋Γૄ݁߹Ͱ͋Δ͜ͱʹΑͬͯɺεέʔϥϒϧ͔ͭܧଓతͳػೳ֦ுΛ
    ࣮ݱͰ͖Δ
    ɾηΩϡϦςΟ͸ΤϯδχΞɾΤϯδχΞʹݶΒͣશһͷ࢓ࣄͰ͋Γɺ
    ηΩϡϦςΟ͸࠷༏ઌࣄ߲ɺͦͯ͠γεςϜ͕ੜ͖ଓ͚ΔݶΓӬԕͰ͋Δ
    ʢ࣋ଓՄೳͳηΩϡϦςΟ͕ͳ͚Ε͹࣮ݱͰ͖ͳ͍͜ͱʣ
    © 2023 ForgeVision, Inc.

    View full-size slide

  15. ͳΊΒ͔Ͱ࣋ଓՄೳͳηΩϡϦςΟ͸ɺͲͷΑ͏ʹ࣮ݱ͢Δͷ͔
    ʻ$+.PTFTδϟύϯπΞʔࢀՃऀ޲͚ಛผηογϣϯͷҙ༁ʼ
    ɾυΩϡϝϯτɺπʔϧ͕ηΩϡϦςΟΛܧଓ͢Δ͜ͱʹ௚݁ͳ΋ͷͰ͸ͳ͍
    ɾηΩϡϦςΟ୲౰͸ϒϩοΩϯάʢʮ/Pʯ͔Β࢝·ΔʣͰ͸ͳ͘ɺ
    ʮ:FT CVUʯʮ:FT BOEʯͳͲ૬ஊΛड͚΍͍͢ঢ়گΛͭ͘Δ
    ɾͳͥͳΒɺձ࿩ΛؚΊͨΞΫγϣϯͷ݁Ռ͔ΒηΩϡϦςΟ͕จԽͱͯ͠
    ͍ࠜͮͯ͘Δ͔ΒͰ͋Δ
    ɾηΩϡϦςΟ୲౰΁૬ஊ͕ू·Δ͜ͱͰϊ΢ϋ΢͕ू·͍͖ͬͯɺ
    ηΩϡϦςΟ୲౰ͱͷձ࿩Λ௨ͯ͡ηΩϡϦςΟ͕޿͕͍ͬͯ͘

    View full-size slide

  16. SF*OGPSDF Πϕϯτશମ͔Βݟͨॴײ
    $+.PTFTΩʔϊʔτ͔Βड͚औͬͨϝοηʔδ
    ֤ηογϣϯΛ௨ͯ͠ڞ༗͍ͨ͜͠ͱʢ5&".ʣ
    ΞδΣϯμ

    View full-size slide

  17. ʮηΩϡϦςΟ͸ςΫϊϩδʔͰͳ͘ਓͱจԽʹґଘʯ
    ɾ$+.PTFTࢯ͕ΩʔϊʔτͰ఻͍͑ͯͨϝοηʔδ
    ɾ"84Ͱ͸ɺϢʔβʔΛγεςϜ͔Βԕ͚͟ΔͨΊʹՄೳͳݶΓࣗಈԽΛ
    ࢖༻͢Δ͜ͱΛਪ঑͍ͯ͠Δ
    ɾͨͩɺ࣮ࡍʹ͸͢΂ͯͷΞΫγϣϯΛࣗಈԽͰ͖ΔΘ͚Ͱ͸ͳ͘ɺ
    Ұ෦ͷૢ࡞Ͱ͸ϢʔβʔʢਓؒʣʹΑΔΞΫηε͕ඞཁʹͳΔ৔߹͕͋
    ɾ͜ͷΑ͏ͳ৔߹ʹɺδϟετΠϯλΠϜΞΫηεʢҰ࣌తͳݖݶঢ֨ΞΫηεʣ͕
    ༻͍ΒΕΔέʔε͕͋Δ
    ʢৗʹΞΫηεͰ͖Δ*".Λ෷͍ग़͢ͷͰ͸ͳ͍ʣ

    View full-size slide

  18. 5FNQPSBSZFMFWBUFEBDDFTTNBOBHFNFOU 5&".

    ɾ"84*".*EFOUJUZ$FOUFSͱ౷߹͞ΕɺϚϧνΞΧ΢ϯτ"84؀ڥ΁ͷ
    δϟετΠϯλΠϜΞΫηεΛ؅ཧ͢Δ044ιϦϡʔγϣϯ
    5FNQPSBSZFMFWBUFEBDDFTTNBOBHFNFOU 5&".

    IUUQTBXTTBNQMFTHJUIVCJPJBNJEFOUJUZDFOUFSUFBN
    (JU)VC
    IUUQTHJUIVCDPNBXTTBNQMFTJBNJEFOUJUZDFOUFSUFBN
    ɾηογϣϯ
    *"..BOBHFUFNQPSBSZBDDFTTUPZPVSFOWJSPONFOUXJUI*".*EFOUJUZ$FOUFS
    -FWFM "EWBODFE
    4FTTJPO5ZQF$IBML5BML

    View full-size slide

  19. 5&".ΞʔΩςΫνϟ

    View full-size slide

  20. ૢ࡞Πϝʔδʢ"84*".*EFOUJUZ$FOUFSʹΞϓϦέʔγϣϯͱͯ͠ઃஔʣ

    View full-size slide

  21. ૢ࡞Πϝʔδʢ5&".ͷ؅ཧը໘ΑΓΞΫηεϦΫΤετΛ࡞੒ʣ

    View full-size slide

  22. ૢ࡞Πϝʔδʢঝೝऀ΁ঝೝґཔ͕ಧ͖ɺঝೝPS٫ԼΛબ୒ʣ

    View full-size slide

  23. ૢ࡞Πϝʔδʢঝೝͨ͠ޙͷҰ࣌ΞΫηεঢ়ଶʣ

    View full-size slide

  24. ૢ࡞ΠϝʔδʢҰ࣌ΞΫηε͕༗ޮͩͱϩάΠϯՄೳͳΞΧ΢ϯτ͕දࣔ͞ΕΔʣ

    View full-size slide

  25. ૢ࡞ΠϝʔδʢҰ࣌ΞΫηεͷظؒൣғ֎Ͱ͸දࣔ͞Εͳ͍ʣ

    View full-size slide

  26. ૢ࡞ΠϝʔδʢҰ࣌ΞΫηεͱඥͮ͘؂ࠪϩά΋֬ೝՄೳʣ

    View full-size slide

  27. 5FNQPSBSZFMFWBUFEBDDFTTNBOBHFNFOU 5&".

    IUUQTBXTTBNQMFTHJUIVCJPJBNJEFOUJUZDFOUFSUFBN
    (JU)VC
    IUUQTHJUIVCDPNBXTTBNQMFTJBNJEFOUJUZDFOUFSUFBN

    View full-size slide

  28. ͝੩ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠ɻ

    View full-size slide