Share
Embed
Transcript
42 slides
-
ܒี @kkmory_ גࣜձࣾαΠόʔΤʔδΣϯτ "*ࣄۀຊ෦ ιϑτΣΞΤϯδχΞ ৽ଔೖࣾ "*ࣄۀຊ෦ʹͯɺίϯϏχͷߪങσʔλΛ༻ͨ͠ࠂ৴ ϓϥοτϑΥʔϜͷ։ൃɾӡ༻Λܦݧɻ ࠓ݄͔Β৽نڠۀϓϩδΣΫτͷ্ཱͪ͛ʹࢀը͠ɺ
%.1ɺࠂ৴ϓϥοτϑΥʔϜΛ։ൃதɻ όοΫΤϯυશൠΛ୲͍ͯ͠Δɻ 👨💻 (P "84 4OPXGMBLFFUDʜ -
ڞ༗Ϟσϧ ηΩϡϦςΟͱίϯϓϥΠΞϯε "84ͱ͓٬༷ͷؒͰڞ༗͞ΕΔͰ͢ɻ͜ͷ ڞ༗Ϟσϧɺ"84͕ϗετΦϖϨʔςΟϯάγεςϜͱԾԽϨΠϠʔ͔Βɺαʔ Ϗε͕ӡ༻͞Ε͍ͯΔࢪઃͷཧతͳηΩϡϦςΟʹࢸΔ·ͰͷཁૉΛ "84͕ӡ༻ɺ ཧɺ͓Αͼ੍ޚ͢Δ͜ͱ͔Βɺ͓٬༷ͷӡ༻্ͷෛ୲Λܰݮ͢ΔͨΊʹཱͪ·͢ɻ ͓٬༷ʹɺήετΦϖϨʔςΟϯάγεςϜ ߋ৽ͱηΩϡϦςΟύονΛؚΉ ɺ
ͦͷଞͷؔ࿈ΞϓϦέʔγϣϯιϑτΣΞɺ͓Αͼ "84͕ఏڙ͢ΔηΩϡϦςΟ άϧʔϓϑΝΠΞΥʔϧͷઃఆʹର͢ΔͱཧΛ୲͍͖ͬͯͨͩ·͢ɻ༻͢Δ αʔϏεɺͦΕΒͷαʔϏεͷ *5ڥͷ౷߹ɺ͓Αͼద༻͞ΕΔ๏ͱن੍ʹΑͬ ͕ͯҟͳΔͨΊɺ͓٬༷બͨ͠αʔϏεΛ৻ॏʹݕ౼͢Δඞཁ͕͋Γ·͢ɻ· ͨɺ͜ͷڞ༗Ϟσϧͷੑ࣭ʹΑͬͯॊೈੑ͕ಘΒΕɺ͓٬༷͕σϓϩΠΛ౷੍Ͱ͖ ·͢ɻҎԼͷਤʹࣔ͢Α͏ʹɺ͜ͷͷ૬ҧ௨ৗΫϥυ lͷz ηΩϡϦςΟɺ͓ ΑͼΫϥυ lʹ͓͚Δz ηΩϡϦςΟͱݺΕ·͢ɻ https://aws.amazon.com/jp/compliance/shared-responsibility-model/ -
ڞ༗Ϟσϧ ηΩϡϦςΟͱίϯϓϥΠΞϯε "84ͱ͓٬༷ͷؒͰڞ༗͞ΕΔͰ͢ɻ͜ͷ ڞ༗Ϟσϧɺ"84͕ϗετΦϖϨʔςΟϯάγεςϜͱԾԽϨΠϠʔ͔Βɺαʔ Ϗε͕ӡ༻͞Ε͍ͯΔࢪઃͷཧతͳηΩϡϦςΟʹࢸΔ·ͰͷཁૉΛ "84͕ӡ༻ɺ ཧɺ͓Αͼ੍ޚ͢Δ͜ͱ͔Βɺ͓٬༷ͷӡ༻্ͷෛ୲Λܰݮ͢ΔͨΊʹཱͪ·͢ɻ ͓٬༷ʹɺήετΦϖϨʔςΟϯάγεςϜ ߋ৽ͱηΩϡϦςΟύονΛؚΉ ɺ
ͦͷଞͷؔ࿈ΞϓϦέʔγϣϯιϑτΣΞɺ͓Αͼ "84͕ఏڙ͢ΔηΩϡϦςΟ άϧʔϓϑΝΠΞΥʔϧͷઃఆʹର͢ΔͱཧΛ୲͍͖ͬͯͨͩ·͢ɻ༻͢Δ αʔϏεɺͦΕΒͷαʔϏεͷ *5ڥͷ౷߹ɺ͓Αͼద༻͞ΕΔ๏ͱن੍ʹΑͬ ͕ͯҟͳΔͨΊɺ͓٬༷બͨ͠αʔϏεΛ৻ॏʹݕ౼͢Δඞཁ͕͋Γ·͢ɻ· ͨɺ͜ͷڞ༗Ϟσϧͷੑ࣭ʹΑͬͯॊೈੑ͕ಘΒΕɺ͓٬༷͕σϓϩΠΛ౷੍Ͱ͖ ·͢ɻҎԼͷਤʹࣔ͢Α͏ʹɺ͜ͷͷ૬ҧ௨ৗΫϥυ lͷz ηΩϡϦςΟɺ͓ ΑͼΫϥυ lʹ͓͚Δz ηΩϡϦςΟͱݺΕ·͢ɻ https://aws.amazon.com/jp/compliance/shared-responsibility-model/ 🤔 -
ڞ༗Ϟσϧ "NB[PO3%4ͳͲͷϚωʔδυαʔϏεɺ "84-BNCEBɺ"NB[PO%ZOBNP%#ͳͲͷαʔόϨεΞʔΩςΫνϟΛ ׆༻ͯ͠αʔϏεΛߏஙͨ͠߹Ͱք͕ҟͳΔ ʲิʳ "NB[PO3%4 ʜ3%#.4࣮ߦڥΛఏڙ͢ΔϚωʔδυαʔϏε "84-BNCEB ʜ'BB4͍ΘΏΔ lαʔόϨεz
%ZOBNP%# ʜLFZWBMVF͓ΑͼυΩϡϝϯτσʔλϞσϧΛαϙʔτ͢Δ /P42-σʔλϕʔε -
ڴҖݕ ڴҖ 🤔🤔🤔 ɾԾ௨՟ϚΠχϯά ɾ$$ΞΫςΟϏςΟ ɾ௨ৗͱҟͳΔϢʔβʔͷڍಈ ɾΠϯελϯεىಈ ɾωοτϫʔΫߏมߋ ɾ௨ৗͱҟͳΔ௨৴ύλʔϯ ɾ௨ৗͱҟͳΔϙʔτ
ɾ௨৴τϥϑΟοΫ BOENPSF ˡ͜ͷลΓΛ͍͍ײ͡ʹݕͯ͘͠ΕΔ αʔϏεͳ͍͔ͳ 🙄 -
ࠪϩά Α͋͘Δ 1$*%44 ཁ݅ γεςϜίϯϙʔωϯτ͓ΑͼΧʔυձһσʔλͷͯ͢ͷΞΫηεΛ ϩάʹه͠ɺࢹ͢Δ͜ͱ ɾ ҟৗٙΘ͍͠׆ಈͷݕग़͓ΑͼɺΠϕϯτͷϑΥϨϯδοΫੳΛ αϙʔτ͢ΔͨΊʹɺࠪϩά͕࣮͞Ε͍ͯΔɻ ɾ
ࠪϩάɺഁյෆਖ਼ͳվ͟Μ͔Βอޢ͞Ε͍ͯΔɻ ɾ ࠪϩάɺҟৗ·ͨٙΘ͍͠׆ಈΛಛఆ͢ΔͨΊʹϨϏϡʔ͞ΕΔɻ ɾ ࠪϩάͷཤྺอ࣋͞Εɺੳʹར༻Ͱ͖Δɻ ɾ ॏཁͳηΩϡϦςΟཧγεςϜͷোΛਝʹݕ͠ɺใࠂ͠ɺରԠ͢Δɻ https://www.pcisecuritystandards.org/document_library/?category=pcidss&document=pci_dss -
ࠪϩά Α͋͘Δ 1$*%44 ཁ݅ γεςϜίϯϙʔωϯτ͓ΑͼΧʔυձһσʔλͷͯ͢ͷΞΫηεΛ ϩάʹه͠ɺࢹ͢Δ͜ͱ ɾ ҟৗٙΘ͍͠׆ಈͷݕग़͓ΑͼɺΠϕϯτͷϑΥϨϯδοΫੳΛ αϙʔτ͢ΔͨΊʹɺࠪϩά͕࣮͞Ε͍ͯΔɻ ɾ
ࠪϩάɺഁյෆਖ਼ͳվ͟Μ͔Βอޢ͞Ε͍ͯΔɻ ɾ ࠪϩάɺҟৗ·ͨٙΘ͍͠׆ಈΛಛఆ͢ΔͨΊʹϨϏϡʔ͞ΕΔɻ ɾ ࠪϩάͷཤྺอ࣋͞Εɺੳʹར༻Ͱ͖Δɻ ɾ ॏཁͳηΩϡϦςΟཧγεςϜͷোΛਝʹݕ͠ɺใࠂ͠ɺରԠ͢Δɻ https://www.pcisecuritystandards.org/document_library/?category=pcidss&document=pci_dss શ෦อ࣋ͨ͠Β"84ͷίετΕ্͕Γ·ͤΜ͔ 🤔 -
ϩάͷίεύྑ͍อଘํ๏ ༧श ֤αʔϏεͷׂ CloudWatch Logs Kinesis Firehose S3 ιʔεʹ͔͔ΘΒͣͯ͢ͷϩάΛΠϕϯτͷͭͷҰ؏ͨ͠ྲྀΕͱͯ࣌ؒ͠ॱʹݟΔ ͜ͱ͕Ͱ͖ɺΫΤϦιʔτɺಛఆͷϑΟʔϧυΛج४ʹͨ͠άϧʔϓԽɺ
μογϡϘʔυͰͷϩάσʔλͷՄࢹԽ͕Մೳ ετϦʔϜσʔλΛड͚ΔαʔϏεɻ ड͚औͬͨετϦʔϜΛɺ4 3FE4IJGUɺ0QFO4FBSDIͳͲͷσʔλετΞ ੳπʔϧʹ৴͢Δɻ ΦϒδΣΫτετϨʔδαʔϏεɻ֨ೲՄೳͳσʔλͷ૯ྔͱΦϒδΣΫτͷແ੍ ݶͳͷͰɺ༰ྔΛؾʹͤͣσʔλΛಥͬࠐΜͰ͓͚Δɻ ετϨʔδΫϥεʢޙड़ʣΛௐ͢Δ͜ͱͰɺظอଘͷࡍͷίετ࠷దԽ͕Մೳɻ -
ϩάͷίεύྑ͍อଘํ๏ Database Computing Security Service CloudWatch Logs Kinesis Firehose S3
S3 Glacier αʔόʔσʔλϕʔεɺηΩϡϦςΟࠪαʔϏεͷϩάΛอ ΞϓϦέʔγϣϯαʔόʔɺσʔλϕʔεͷϩά $MPVE8BUDI-PHTʹूɻ Ұ෦ͷࠪܥͷϩά 4ʹૹΒΕΔɻ -
ϩάͷίεύྑ͍อଘํ๏ Database Computing Security Service CloudWatch Logs Kinesis Firehose S3
S3 Glacier $MPVE8BUDI-PHT͔Β4ʢετϨʔδʣʹϩάσʔλΛΤΫεϙʔτ Կ͔͋ͬͨͱ͖Ҏ֎ʹݟͳ͍Α͏ͳաڈͷϩά อίετ͕͍҆ͱ͜Ζʹஔ͍͓͖͍ͯͨɻ ˞ίετͷݟੵΓࣄલʹͪΌΜͱΔ͜ͱ -
ϩάͷίεύྑ͍อଘํ๏ Database Computing Security Service CloudWatch Logs Kinesis Firehose S3
S3 Glacier ӬଓԽʹదͨ͠ετϨʔδΫϥεͷมߋʢίετݮʣ 4 ɾ64%(#ʢ࠷ॳͷ 5#݄ʣ 4(MBDJFS'MFYJCMF3FUSJFWBM ɾऔΓग़͠ʹίετ͕͔͔Δ͕ɺอίετ͕͍ ɾ64%(# -
༨ஊ ࣮ફ"84θϛ ࣾθϛ੍ͷ͏ͪͷͭ "84θϛࣾͷθϛͷதͰࢀՃਓ͕ଟ͘ɺΫϥεͰຖि׆ൃʹ׆ಈத ίϯςϯπ ɾ࠷৽ใͷΩϟονΞοϓ ɾ"84ೝఆࢿ֨औಘࢧԉʢFMFBSOJOH डݧྉิॿʣ ɾαʔϏεͷಛੑϢʔεέʔεΛཧղ͢ΔߨٛɺϋϯζΦϯ ɾαʔϏεʹ
%FFQ%JWF͢Δߨٛɺٞ ɾ4PMVUJPO"SDIJUFDUʹΑΔϋϯζΦϯʢෆఆظʣ