Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
スケーラブルなセキュリティ監視基盤の作り方 /techconf2019-mizutani
Masayoshi Mizutani
February 27, 2019
Technology
3
1.9k
スケーラブルなセキュリティ監視基盤の作り方 /techconf2019-mizutani
Masayoshi Mizutani
February 27, 2019
Tweet
Share
More Decks by Masayoshi Mizutani
See All by Masayoshi Mizutani
mizutani
0
330
mizutani
0
480
mizutani
4
1.9k
mizutani
1
290
mizutani
1
3.8k
mizutani
4
1.7k
mizutani
3
2.5k
mizutani
3
1.6k
mizutani
0
300
Other Decks in Technology
See All in Technology
con_mame
4
2k
hecateball
1
12k
shirayanagiryuji
1
400
shimacos
2
310
ytaka23
0
430
awsbelaraby
2
170
tdys13
4
3.4k
satotakeshi
2
420
ocise
1
1.3k
shotakashihara
1
1.3k
110y
3
690
y0hgi
1
370
Featured
See All Featured
mojombo
358
62k
qrush
285
18k
michaelherold
225
8.5k
phodgson
87
3.9k
trishagee
20
2k
malarkey
192
8.5k
lynnandtonic
270
16k
bryan
100
11k
maltzj
500
36k
samlambert
237
9.9k
holman
461
280k
lauravandoore
437
28k
Transcript
ਫ୩ ਖ਼ܚ ٕज़෦ ηΩϡϦςΟάϧʔϓ εέʔϥϒϧͳηΩϡϦςΟ ࢹج൫ͷ࡞Γํ
ࣗݾհɿਫ୩ਖ਼ܚ (@m_mizutani) 2 w લ৬ w ใηΩϡϦςΟؔ࿈ͷݚڀ։ൃ w ηΩϡϦςΟΦϖϨʔγϣϯηϯλʔͷΞφϦετ w
݄ΫοΫύουೖࣾ w ٕज़෦ηΩϡϦςΟάϧʔϓάϧʔϓ w ηΩϡϦςΟࢹΛத৺ʹηΩϡϦςΟؔ࿈ۀʹैࣄ
ηΩϡϦςΟ ࢹͯ͠·͔͢ʁ
ηΩϡϦςΟରࡦͷશମ૾ 4 ޚ ݕग़ ରԠ ੬ऑੑΛվળ͢Δ ෆཁͳαʔϏεΛด͡Δ ݖݶͷ੍ݶ ৵ೖ͞Εͯ͠·ͬͨࠟͷൃݟ ෆਖ਼ͳαʔϏεར༻ͷൃݟ
ΠϯγσϯτϨεϙϯε վળͷੳ
ηΩϡϦςΟରࡦͷશମ૾ 5 ޚ ݕग़ ରԠ ੬ऑੑΛվળ͢Δ ෆཁͳαʔϏεΛด͡Δ ݖݶͷ੍ݶ ৵ೖ͞Εͯ͠·ͬͨࠟͷൃݟ ෆਖ਼ͳαʔϏεར༻ͷൃݟ
ΠϯγσϯτϨεϙϯε վળͷੳ ࢹ
ͳͥࢹ͢Δͷ͔ 6 w ޚͷઌΛߏ͑Δඞཁ͕͋Δ w શͳޚ͋Γ͑ͳ͍ w ݕग़ͷํ͕ར༻ऀͷෛ୲͕গͳ͍ w աͳޚ੍͕ଟ͘ͳΓϢʔβϏϦςΟΛ્͢Δ
w ޚޡͬͯಈ࡞ͨ͠߹ͷӨڹେ͖͍
ຊͷτϐοΫɿεέʔϥϒϧͳࢹ 7 w εέʔϥϒϧͱ w αʔϏεͷن͕େ͖͘ͳͬͯରԠͰ͖Δ w ࢹ͢Δର͕૿͑ͯରԠͰ͖Δ w Կ͕ࠔΔͷʁ
w ෳαʔϏεͱͷ݁߹ w σʔλྲྀྔͷ૿Ճ w Ξϥʔτʢޡݕग़ؚΉʣͷରԠ ࠓ͜͜ʹ
ηΩϡϦςΟࢹʹ͓͚Δফ 8 Ξϥʔτͷରʹͳͬͨ1$ ΛௐͯΈ͚ͨͲ݁ہԿ͕͋ͬ ͨͷ͔Α͘Θ͔Βͳ͔ͬͨʜ 8FCࠂͷεΫϦϓτ͕ ߈ܸͱఆ͞Ε͍ͯͨʜ ϦϞʔτϫʔΫͷࣾһͷ ΞΫηε͕ෆਖ਼ϩάΠϯ ͷஹީͱͯ͠ݕग़͞Εͨʜ
ϝʔϧαʔό͔Βͷ%/4 ௨৴͕ෆਖ਼ͳ׆ಈͱఆ ͞Ε͍ͯͨʜ ͭΒ͍ Ξϥʔτʹग़͖ͯͨαʔϏ εͷ༰͕Α͘Θ͔Βͳ͍ɻ Ͳ͏அ͢Εʜ
ফΛແͨ͘͢Ίʹ 9 w ݕͷϧʔϧͰෆཁͳΞϥʔτΛআ֎͢ΔΑ͏ௐ͢Εྑ͍͕ɺ w ʮͪΌΜͱௐޙͷϧʔϧ͕ಈ͔͘Θ͔Βͳ͍ʜʯ w ʮෆཁͱஅ͢ΔϩδοΫΛϧʔϧʹॻ͚ͳ͍ʜʯ w ʮෆཁͱஅ͢ΔͨΊʹՃͰใΛूΊͳ͍ͱແཧʜʯ
Security as Code 10
Security as Code ʢϩάऩूͱੳʣ 11 w ݕʹؔΘΔॲཧΛίʔυԽ͢Δ͜ͱͰղܾ w มߋޙͷϧʔϧΛςετՄೳ w
Ξϥʔτఆ݅ͷߴ͍هड़ྗ w ࣗಈతͳՃσʔλऩूʹΑΔলྗԽ w όʔδϣϯཧʹΑΔอकੑͷ্
3rd Party Services ΞϥʔτॲཧͷύΠϓϥΠϯ 12 S3 ϩάσʔλ Ξϥʔτͷݕग़ ؔ࿈ใͷऩू ΞϥʔτͷධՁ
ରԠঢ়گͷڞ༗ ؔ࿈ใͷू Ξϥʔτͷ௨ 3rd Party Services Internal Data Source
Ξϥʔτͷݕग़ 13 w 4ʹసૹ͞Εͨϩά͔ΒΞϥʔτ Λݕग़͢ΔͨΊͷॲཧ w ηΩϡϦςΟϓϩμΫτ͕Ξϥʔτ ͱͯ͠ൃใͨ͠ϩάͷநग़ w ͦͷଞɺϩάͰෆ৹ͳߦಈ͕͋ͬͨ
߹ʹΞϥʔτͱͯ͠ൃใ Ξϥʔτݕग़-BNCEB ʢݕग़ϧʔϧʣ োൃੜ࣌ʹॲཧ࠶։Λ ༰қʹ͢ΔͨΊ,JOFTJT %BUB4USFBNΛར༻ ฒྻॲཧͷͨΊͷ %JTQBUDIFS S3 Bucket SNS S3 Bucket S3 Bucket SNS SNS Lambda Kinesis data stream Lambda Lambda Lambda Lambda SNS
͜͜ʹ۩ମྫ 14 ಛఆͷυϝΠϯ໊ΛؚΉ63-͔ͭɺ ಛఆͷݕ໊Ͱ͋Εޡݕͱఆ͢Δ ಛఆͷαΠτͰ0QFO44-ؔ࿈ͷ%P4͕ޡݕग़͞Εͯ͠·͏έʔε
15 ಛఆͷλάΛͭΠϯελϯεͰ͋Γɺ ಛఆͷυϝΠϯ໊ʹؔ͢ΔൃใͰ͋Εޡݕͱఆ͢Δ ϝʔϧαʔό͔Βෆਖ਼ར༻υϝΠϯͷ%/4ΫΤϦ͕ૹ৴͞ΕΔέʔε
Ξϥʔτؔ࿈ใͷऩू 16 w ֎෦͔Βͷऩू w ྫʣϚϧΣΞؔ࿈ใαΠτ w ྫʣαϯυϘοΫεαΠτ w ෦͔Βͷऩू
w ྫʣؔ࿈Ϣʔβͷߦಈϩά w ྫʣΞΫηεݩσόΠεͷใ Ξϥʔτʹؔ࿈ͨ͠ϩά ͷ౸ணΛͭͨΊͷ%FMBZ ใऩूͷ݁ՌΛ ͭͨΊͷ%FMBZ Ξϥʔτݕͷ௨ ใऩूͷ݁ՌΛ ͭͨΊʹ%FMBZ ใऩू -BNCEB Lambda Lambda Lambda Lambda Lambda Lambda DynamoDB SNS SNS Step Function Step Function
DynamoDB Step Function Lambda Lambda Lambda (1) Invoke (2) Invoke
(3) Invoke ΞϥʔτͷධՁ 17 w Ξϥʔτʴऩूͨؔ͠࿈ใ͔ΒϦ εΫධՁͯ݁͠ՌΛ௨ w ෳͷใΛΈ߹ΘͤΔ͜ͱͰΑ Γਫ਼ີͳධՁ͕Մೳ w ίʔυͱͯ͠هड़͓ͯ͘͜͠ͱͰ୭ ͕ͲͷΑ͏ͳҙਤͰϩδοΫ͕मਖ਼ ͞Ε͔ͨΛѲ͍͢͠ ௨ͳͲ ϦεΫධՁ -BNCEB ใऩूޙʹൃಈ ؔ࿈ใΛूੵ ؔ࿈ใΛϚʔδ ධՁྃͷ௨
͜͜ʹ۩ମྫ 18 ීஈͱҟͳΔΞΫηεΛݕग़͢ΔΞϥʔτ͔ͭɺ ΫοΫύουॴ༗ͷσόΠεͰ͋ͬͨ߹ɺڴҖແ͠ͱධՁ͢Δ ௨ৗͱҟͳΔωοτϫʔΫɾϢʔβ͔ΒͷΞΫηεΛݕग़ͨ͠ΞϥʔτͷධՁ
·ͱΊ 19 w αʔϏεͷنछྨΛ૿͢ʹ͋ͨΓɺηΩϡϦςΟࢹσʔ λͷछྨɾྲྀྔҎ֎ʹΞϥʔτରԠͷεέʔϥϏϦςΟΛߟ͑ͳ͍ ͱͳΒͳ͍ w ΞϥʔτݕɾੳɾධՁͷॲཧΛίʔυԽ͢Δ͜ͱʹΑͬͯɺ୲ ऀͷෛՙΛܰݮ͠ͳ͕ΒࢹۀΛܧଓͰ͖Δ
Thank you!!