Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
vuls-jp_ec2-vuls-config_ja
Shuichi Ohsawa
September 26, 2016
Programming
0
840
vuls-jp_ec2-vuls-config_ja
Shuichi Ohsawa
September 26, 2016
Tweet
Share
More Decks by Shuichi Ohsawa
See All by Shuichi Ohsawa
ohsawa0515
0
520
ohsawa0515
0
1.8k
ohsawa0515
3
440
ohsawa0515
0
410
ohsawa0515
1
2.4k
ohsawa0515
9
2.5k
ohsawa0515
0
980
ohsawa0515
0
660
ohsawa0515
0
220
Other Decks in Programming
See All in Programming
bells17
0
350
rarous
0
170
williln
0
210
legalforce
PRO
1
680
temoki
2
210
oleindesign
1
200
manfredsteyer
PRO
0
230
s103ng
0
240
legalforce
PRO
0
600
kentatada
0
390
pirosikick
4
930
dbrumann
0
100
Featured
See All Featured
stephaniewalter
260
11k
sachag
446
36k
roundedbygravity
242
21k
destraynor
223
47k
bkeepers
408
58k
vanstee
117
4.8k
tanoku
258
24k
notwaldorf
15
1.8k
lynnandtonic
272
16k
rocio
155
11k
mthomps
39
2.3k
cromwellryan
103
6.1k
Transcript
EC2ͷVulsεΩϟϯΛ΄Μͷগ͠ศར͢Δπʔϧ ʮec2-vuls-configʯ VulsࡇΓ #1 @ohsawa0515
ࣗݾհ େᖒलҰ (@ohsawa0515) GitHub: https://github.com/ohsawa0515 Blog: http://blog.jicoman.info/
ͭ͘Γ·ͨ͠ • ec2-vuls-config • https://github.com/ohsawa0515/ec2-vuls- config • Amazon EC2ΠϯελϯεͷλάΛݟͯઃఆ ϑΝΠϧ(config.toml)Λॻ͖͑Δ
ͳͥͭͬͨ͘ͷ͔ • Πϯελϯε(αʔό)͕ৗʹมΘΓଓ͚͍ͯΔڥʹ͓͍ͯ εΩϟϯରৗʹมΘΓଓ͚͍ͯΔ e.g. ΦʔτεέʔϦϯάɺ৽نαʔόߏஙɺআ etc • ৗʹεΩϟϯରΛߋ৽(ઃఆϑΝΠϧΛߋ৽)͢Δͷେม •
ͯ͢ͷαʔόΛεΩϟϯ͢Δඞཁͳ͍ • ಉ͡ߏͷαʔό(e.g. Webαʔό)͕ෳ͋ΔͳΒͦͷͷ1͚ͩΛ εΩϟϯ͢Εྑ͍ͣ(ಛʹChef, AnsibleͰߏͨ͠߹) • Amazon Inspector ͷΑ͏ʹλά͚ͩΛݟͯࣗಈతʹεΩϟϯରΛݟ͚ͭΔ Έ͕ཉ͔ͬͨ͠
Πϯετʔϧ&ઃఆ • $ go get -u github.com/ohsawa0515/ec2-vuls-config • $ export
AWS_ACCESS_KEY_ID=ACCESS_KEY_ID • $ export AWS_SECRET_ACCESS_KEY=ECRET_ACCESS_KEY • $ export AWS_REGION=us-east-1 • EC2Πϯελϯεʹ࣍ͷλάΛઃఆ ɾ Nameλά: αʔό໊ e.g. web-server-1 ɾ εΩϟϯλά: εΩϟϯରʹࢦఆ͍ͨ͠λά e.g. Vuls-Scan:True
࣮ߦ • ݩͱͳΔઃఆϑΝΠϧΛ༻ҙ͢Δ • ࣮ߦ • $ ec2-vuls-config —config path/to/config.toml
࣮ߦ݁Ռ(ྫ) • ݅ʹ߹ͬͨEC2ΠϯελϯεใΛઃఆϑΝΠϧʹॻ͖͑ͯ͘ΕΔ • σϑΥϧτͰɺλάՃ͑ͯɺLinuxαʔό & ىಈத(εςʔλε=running)͕ର
·ͱΊ • ec2-vuls-config ͱ͍͏ͪΐͬͱͨ͠πʔϧΛͭ͘Γ·ͨ͠ • EC2λάΛઃఆ͢Δ͚ͩͰεΩϟϯରΛઃఆͰ͖ΔͷͰ (ࣗ)ॏๅ͍ͯ͠·͢ • ·ͩ·ͩػೳͱͯ͠Γͳ͍ͱࢥ͍·͕͢ ʮྑ͍ͳʂʯͱࢥͬͨΒGitHubͷελʔΛ͓ئ͍͠·͢ʂ
• https://github.com/ohsawa0515/ec2-vuls-config