RAMユーザのパスワード誤入力をSlackに通知させてみた / Tried to notify Slack the wrong password of the RAM user

AliEatersOkinawa Meetup #1 - Alibaba Cloud -
https://alieaters-okinawa.connpass.com/event/125747/
LT：RAMユーザのパスワード誤入力をSlackに通知させてみた

Transcript

1. 3".ϢʔβͷύεϫʔυޡೖྗΛ
   4MBDLʹ௨஌ͤͯ͞Έͨ
   
   "MJ&BUFST0LJOBXB.FFUVQ-5
   ੴ઒ത
   

   View Slide

2. ࣗݾ঺հ
   ੴ઒തʢ͍͔͠ΘͻΖ͠ʣ
   w ৘γεΠϯϑϥ୲౰
   w ɹɹ!QJSPY@
   

   View Slide

3. "MJCBCB$MPVEͷΞΧ΢ϯτΛ࡞ͬͨ
   ࣍͸ɺ௨ৗ࢖༻͢ΔͨΊͷ
   ϢʔβΛ࡞੒͢Δ
   ɹɹɹɹˠ3".Ϣʔβ
   IUUQTCMPHQJSPYEFW
   

   View Slide

4. 3".ͱ͸ʁʁ
   ΋͏ͪΐ͍ߟ͑Δ
   

   View Slide

5. 3".ͱ͸ʁʁ
   w 3FTPVSDF"DDFTT.BOBHFNFOU
   w Ϣʔβ*%ͷ؅ཧͱΞΫηε੍ޚΛ໨తͱͨ͠αʔϏε

   ʢೝূɾೝՄʣ
   w ਌ɿϓϥΠϚϦΞΧ΢ϯτ
   w ࢠɿ3".ϢʔβʢαϒϢʔβͱ΋දݱ͞ΕΔʣ
   w 3".ϩʔϧ
   w 3".άϧʔϓ
   w ϙϦγʔʢݖݶͷηοτʣ
   

   View Slide

6. 3".ϢʔβͷηΩϡϦςΟؔ࿈
   w ίϯιʔϧը໘΁ͷϩάΠϯ
   w ύεϫʔυϙϦγʔ
   w จࣈ਺ɺෳࡶੑɺ༗ޮظؒɺཤྺ؅ཧ
   w ࠶ೖྗճ਺ϙϦγʔ

   ʢنఆͷޡೖྗͰΞΧ΢ϯτϩοΫʣ
   w .'"ઃఆʢ(PPHMF"VUIFOUJDBUPSਪ঑ʣ
   w *1ΞυϨε੍ݶ
   

   View Slide

7. 18ޡೖྗʹΑΔΞΧ΢ϯτϩοΫ
   w ύεϫʔυ࠶ೖྗճ਺ϙϦγʔ
   w ྫʣ࣌ؒͰճࣦഊˠΞΧ΢ϯτϩοΫ
   w ϩοΫͷղআํ๏͸௨Γɻ
   w ࣌ؒɺ଴ͭ
   w ࠶ೖྗՄೳͳճ਺Λ؇࿨ʢճˠճͰϫϯνϟϯʣ
   w ϝΠϯΞΧ΢ϯτͰ3".Ϣʔβͷ18Λมߋ
   

   View Slide

8. *1ΞυϨε੍ݶ
   w ઀ଓݩάϩʔόϧ*1ΞυϨεʹΑΔΞΫηε੍ݶ
   w ෳ਺*1ΞυϨε΍ϨϯδͰͷొ࿥͕Մೳ
   w ϩάΠϯޙͷ*1ΞυϨεมߋʹ΋༗ޮ
   w ஫ҙ఺
   w $-*ʢ"DDFTT,FZʣͰͷΞΫηε͸੍ݶର৅֎
   w ϝΠϯΞΧ΢ϯτ΋੍ݶͷର৅֎
   

   View Slide

9. ҆৺ɾ҆શ3".Ϣʔβ
   

   View Slide

10. Μʁ
    

    View Slide

11. View Slide

12. View Slide

13. ʮϢʔβ໊͕͋ͬͯΔΑʯ
    ͬͯ͜ͱͩΑͶʁʁ
    

    View Slide

14. ؾʹͳͬͨɻɻ
    w ύεϫʔυೖྗՄೳͳ࢒ճ਺ͷදࣔ
    w ΞΧ΢ϯτͷଘࡏ͕όϨͯ͠·͏
    w Χ΢ϯτظؒ͸࣌ؒɺͱ͍͏प஌ͷࣄ࣮
    w ௕࣌ؒʹ෼ׂͯ͠ࢼͤ͹ϩοΫ͞Εͳ͍
    w ύεϫʔυͷޡೖྗ͸௨஌͞Εͳ͍
    w ϩά͸࢒ͤΔ͚Ͳݟʹ͍͔ͳ͖Ό͍͚ͳ͍
    

    View Slide

15. ؾʹͳͬͨɻɻ
    w ύεϫʔυೖྗՄೳͳ࢒ճ਺ͷදࣔ
    w ΞΧ΢ϯτͷଘࡏ͕όϨͯ͠·͏
    w Χ΢ϯτظؒ͸࣌ؒɺͱ͍͏प஌ͷࣄ࣮
    w ௕࣌ؒʹ෼ׂͯ͠ࢼͤ͹ϩοΫ͞Εͳ͍
    w ύεϫʔυͷޡೖྗ͸௨஌͞Εͳ͍
    w ϩά͸࢒ͤΔ͚Ͳݟʹ͍͔ͳ͖Ό͍͚ͳ͍
    ͤΊͯύεϫʔυޡೖྗͷ௨஌͕΄͍͠
    

    View Slide

16. ؾʹͳͬͨɻɻ
    w ύεϫʔυೖྗՄೳͳ࢒ճ਺ͷදࣔ
    w ΞΧ΢ϯτͷଘࡏ͕όϨͯ͠·͏
    w Χ΢ϯτظؒ͸࣌ؒɺͱ͍͏प஌ͷࣄ࣮
    w ௕࣌ؒʹ෼ׂͯ͠ࢼͤ͹ϩοΫ͞Εͳ͍
    w ύεϫʔυͷޡೖྗ͸௨஌͞Εͳ͍
    w ϩά͸࢒ͤΔ͚Ͳݟʹ͍͔ͳ͖Ό͍͚ͳ͍
    ͤΊͯύεϫʔυޡೖྗͷ௨஌͕΄͍͠
    ʢ΄Μͱ͸440͍͚ͨ͠Ͳࠓճ͸௨஌·Ͱɻʣ
    

    View Slide

17. ύεϫʔυޡೖྗͷ௨஌
    w -PH4FSWJDFΛ࢖͑͹͍͍Β͍͠
    IUUQTXXXTCDMPVEDPKQFOUSZMPH@TFSWJDF@FNBJM@OPUJpDBUJPO
    

    View Slide

18. -PH4FSWJDF
    w "MJCBCB$MPVEͷ֤छαʔϏε΍Ϧιʔεͷϩάऩू

    ʢݸผΠϯϙʔτ΋Մೳʣɺӡ༻؅ཧɻ
    w σʔλ΢ΣΞϋ΢εɺϦΞϧλΠϜ෼ੳɻ
    

    View Slide

19. ύεϫʔυޡೖྗͷ௨஌
    w ϒϩά͸ϝʔϧͰͷ௨஌ํ๏ͷ঺հͩͬͨ
    w ௨஌ઌ͕"MJCBCB$MPVEͷϝΠϯΞΧ΢ϯτ࡞੒࣌ʹ

    ొ࿥ͨ͠ϝʔϧΞυϨεʢݻఆʣ

    
    w ௨஌಺༰ʢΧελϜʣ͕ݻఆͷจࣈྻ
    

    View Slide

20. ύεϫʔυޡೖྗͷ௨஌
    w ϒϩά͸ϝʔϧͰͷ௨஌ํ๏ͷ঺հͩͬͨ
    w ௨஌ઌ͕"MJCBCB$MPVEͷϝΠϯΞΧ΢ϯτ࡞੒࣌ʹ

    ొ࿥ͨ͠ϝʔϧΞυϨεʢݻఆʣ

    ˠ4MBDLʹ௨஌͕΄͍͠ͳʔ
    w ௨஌಺༰ʢΧελϜʣ͕ݻఆͷจࣈྻ

    ˠର৅ͷΞΧ΢ϯτ໊΍઀ଓݩ*1ΞυϨε΋

    ͦͷ··ݟ͍ͨͳʔ
    

    View Slide

21. ύεϫʔυޡೖྗͷ௨஌
    w -PH4FSWJDFͷ௨஌ɺ8FC)PPL͕࢖͑Δ΍Μ
    w 8FC)PPL%JOH5BMLɿ"MJCBCBͷνʔϜίϥϘΞϓϦ%JOH5BML༻
    w 8FC)PPL$VTUPNɿˢҎ֎ͷ൚༻తͳ8FC)PPL௨஌
    w ௨஌ɹɹɹɹɹɹɹɿϝʔϧͰ௨஌
    

    View Slide

22. Incoming
    Webhook
    8FC)PPL$VTUPN
    4MBDL௨஌·ͰͷྲྀΕ
    RAM Action Trail Log Service
    "1*ૢ࡞ͷه࿥
    ίϯιʔϧϩάΠϯͷ
    18ΛΫϥοΩϯάʢࣦഊʣ
    ϩάసૹ
    ఆظΫΤϦ
    ৚݅ϚονͰ௨஌
    

    View Slide

23. -PH4FSWJDFͷը໘
    ϩά
    ΫΤϦ
    ΞϥʔϜొ࿥
    

    View Slide

24. -PH4FSWJDFͷΫΤϦ
    w ৘ใͷநग़ํ๏͕ಠಛɻ
    w छྨͷΫΤϦΛ૊Έ߹ΘͤΔɻʢݕࡧͱ෼ੳʣ
    w TFBSDIRVFSZɿϩάͷϑΟϧλϦϯά
    w TRMRVFSZɿϑΟϧλϦϯάޙͷϩάʹ42-
    w ͦΕͧΕͷΫΤϦΛ|Ͱ۠੾Δ
    

    View Slide

25. 8FC)PPLʢ$VTUPNʣͷઃఆ
    ᶃ τϦΨʔ৚݅
    w ࢉज़ԋࢉࢠɺൺֱԋࢉࢠͰ৚݅Λઃఆ
    w ྫɿDPVOU
    ᶄ ௨஌ϦΫΤετ
    w ϦΫΤετ63-ɺϝιουʢࠓճ͸1045ʣ
    w ϦΫΤετ಺༰ʢΫΤϦ݁ՌΛม਺Ͱ౉ͤΔʣ
    w ྫɿ\ʠUFYUʡʠ\3FTVMUT<>3BX3FTVMUT"T,W^^
    

    View Slide

26. -PH4FSWJDFͰϋϚͬͨʜ
    w ϦΫΤετઃఆʢ௨஌಺༰ʣΛม͑ͨΒ

    ͳ͔ͥτϦΨʔ͕ώοτ͠ͳ͘ͳΔɻɻ
    w Τϥʔɿ"MFSUDPOEJUJPOOPUNFU
    

    View Slide

27. -PH4FSWJDFͰϋϚͬͨʜ
    w ϦΫΤετઃఆʢ௨஌಺༰ʣΛม͑ͨΒ

    ͳ͔ͥτϦΨʔ͕ώοτ͠ͳ͘ͳΔɻɻ
    w Τϥʔɿ"MFSUDPOEJUJPOOPUNFU
    w ಉ͡ઃఆͰ΋ɺ૝ఆ௨Γಈ࡞͢Δͱ͖ͱ

    ·ͨ΋΍τϦΨʔʹώοτ͠ͳ͍͕࣌͋Δɻɻ
    

    View Slide

28. -PH4FSWJDFͰϋϚͬͨʜ
    w ϦΫΤετઃఆʢ௨஌಺༰ʣΛม͑ͨΒ

    ͳ͔ͥτϦΨʔ͕ώοτ͠ͳ͘ͳΔɻɻ
    w Τϥʔɿ"MFSUDPOEJUJPOOPUNFU
    w ಉ͡ઃఆͰ΋ɺ૝ఆ௨Γಈ࡞͢Δͱ͖ͱ

    ·ͨ΋΍τϦΨʔʹώοτ͠ͳ͍͕࣌͋Δɻɻ
    w ౦ژϦʔδϣϯͱதࠃͷϦʔδϣϯͰ

    ڍಈ͕ҧ͏ʁʁʁͱ͔͍ٙͩͨ͠ɻɻ
    

    View Slide

29. ͨͿΜ͜Ε͕ݪҼͩͬͨᶃ
    w ʮݕࡧظؒʯʮݕࡧִؒʯͷઃఆΛ෼ˠ෼ʹ
    Ԇ͹͢ͱɺ҆ఆͯ͠௨஌͞ΕΔΑ͏ʹͳͬͨɻ
    

    View Slide

30. ͨͿΜ͜Ε͕ݪҼͩͬͨᶄ
    w ςϯϓϨʔτม਺Λʮ͜ΕΠέΔΜ͡ΌͶʁʯͳ
    ਫ਼ਆͰѻ͍ͬͯͨɻ
    w \3FTVMUT<>'JSF3FTVMU^Λ1045ͯ͠ΈΔͱ
    w ௨஌ʢϝʔϧʣɿड৴Ͱ͖ͨ
    w 8FC)PPLʢ$VTUPNʣɿ/(ʢૹ৴΋ͯ͠ͳ͍ʁʣ
    

    View Slide

31. 4MBDLʹ௨஌੒ޭ
    w ΫΤϦͷ಺༰Λ4MBDLͰ͖ͨʂʂ
    wίϯιʔϧ΁ͷ઀ଓݩͷάϩʔόϧ*1ΞυϨε
    wΞΧ΢ϯτ໊ʢ3".Ϣʔβ໊ʣ
    w18ೖྗͷࣦഊճ਺
    

    View Slide

32. ·ͱΊ
    w ύεϫʔυͰηΩϡϦςΟΛ୲อ͢Δ࣌୅Ͱ͸
    ͳ͘ͳ͖ͬͯͨࠓ೔͜ͷࠒɺ
    w ؤுͬͯύεϫʔυޡೖྗͷ௨஌Λ͢Δͷ΋

    ͍͍͚ΕͲɺ
    w .'"Λඞਢʹͨ͠Γɺ
    w 440Λਪਐ͢Δํ͕ݐઃతͳͷͰɺ
    w ࣍ճ͸ͦͬͪΛؤுΔɻ
    

    View Slide