Upgrade to Pro — share decks privately, control downloads, hide ads and more …

RAMユーザのパスワード誤入力をSlackに通知させてみた / Tried to notify Slack the wrong password of the RAM user

RAMユーザのパスワード誤入力をSlackに通知させてみた / Tried to notify Slack the wrong password of the RAM user

AliEatersOkinawa Meetup #1 - Alibaba Cloud -
https://alieaters-okinawa.connpass.com/event/125747/
LT:RAMユーザのパスワード誤入力をSlackに通知させてみた

石川 博

April 24, 2019
Tweet

More Decks by 石川 博

Other Decks in Technology

Transcript

  1. 3".ϢʔβͷύεϫʔυޡೖྗΛ
    4MBDLʹ௨஌ͤͯ͞Έͨ

    "MJ&BUFST0LJOBXB.FFUVQ-5
    ੴ઒ത

    View Slide

  2. ࣗݾ঺հ
    ੴ઒തʢ͍͔͠ΘͻΖ͠ʣ
    w ৘γεΠϯϑϥ୲౰
    w ɹɹ!QJSPY@

    View Slide

  3. "MJCBCB$MPVEͷΞΧ΢ϯτΛ࡞ͬͨ
    ࣍͸ɺ௨ৗ࢖༻͢ΔͨΊͷ
    ϢʔβΛ࡞੒͢Δ
    ɹɹɹɹˠ3".Ϣʔβ
    IUUQTCMPHQJSPYEFW

    View Slide

  4. 3".ͱ͸ʁʁ
    ΋͏ͪΐ͍ߟ͑Δ

    View Slide

  5. 3".ͱ͸ʁʁ
    w 3FTPVSDF"DDFTT.BOBHFNFOU
    w Ϣʔβ*%ͷ؅ཧͱΞΫηε੍ޚΛ໨తͱͨ͠αʔϏε

    ʢೝূɾೝՄʣ
    w ਌ɿϓϥΠϚϦΞΧ΢ϯτ
    w ࢠɿ3".ϢʔβʢαϒϢʔβͱ΋දݱ͞ΕΔʣ
    w 3".ϩʔϧ
    w 3".άϧʔϓ
    w ϙϦγʔʢݖݶͷηοτʣ

    View Slide

  6. 3".ϢʔβͷηΩϡϦςΟؔ࿈
    w ίϯιʔϧը໘΁ͷϩάΠϯ
    w ύεϫʔυϙϦγʔ
    w จࣈ਺ɺෳࡶੑɺ༗ޮظؒɺཤྺ؅ཧ
    w ࠶ೖྗճ਺ϙϦγʔ

    ʢنఆͷޡೖྗͰΞΧ΢ϯτϩοΫʣ
    w .'"ઃఆʢ(PPHMF"VUIFOUJDBUPSਪ঑ʣ
    w *1ΞυϨε੍ݶ

    View Slide

  7. 18ޡೖྗʹΑΔΞΧ΢ϯτϩοΫ
    w ύεϫʔυ࠶ೖྗճ਺ϙϦγʔ
    w ྫʣ࣌ؒͰճࣦഊˠΞΧ΢ϯτϩοΫ
    w ϩοΫͷղআํ๏͸௨Γɻ
    w ࣌ؒɺ଴ͭ
    w ࠶ೖྗՄೳͳճ਺Λ؇࿨ʢճˠճͰϫϯνϟϯʣ
    w ϝΠϯΞΧ΢ϯτͰ3".Ϣʔβͷ18Λมߋ

    View Slide

  8. *1ΞυϨε੍ݶ
    w ઀ଓݩάϩʔόϧ*1ΞυϨεʹΑΔΞΫηε੍ݶ
    w ෳ਺*1ΞυϨε΍ϨϯδͰͷొ࿥͕Մೳ
    w ϩάΠϯޙͷ*1ΞυϨεมߋʹ΋༗ޮ
    w ஫ҙ఺
    w $-*ʢ"DDFTT,FZʣͰͷΞΫηε͸੍ݶର৅֎
    w ϝΠϯΞΧ΢ϯτ΋੍ݶͷର৅֎

    View Slide

  9. ҆৺ɾ҆શ3".Ϣʔβ

    View Slide

  10. Μʁ

    View Slide

  11. View Slide

  12. View Slide

  13. ʮϢʔβ໊͕͋ͬͯΔΑʯ
    ͬͯ͜ͱͩΑͶʁʁ

    View Slide

  14. ؾʹͳͬͨɻɻ
    w ύεϫʔυೖྗՄೳͳ࢒ճ਺ͷදࣔ
    w ΞΧ΢ϯτͷଘࡏ͕όϨͯ͠·͏
    w Χ΢ϯτظؒ͸࣌ؒɺͱ͍͏प஌ͷࣄ࣮
    w ௕࣌ؒʹ෼ׂͯ͠ࢼͤ͹ϩοΫ͞Εͳ͍
    w ύεϫʔυͷޡೖྗ͸௨஌͞Εͳ͍
    w ϩά͸࢒ͤΔ͚Ͳݟʹ͍͔ͳ͖Ό͍͚ͳ͍

    View Slide

  15. ؾʹͳͬͨɻɻ
    w ύεϫʔυೖྗՄೳͳ࢒ճ਺ͷදࣔ
    w ΞΧ΢ϯτͷଘࡏ͕όϨͯ͠·͏
    w Χ΢ϯτظؒ͸࣌ؒɺͱ͍͏प஌ͷࣄ࣮
    w ௕࣌ؒʹ෼ׂͯ͠ࢼͤ͹ϩοΫ͞Εͳ͍
    w ύεϫʔυͷޡೖྗ͸௨஌͞Εͳ͍
    w ϩά͸࢒ͤΔ͚Ͳݟʹ͍͔ͳ͖Ό͍͚ͳ͍
    ͤΊͯύεϫʔυޡೖྗͷ௨஌͕΄͍͠

    View Slide

  16. ؾʹͳͬͨɻɻ
    w ύεϫʔυೖྗՄೳͳ࢒ճ਺ͷදࣔ
    w ΞΧ΢ϯτͷଘࡏ͕όϨͯ͠·͏
    w Χ΢ϯτظؒ͸࣌ؒɺͱ͍͏प஌ͷࣄ࣮
    w ௕࣌ؒʹ෼ׂͯ͠ࢼͤ͹ϩοΫ͞Εͳ͍
    w ύεϫʔυͷޡೖྗ͸௨஌͞Εͳ͍
    w ϩά͸࢒ͤΔ͚Ͳݟʹ͍͔ͳ͖Ό͍͚ͳ͍
    ͤΊͯύεϫʔυޡೖྗͷ௨஌͕΄͍͠
    ʢ΄Μͱ͸440͍͚ͨ͠Ͳࠓճ͸௨஌·Ͱɻʣ

    View Slide

  17. ύεϫʔυޡೖྗͷ௨஌
    w -PH4FSWJDFΛ࢖͑͹͍͍Β͍͠
    IUUQTXXXTCDMPVEDPKQFOUSZMPH@TFSWJDF@FNBJM@OPUJpDBUJPO

    View Slide

  18. -PH4FSWJDF
    w "MJCBCB$MPVEͷ֤छαʔϏε΍Ϧιʔεͷϩάऩू

    ʢݸผΠϯϙʔτ΋Մೳʣɺӡ༻؅ཧɻ
    w σʔλ΢ΣΞϋ΢εɺϦΞϧλΠϜ෼ੳɻ

    View Slide

  19. ύεϫʔυޡೖྗͷ௨஌
    w ϒϩά͸ϝʔϧͰͷ௨஌ํ๏ͷ঺հͩͬͨ
    w ௨஌ઌ͕"MJCBCB$MPVEͷϝΠϯΞΧ΢ϯτ࡞੒࣌ʹ

    ొ࿥ͨ͠ϝʔϧΞυϨεʢݻఆʣ


    w ௨஌಺༰ʢΧελϜʣ͕ݻఆͷจࣈྻ

    View Slide

  20. ύεϫʔυޡೖྗͷ௨஌
    w ϒϩά͸ϝʔϧͰͷ௨஌ํ๏ͷ঺հͩͬͨ
    w ௨஌ઌ͕"MJCBCB$MPVEͷϝΠϯΞΧ΢ϯτ࡞੒࣌ʹ

    ొ࿥ͨ͠ϝʔϧΞυϨεʢݻఆʣ

    ˠ4MBDLʹ௨஌͕΄͍͠ͳʔ
    w ௨஌಺༰ʢΧελϜʣ͕ݻఆͷจࣈྻ

    ˠର৅ͷΞΧ΢ϯτ໊΍઀ଓݩ*1ΞυϨε΋

    ͦͷ··ݟ͍ͨͳʔ

    View Slide

  21. ύεϫʔυޡೖྗͷ௨஌
    w -PH4FSWJDFͷ௨஌ɺ8FC)PPL͕࢖͑Δ΍Μ
    w 8FC)PPL%JOH5BMLɿ"MJCBCBͷνʔϜίϥϘΞϓϦ%JOH5BML༻
    w 8FC)PPL$VTUPNɿˢҎ֎ͷ൚༻తͳ8FC)PPL௨஌
    w ௨஌ɹɹɹɹɹɹɹɿϝʔϧͰ௨஌

    View Slide

  22. Incoming
    Webhook
    8FC)PPL$VTUPN
    4MBDL௨஌·ͰͷྲྀΕ
    RAM Action Trail Log Service
    "1*ૢ࡞ͷه࿥
    ίϯιʔϧϩάΠϯͷ
    18ΛΫϥοΩϯάʢࣦഊʣ
    ϩάసૹ
    ఆظΫΤϦ
    ৚݅ϚονͰ௨஌

    View Slide

  23. -PH4FSWJDFͷը໘
    ϩά
    ΫΤϦ
    ΞϥʔϜొ࿥

    View Slide

  24. -PH4FSWJDFͷΫΤϦ
    w ৘ใͷநग़ํ๏͕ಠಛɻ
    w छྨͷΫΤϦΛ૊Έ߹ΘͤΔɻʢݕࡧͱ෼ੳʣ
    w TFBSDIRVFSZɿϩάͷϑΟϧλϦϯά
    w TRMRVFSZɿϑΟϧλϦϯάޙͷϩάʹ42-
    w ͦΕͧΕͷΫΤϦΛ|Ͱ۠੾Δ

    View Slide

  25. 8FC)PPLʢ$VTUPNʣͷઃఆ
    ᶃ τϦΨʔ৚݅
    w ࢉज़ԋࢉࢠɺൺֱԋࢉࢠͰ৚݅Λઃఆ
    w ྫɿDPVOU
    ᶄ ௨஌ϦΫΤετ
    w ϦΫΤετ63-ɺϝιουʢࠓճ͸1045ʣ
    w ϦΫΤετ಺༰ʢΫΤϦ݁ՌΛม਺Ͱ౉ͤΔʣ
    w ྫɿ\ʠUFYUʡʠ\3FTVMUT<>3BX3FTVMUT"T,W^^

    View Slide

  26. -PH4FSWJDFͰϋϚͬͨʜ
    w ϦΫΤετઃఆʢ௨஌಺༰ʣΛม͑ͨΒ

    ͳ͔ͥτϦΨʔ͕ώοτ͠ͳ͘ͳΔɻɻ
    w Τϥʔɿ"MFSUDPOEJUJPOOPUNFU

    View Slide

  27. -PH4FSWJDFͰϋϚͬͨʜ
    w ϦΫΤετઃఆʢ௨஌಺༰ʣΛม͑ͨΒ

    ͳ͔ͥτϦΨʔ͕ώοτ͠ͳ͘ͳΔɻɻ
    w Τϥʔɿ"MFSUDPOEJUJPOOPUNFU
    w ಉ͡ઃఆͰ΋ɺ૝ఆ௨Γಈ࡞͢Δͱ͖ͱ

    ·ͨ΋΍τϦΨʔʹώοτ͠ͳ͍͕࣌͋Δɻɻ

    View Slide

  28. -PH4FSWJDFͰϋϚͬͨʜ
    w ϦΫΤετઃఆʢ௨஌಺༰ʣΛม͑ͨΒ

    ͳ͔ͥτϦΨʔ͕ώοτ͠ͳ͘ͳΔɻɻ
    w Τϥʔɿ"MFSUDPOEJUJPOOPUNFU
    w ಉ͡ઃఆͰ΋ɺ૝ఆ௨Γಈ࡞͢Δͱ͖ͱ

    ·ͨ΋΍τϦΨʔʹώοτ͠ͳ͍͕࣌͋Δɻɻ
    w ౦ژϦʔδϣϯͱதࠃͷϦʔδϣϯͰ

    ڍಈ͕ҧ͏ʁʁʁͱ͔͍ٙͩͨ͠ɻɻ

    View Slide

  29. ͨͿΜ͜Ε͕ݪҼͩͬͨᶃ
    w ʮݕࡧظؒʯʮݕࡧִؒʯͷઃఆΛ෼ˠ෼ʹ
    Ԇ͹͢ͱɺ҆ఆͯ͠௨஌͞ΕΔΑ͏ʹͳͬͨɻ

    View Slide

  30. ͨͿΜ͜Ε͕ݪҼͩͬͨᶄ
    w ςϯϓϨʔτม਺Λʮ͜ΕΠέΔΜ͡ΌͶʁʯͳ
    ਫ਼ਆͰѻ͍ͬͯͨɻ
    w \3FTVMUT<>'JSF3FTVMU^Λ1045ͯ͠ΈΔͱ
    w ௨஌ʢϝʔϧʣɿड৴Ͱ͖ͨ
    w 8FC)PPLʢ$VTUPNʣɿ/(ʢૹ৴΋ͯ͠ͳ͍ʁʣ

    View Slide

  31. 4MBDLʹ௨஌੒ޭ
    w ΫΤϦͷ಺༰Λ4MBDLͰ͖ͨʂʂ
    wίϯιʔϧ΁ͷ઀ଓݩͷάϩʔόϧ*1ΞυϨε
    wΞΧ΢ϯτ໊ʢ3".Ϣʔβ໊ʣ
    w18ೖྗͷࣦഊճ਺

    View Slide

  32. ·ͱΊ
    w ύεϫʔυͰηΩϡϦςΟΛ୲อ͢Δ࣌୅Ͱ͸
    ͳ͘ͳ͖ͬͯͨࠓ೔͜ͷࠒɺ
    w ؤுͬͯύεϫʔυޡೖྗͷ௨஌Λ͢Δͷ΋

    ͍͍͚ΕͲɺ
    w .'"Λඞਢʹͨ͠Γɺ
    w 440Λਪਐ͢Δํ͕ݐઃతͳͷͰɺ
    w ࣍ճ͸ͦͬͪΛؤுΔɻ

    View Slide