AWS WAFの初心者向け最初の一歩

by cm-usuda-keisuke

Slide 1

Slide 1 text

"848"'ͷॳ৺ऀ޲͚࠷ॳͷҰา 4FDVSJUZ+"84ӓాɹՂ༞

Slide 2

Slide 2 text

AWSɺϞόΠϧɺϏοά σʔλɺIoTͳͲ࠷৽ٕज़৘ ใ΍ΠϕϯτϨϙʔτΛܝ ࡌ͢ΔϒϩάϝσΟΞͰ͢ɻ

Slide 3

Slide 3 text

AWS׆༻ͷ͋ΒΏΔχʔζ ʹԠ͑Δ૯߹ࢧԉαʔϏε ʮΫϥεϝιουϝϯόʔ ζʯɻৄ͘͠͸ͪ͜Βͷ΢Σ ϒαΠτΛޚཡ͍ͩ͘͞ɻ

Slide 4

Slide 4 text

ࣗݾ঺հ ӓాɹՂ༞ ɾΫϥεϝιουגࣜձࣾ ɾ"84ࣄۀຊ෦ ɹιϦϡʔγϣϯΞʔΩςΫτ ɹɹηΩϡϦςΟνʔϜ ɾ4FDVSJUZ+"84ӡӦ ɾ޷͖ͳαʔϏε ɹ"848"'Ϛωʔδυϧʔϧ New

Slide 5

Slide 5 text

໨࣍ w 8"'ͱ͸ w "848"'ͷಛ௃ w ָʹӡ༻ͯ͠ΈΔ ࠓճ͸"848"'ͷॳ৺ऀͷΦϖϨʔγϣϯدΓ ͷਓ޲͚ʹ࡞͍ͬͯ·͢

Slide 6

Slide 6 text

WAFͱ͸

Slide 7

Slide 7 text

8"'ͱ͸ 8FC"QQMJDBUJPO'JSFXBMMʢུশ8"'ɺϫϑʣͱ͸ɺ΢Σ ϒΞϓϦέʔγϣϯͷ੬ऑੑΛѱ༻ͨ͠߈ܸ͔Β΢ΣϒΞϓ ϦέʔγϣϯΛอޢ͢ΔηΩϡϦςΟରࡦͷҰͭ ηΩϡϦςΟରࡦͱͯ͠͸ɺ΢ΣϒΞϓϦέʔγϣϯͷ࣮૷ ໘ͰͷࠜຊతͳରࡦͰ͸ͳ͘ɺ͋͘·Ͱ΋߈ܸʹΑΔӨڹΛ ௿ݮ͢Δӡ༻໘ͰͷରࡦͱͳΔ XJLJQFEJBҾ༻IUUQTKBXJLJQFEJBPSHXJLJ8FC@"QQMJDBUJPO@'JSFXBMM

Slide 8

Slide 8 text

ྨࣅػೳͱͷҧ͍ 8"'ͱྨࣅ͢Δػೳͱͯ͠ϑΝΠΞ΢Υʔϧ '8 ΍ɺ৵ೖ๷ࢭγεςϜ *14 ɺ৵ ೖݕ஌γεςϜ *%4 ͕͋Δ͕ɺ๷ޚՄೳͳ߈ܸʹҧ͍͕͋Δɻ w '8Ͱ๷ޚՄೳͳ߈ܸͷྫ w ϙʔτεΩϟϯ w *14*%4Ͱ๷ޚՄೳͳ߈ܸͷྫ w %P4߈ܸ w 4:/qPPE߈ܸ w 8"'Ͱ๷ޚՄೳͳ߈ܸͷྫ w 42-ΠϯδΣΫγϣϯ w ΫϩεαΠτεΫϦϓςΟϯά 944 w ΠϯδΣΫγϣϯ߈ܸ w ύϥϝʔλվ᜵ XJLJQFEJBҾ༻IUUQTKBXJLJQFEJBPSHXJLJ8FC@"QQMJDBUJPO@'JSFXBMM '8 -- *14*%4 5$1)551 8"' ΞϓϦέʔγϣϯ 42-KBWBTDSJQU1)1౳

Slide 9

Slide 9 text

8"'ʹ͍ͭͯͷࢀߟࢿྉ w 8FC"QQMJDBUJPO'JSFXBMMಡຊ w IUUQTXXXJQBHPKQTFDVSJUZWVMOXBGIUNM w ೥ͷࢿྉͳͷͰݹ͍಺༰΋͋Δ͕ɺ8"'ͷੑ࣭Λཧղ ͢Δ෼ʹ͸ඇৗʹ͍͍ w 1$*%44 w IUUQTKBQDJTFDVSJUZTUBOEBSETPSHNJOJTJUFFOW w 8"'ͷඞཁੑʹ͍ͭͯॻ͔Ε͍ͯΔ w ʮ8FCϕʔεͷ߈ܸΛݕ஌͓Αͼճආ͢ΔͨΊʹɺҰൠެ։ ͞Ε͍ͯΔ8FCΞϓϦέʔγϣϯͷखલʹɺ8FCϕʔεͷ ߈ܸΛࣗಈతʹݕग़ɾ๷ࢭ͢Δٕज़తͳղܾࡦʢ8FCΞϓϦ έʔγϣϯϑΝΠΞ΢ΥʔϧͳͲʣΛΠϯετʔϧ͢Δɻʯ

Slide 10

Slide 10 text

8"'ͷ෼ྨ "84ͰαʔϏεΛಈ͔͢৔߹ͷࢹ఺͔Βݟͨར༻ܗଶʹΑΔ෼ྨ ෼ྨಛ௃ ֓ཁ ػೳੑ ॊೈੑ ؆қੑ ਌࿨ੑ Ձ֨ Ծ૝ΞϓϥΠΞϯε ΦϯϓϨ࣌୅͔Β͋Δ੡ ඼܈Ͱߴػೳ ߴ ௿ ௿ ௿ ߴ Ϋϥ΢υܕ8"' 8"'ΛαʔϏεͱͯ͠ར ༻Ͱ͖ͯϝϯςφϯεָ͕ த ௿ த த த "848"' "84ͷαʔϏεͱͯ͠਌ ࿨ੑ͕ߴ͍ த ߴ த ߴ ௿ "848"' Ϛωʔδυϧʔϧ ηΩϡϦςΟϕϯμʔͷఏ ڙͨ͠ϧʔϧΛར༻Մೳ த௿ ߴ ߴ ߴ த

Slide 11

Slide 11 text

8"'ͷ෼ྨิ଍ w Ծ૝ΞϓϥΠΞϯε͸ߴػೳ͕ͩ"84ͱͷ਌࿨ੑ͸ߴ͘ͳ͍ w ߴ͍ίϯϓϥΠΞϯε͕ٻΊΒΕΔ৔߹౳ʹར༻ w ୯ҰͰ͸ར༻ͤͣ"848"'ͱซ༻͢Δ w Ϋϥ΢υܕ8"'͸ϝϯςφϯεϑϦʔͰར༻͠΍͍͕͢εέʔ ϧͮ͠Β͍΋ͷ΋ w "848"'͸εέʔϧ͢Δ͕୯ମͷӡ༻͸ਏ͍ w "848"'Ϛωʔδυϧʔϧ͸࢖͍΍͍͢ w ࠐΈೖͬͨ͜ͱΛ͢ΔͳΒଞιϦϡʔγϣϯͱซ༻͕޷·͍͠

Slide 12

Slide 12 text

"848"'ͷཱͪҐஔ AWS WAF͸؆қతͳαʔϏεͰ ໾ཱͭϢʔεέʔε͸গͳ͍ʁ

Slide 13

Slide 13 text

"848"'ͷཱͪҐஔ AWS WAF͸؆қతͳαʔϏε͕ͩ ໾ཱͭϢʔεέʔε͸ଟ͍

Slide 14

Slide 14 text

๻ͷݸਓతͳײ֮Ͱ͕͢ "848"'͸͜Ε·Ͱ8"'Λར༻Ͱ͖ͳ͔ͬͨن໛ͷ αʔϏεʹ͸ಛʹࢗ͞Γ·͢ ෼ྨ େن໛αΠτ ͔ͬ͠Γରࡦ͞Ε͍ͯΔ தن໛αΠτ ΅ͪ΅ͪରࡦ͞Ε͍ͯΔ খن໛αΠτ ͋Μ·Γରࡦ͞Ε͍ͯͳ͍ ࣮ࡍͷׂ߹͸ େن໛αΠτ ͔ͬ͠Γରࡦ͞Ε͍ͯΔ தن໛αΠτ ΅ͪ΅ͪରࡦ͞Ε͍ͯΔ খن໛αΠτ ͋Μ·Γରࡦ͞Ε͍ͯͳ͍ ͜ͷ͘Β͍͔͠ ༗ޮ͡Όͳ͍ͱ ࢥͬͨΒ ͜ͷ͘Β͍ ༗ޮͩͬͨ

Slide 15

Slide 15 text

ηΩϡϦςΟରࡦͷߟ͑ํ w ηΩϡϦςΟରࡦʹऴΘΓ ׬ᘳ ͸ͳ͍ w େମ͸අ༻ͱͷτϨʔυΦϑʹͳΔ w कΔ΋ͷ͕େ͖͚Ε͹ద੾ʹ౤ࢿ͢Δ w খ͚͞Ε͹ඞཁ࠷௿ݶ͚ͩͰ΋ྑ͠ͱ͍͍ͯ͠ w "848"'͸ΤϯτϦʔϨϕϧͷηΩϡϦςΟରࡦ ͱͯ͠ߟ͍͑ͯ͘ͱ͍͍͔΋

Slide 16

Slide 16 text

AWS WAFͷಛ௃

Slide 17

Slide 17 text

"848"'ͷߏ੒ཁૉ w ݸผͷݕ஌ϧʔϧ͸ $POEJUJPO w 3VMFʹෳ਺$POEJUJPOΛ ొ࿥ w 8FC"$-ʹෳ਺3VMFΛ ొ࿥ w $MPVE'SPOUͱ"-#ʹ 8FC"$-Λద༻ AWS Black Belt Online Seminar 2017 AWS WAF https://www.slideshare.net/AmazonWebServicesJapan/20171122-aws-blackbeltawswafowasptop10/23

Slide 18

Slide 18 text

"848"'ಛ௃ w ඞཁͳ৚݅Λ૊Έ߹Θͤͯॊೈʹߏ੒Ͱ͖Δ w 42-J 944౳ͷࡉ͔͍ਖ਼نදݱΛॻ͘ඞཁ͕ͳ͍ w (FP*1Ͱ஍Ҭ੍ݶ͕Մೳ w 3BUF#BTFEͰա৒ͳϦΫΤετΛࢭΊΒΕΔ w $MPVE'SPOU"-#ʹΠϯςάϨʔτͯࣗ͠ಈͰε έʔϧ͢Δ w ͍҆ "$-݄ 3VMF݄ τϥϑΟοΫສ

Slide 19

Slide 19 text

"848"'ͷͭΒ͍ॴ w ϧʔϧ ٴͼίϯσΟγϣϯɾϑΟϧλʔ Λࣗ෼Ͱ࡞੒͠ͳ͚ Ε͹ͳΒͳ͍ w ৽͍͠੬ऑੑʹରͯࣗ͠෼ͰϧʔϧΛ௥Ճ͠ͳ͚Ε͹ͳΒͳ͍ w ߟྀࣄ߲ w Ҿֻ͚͍ͬͨਖ਼نදݱ w ର৅ͷཁૉ ϔομɺ2VFSZ4USJOHɺ#PEZ౳ w Τϯίʔυ 63-ɺ)5.-౳

Slide 20

Slide 20 text

"848"'ͷͭΒ͍ॴ

Slide 21

Slide 21 text

"848"'ͷͭΒ͍ॴ w ͱʹ͔͘ઃఆ͕ͭΒ͍ w ৽͍͠੬ऑੑʹରԠ͢Δϧʔϧͷਖ਼͍͠࡞Γํ͕Θ͔ Βͳ͍ w ͦ΋ͦ΋Ұൠਓ͕΍Δ͜ͱͰ͸ͳ͍ w ηΩϡϦςΟͷઐ໳Ո͕࡞ͬͯ͘ΕͨΒ࿩͸ผ

Slide 22

Slide 22 text

ͦ͜Ͱొ৔͢Δͷ͕ AWS WAFϚωʔδυϧʔϧ

Slide 23

Slide 23 text

"848"'Ϛωʔδυϧʔϧ ηΩϡϦςΟϕϯμʔ͕ఏڙ͢Δ8"'ͷϧʔϧ ैྔ՝ۚͰ࣌ؒ୯ҐͰར༻Ͱ͖Δ ࠷݄҆ʙߴΊͰ΋ ৗʹ࠷৽ͷϧʔϧʹϝϯςφϯεͯ͘͠ΕΔ

Slide 24

Slide 24 text

͋ΘͤͯಡΈ͍ͨ ʲ৽ػೳʳ"848"'ϚωʔδυϧʔϧΛ࢖ͬͯ 8PSE1SFTTʹର͢Δ߈ܸΛ๷͍ͰΈͨSFJOWFOU IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTSFJOWFOUXBGNBOBHFESVMFUSZ Ϛωʔδυϧʔϧͷྑ͞ʹ͍ͭͯৄ͘͠ղઆ͠ɺ߹Θ࣮ͤͯಈ࡞ͷݕূ Λߦͳ͍ͬͯ·͢

Slide 25

Slide 25 text

ϚωʔδυϧʔϧΛ෼ྨͯ͠ΈΔ w ط஌ͷ੬ऑੑରࡦ w $.4΍"QBDIF౳ͷ੬ऑੑରࡦ w 5SFOE.JDSP.BOBHFE3VMFTGPS"848"'$POUFOU.BOBHFNFOU 4ZTUFN $.4 ౳ w 08"415PQରࡦ w 944 42-J౳ͷରࡦ w '3VMFTGPS"848"'8FCFYQMPJUT08"413VMFT౳ w #PUରࡦ w ੬ऑੑεΩϟφɺ8FCεΫϨΠύʔ౳ରࡦ w '3VMFTGPS"848"'#PU1SPUFDUJPO3VMFT ஫ҙࣄ߲ͲΕ͔Ұ͔ͭ͠8FC"$-ʹద༻͢Δ͜ͱ͕ग़དྷͳ͍

Slide 26

Slide 26 text

"848"'ͱͷ෇͖߹͍ํ w ·ͣอޢର৅γεςϜʹ߹͏ϚωʔδυϧʔϧΛબఆ w ϚωʔδυϧʔϧͰิ͑ͳ͍෦෼΋ඞཁͳΒݸผʹϧʔ ϧΛઃఆ͢Δ ׳Ε͖ͯͨΒ w ྫ͑͹8PSEQSFTTαΠτͳΒ$.4༻ͷϚωʔδ υϧʔϧΛద༻͢Δ w 8FCϑΥʔϜ͕͋ΔͳΒɺͦͷϖʔδ͸42-Jର ࡦΑ͏ϧʔϧΛॻ͍ͯ͋ͯΔɺͱ͔ ͜Ε͚ͩͰ͍ͩͿ΍ΒΕʹ͘͘ͳΔ

Slide 27

Slide 27 text

ָʹӡ༻ͯ͠ΈΔ

Slide 28

Slide 28 text

8"'ͷӡ༻ͱ͸ ޡݕ஌ͱͷઓ͍

Slide 29

Slide 29 text

Ͱ΋େৎ෉ w "848"'͕ϋϚΔϢʔεέʔεͰ͋Δখن໛αΠτ͸ ͦ͜·ͰෳࡶͰͳ͍ͨΊޡݕ஌͸ൃੜͮ͠Β͍ࣄ͕ଟ͍ w ࠷ॳʹޡݕ஌͕ൃੜ͠ͳ͍͔֬ೝͨ͠Β͋ͱ͸ϧʔϧͷ Ξοϓσʔτ͸ηΩϡϦςΟϕϯμʔ͕΍ͬͯ͘ΕΔͷͰ ؂ࢹ͢Δ͘Β͍Ͱ͍͍ w ෳࡶͳαΠτͳΒগ͠ؤுͬͨ΄͏͕͍͍ w ૝ఆ͞ΕΔϦΫΤετͷύϥϝʔλͰݕ஌͞Εͳ͍͔ νΣοΫ͢Δ౳

Slide 30

Slide 30 text

"848"'Ͱඞཁͳӡ༻ w ϩάΛऔΔ w ݕ஌ྔΛ؂ࢹ͢Δ w ϩάΛղੳ͢Δ

Slide 31

Slide 31 text

"848"'ͷϩάऔಘ w ݱঢ়"848"'͸׬શͳϩάऔಘ͸Ͱ͖ͳ͍ w ݕ஌ޙ࣌ؒͷΈอ࣋͞ΕΔαϯϓϧϩάΛར༻͢Δ w ϩάऔಘ͸Լهͷ࢓૊ΈΛࢀর IUUQTEFWDMBTTNFUIPEKQDMPVEBXTEFQMPZHFUBXTXBGTBNQMFMPHMBNCEBGSPNDGOW

Slide 32

Slide 32 text

ݕ஌ྔΛ؂ࢹ͢Δ w ҟৗΛݕ஌ͨ͠Β$MPVE8BUDIϝτϦΫεͰΧ΢ϯ τ͞ΕΔ w ͠͹Β͘ࢼݧӡ༻ͯ͠ఆৗతʹग़ͯ͘Δݕ஌ྔΛ֬ೝ ͢Δ w ద౰ͳ਺Λ௒͑ͨΒ4/4౳Ͱ௨஌͢Δ$MPVE8BUDI ΞϥʔϜΛઃఆ͢Δ ৗʹίϯιʔϧ΍4*&.ʹுΓ෇͘ඞཁ͸ͳ͍

Slide 33

Slide 33 text

ϩάΛղੳ͢Δ w 4ʹஷΊͨϩάΛ"UIFOBͰղੳ͢Δ w ओʹݕ஌ͨ͠ϧʔϧΛ֬ೝͨ͠Γૹ৴ݩ*1ࠃΛ֬ೝ w ৄࡉ͸Լهϒϩάࢀর IUUQTEFWDMBTTNFUIPEKQDMPVEBXTXBGRVFSZQBUUFSOJOBUIFOB

Slide 34

Slide 34 text

ղੳ࣌ͷΫΤϦྫ w $06/5΋͘͠͸#-0$,͔ͭ೔ຊ͔Βͷϩά w 4&-&$5'30.XBqPHT8)&3&BDUJPO"--08"/%SFRVFTUDPVOUSZb+1 w ೔ຊ͔ΒͷϦΫΤετͰݕ஌͍ͯͨ͠Βޡݕ஌Ͱ͸ͳ͍͔63*΍ϔομɺૹ৴ݩ*1ͳͲ͔Β൑அ͢Δ w ࠃຖͷϩά਺ͷूܭ w 4&-&$5SFRVFTUDPVOUSZ $06/5 SFRVFTUDPVOUSZ "4DPVOU'30.XBqPHT(3061#:SFRVFTUDPVOUSZ w ࠃίʔυ͕֬ೝͰ͖Δɻ໌Β͔ʹඞཁͳ͍ࠃ͔ΒͷΞΫηε͕ଟ͚Ε͹ɺ(FP*1ϧʔϧͰ#-0$,Λ௥Ճͯ͠΋͍͍ w ΫϥΠΞϯτ*1ຖͷϩά਺ͷूܭ w 4&-&$5SFRVFTUDMJFOUJQ $06/5 SFRVFTUDMJFOUJQ "4DPVOU'30.XBqPHT(3061#:SFRVFTUDMJFOUJQ w #-0$,͕ଟ͍*1͸ෆ৹ͳͷͰݸผʹ*1ͷ#-0$,΋ݕ౼

Slide 35

Slide 35 text

ԼهϑϩʔޙϦϦʔε͢Δ w ϚωʔδυϧʔϧΛ$06/5Ͱઃఆ͢Δ w લड़ͷϒϩάʹ͋ΔΫΤϦఔ౓Λ͔͚ͯϧʔϧΛ௥Ճ w ޡݕ஌ͱࢥΘΕΔ௨৴͕ͳ͘ͳͬͨΒ#-0$,ʹ͢Δ w ΞϥʔτͷͨΊͷ͖͍͠஋ΛܾΊΔ

Slide 36

Slide 36 text

ޡݕ஌͕ଟ͍৔߹ ଟ෼AWS WAF͡Όͳ͍ WAFͷ΄͏͕͍͍Ͱ͢

Slide 37

Slide 37 text

·ͱΊ w ͜Ε·Ͱ8"'ಋೖ͕ࢹ໺֎ͩͬͨ؀ڥͰ͸"84 8"'ͷಋೖΛݕ౼ͯ͠Έ·͠ΐ͏ w "848"'͸ϚωʔδυϧʔϧΛओ࣠ʹͯ͠ɺνϡʔ χϯά౳Ͱগ͠ϧʔϧΛ௥Ճ͢Δ w ϩάΛऔಘͯ͠"UIFOBͰղੳ͢Δͱ͍͍ײ͡ w ϚωʔδυϧʔϧͳΒӡ༻͸ָ͘͢͝

Slide 38

Slide 38 text

No content