Slide 1

Slide 1 text

΍͸Γλάɹλά͸શͯΛղܾ͢Δ  1 BXTEFWEBZ

Slide 2

Slide 2 text

 ໊લླ໦ݚޗ !LFOTDBM   ॴଐ  -BZFS9גࣜձࣾ$50ࣨ  ࡾҪ෺࢈σδλϧΞηοτɾϚωδϝϯτग़޲  དྷྺ  ূ݊޲͚.BOBHFE4FDVSJUZ4FSWJDFɺՈܭ฽ɾΫϥ΢υձܭɺূ݊ձࣾ  ݸਓͷ׆ಈ  ಉਓʮ4FDVSFཱྀஂʯʹͯ1PEDBTUʮ4FDVSF-JBJTPOʯ΍ಉਓࢽ࡞੒  िץʮ๩͍͠ਓͷͨΊͷηΩϡϦςΟɾΠϯςϦδΣϯεʯൃߦ  1PE$BTUʮ4FDVSF-JBJTPOʯΛʢ΄΅ʣ8FFLMZͰϦϦʔε  ॻ੶  0`3FJMMZʮ;FSP5SVTU/FUXPSLʯ؂༁  ΠϯϓϨε3%ʮΞΠσϯςΟςΟ͸ͩΕͷ΋ͷʁ)ZQFSMFEHFS*OEZ"SJFTͰ࣮ݱ͢Δ෼ࢄΞΠσϯςΟςΟʯஶ࡞ ॴଐઌ঺հࣗݾ঺հ 2

Slide 3

Slide 3 text

 Ϧετ  Ϧετ  Ϧετ  Ϧετͷڧௐจࣈ  Ϧετ ݟग़͠ 3

Slide 4

Slide 4 text

ϒϩοΫνΣʔϯͷձࣾ Ͱ͸ͳ͍Ͱ͢ 4 IUUQTOPUFDPNGVLLZZOOGFECD

Slide 5

Slide 5 text

ॴଐઌͦͷᶃ 5

Slide 6

Slide 6 text

 Ϧετ  Ϧετ  Ϧετ  Ϧετͷڧௐจࣈ  Ϧετ ݟग़͠ 6

Slide 7

Slide 7 text

 Ϧετ  Ϧετ  Ϧετ  Ϧετͷڧௐจࣈ  Ϧετ ݟग़͠ 7

Slide 8

Slide 8 text

ॴଐઌͦͷᶄ 8

Slide 9

Slide 9 text

ॴଐઌͦͷᶄ 9

Slide 10

Slide 10 text

ॴଐઌͦͷᶄ 10

Slide 11

Slide 11 text

ॴଐઌͦͷᶄ 11

Slide 12

Slide 12 text

ຊ೔ͷ͓࿩ 12 $50ࣨ԰୆ࠎΤϯδχΞ

Slide 13

Slide 13 text

ຊ೔ͷ͓࿩ 13 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ

Slide 14

Slide 14 text

ຊ೔ͷ͓࿩ 14 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ "84

Slide 15

Slide 15 text

ຊ೔ͷ͓࿩ 15 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ "84 λά

Slide 16

Slide 16 text

ຊ೔ͷ͓࿩ 16 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ "84 λά

Slide 17

Slide 17 text

ຊ೔ͷ͓࿩ 17 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ "84 λά

Slide 18

Slide 18 text

 ࿩͢͜ͱ  ౰ࣾͷλά؅ཧͷมભ  ࿩͞ͳ͍͜ͱ  ౰ࣾͷλάΛ׆༻ͨ͠ӡ༻ ࿩͞ͳ͍͜ͱ 18

Slide 19

Slide 19 text

 8IZλά؅ཧ  ౰ࣾͷλά؅ཧ  5BHWFS  5BHWFS  5BHWFS  5BHWFS ະདྷͷ࿩ʣ ΞδΣϯμ 19

Slide 20

Slide 20 text

8IZλά؅ཧ 20

Slide 21

Slide 21 text

ʢ͍͖ͳΓ୤ઢʣθϩτϥετ 21

Slide 22

Slide 22 text

ୈࡾͷࢦ਑͸ɺθϩτϥετͷ֓೦ ͸ɺอޢର৅ͷγεςϜͱσʔλͷ૊ ৫తՁ஋ʹ͋Θͤͯద༻͢Δඞཁ͕͋ Δͱ͍͏͜ͱͰ͢ 22 θϩτϥετΞʔΩςΫνϟ"84ͷࢹ఺

Slide 23

Slide 23 text

ୈࡾͷࢦ਑͸ɺθϩτϥετͷ֓೦ ͸ɺอޢର৅ͷγεςϜͱσʔλͷ૊ ৫తՁ஋ʹ͋Θͤͯద༻͢Δඞཁ͕͋ Δͱ͍͏͜ͱͰ͢ 23 θϩτϥετΞʔΩςΫνϟ"84ͷࢹ఺ อޢର৅ͷ γεςϜͱσʔλʹ͍ͭͯ Կ΋Θ͔ΒΜ৔߹͸ʁ

Slide 24

Slide 24 text

 ࢿ࢈؅ཧ  ༧࣮؅ཧ  ΞΫηε؅ཧ  ʢฏ࣌ͷʣϦεΫ؅ཧ  ΠϯγσϯτରԠ  ࣗಈԽ ର৅͕ط஌Ͱͳ͍ͱͰ͖ͳ͍͜ͱ 24

Slide 25

Slide 25 text

 UPNPWFUP;5" BOFOUFSQSJTFNVTUIBWFB TZTUFNUPEJTDPWFSBOESFDPSEQIZTJDBMBOE WJSUVBMBTTFUTUPDSFBUFBVTBCMFJOWFOUPSZ /*4541ʮθϩτϥετɾΞʔΩςΫνϟʯ 25

Slide 26

Slide 26 text

 ֤Ϧιʔεʹ෇༩͞Εͨϝλσʔ λ  ֤छӡ༻ʹ͓͚ΔඞཁෆՄܽͳࢀ রઌσʔλ  ૊৫ಛ༗ͷϦιʔε*EFOUJUZΛߏ ங͢Δ$MBJN "84ͷλάͱ͸ʁ 26 ๻͸͜ͷ ؀ڥͰ࢖ΘΕ·͢ ๻ͷ؅ཧऀ͸ 43&νʔϜͰ͢ ܦӦ؅ཧ෦ͷ ͓ࡒ෍͔͍ͭ·͢ ػີ৘ใ ͔͍͋ͭ·͢ %9αʔϏεͰ ࢖ΘΕ·͢ EFWEYFDͱਃ͠·͢

Slide 27

Slide 27 text

 ֤Ϧιʔεʹ෇༩͞Εͨϝλσʔ λ  ֤छӡ༻ʹ͓͚ΔඞཁෆՄܽͳࢀ রઌσʔλ  ૊৫ಛ༗ͷϦιʔε*EFOUJUZΛߏ ங͢Δ$MBJN "84ͷλάͱ͸ʁ 27 ๻͸͜ͷ ؀ڥͰ࢖ΘΕ·͢ ๻ͷ؅ཧऀ͸ 43&νʔϜͰ͢ ܦӦ؅ཧ෦ͷ ͓ࡒ෍͔͍ͭ·͢ ػີ৘ใ ͔͍͋ͭ·͢ %9αʔϏεͰ ࢖ΘΕ·͢ EFWEYFDͱਃ͠·͢

Slide 28

Slide 28 text

 αʔόʔʹՍۭͷσʔλΛ෇༩Ͱ͖ΔΑ͏ʹͳͬͨ  ʮໝ૝ͱ͍͏໊ͷ૝૾ྗ͕ϗϞɾαϐΤϯεΛਐԽͤͨ͞ʯ  ͨ͘͞Μ͚ͭΒΕΔʢd   Ωʔɾ஋ͷࣗ༝౓͕ߴ͍ʢʙ VOJDPEFจࣈɺDBTFTFOTJUJWF ه߸ར༻Խʣ  ϫʔΫϩʔυͷಈ࡞ʹ௚઀తͳӨڹΛ༩͑Δ͜ͱͳ͘ӡ༻Ͱ͖Δ  71$ͷ/BNFλάʜ ஌Γ·ͤΜͶʜ  "1*؅ཧͰ͖Δ  σʔλΛ࣮ࡍͷϦιʔεʹࣄલຒΊࠐΜ্ͩͰɺࢿ࢈؅ཧ%#΍ΤΫηϧΛิ׬Ͱ͖Δ  ٯํ޲΋Մ  ؅ཧऀʹΑΔ౷੍΋Ͱ͖Δ λά͸͍͢͝ 28

Slide 29

Slide 29 text

λά͔͠উͨΜ 29

Slide 30

Slide 30 text

౰ࣾͷ࿩ 30

Slide 31

Slide 31 text

5BH7FS 31

Slide 32

Slide 32 text

 #$ίϯαϧࣄۀ͕ϝΠϯͩͬͨͨΊɺ۩ମతͳظؒݶఆతͳϫʔ Ϋϩʔυ͔͠ͳ͔ͬͨ  1P$ϓϩδΣΫτʹ൐͏୹ظతͳ৘ใࢿ࢈͔͠ͳ͔ͬͨʢ"84্ Ͱ͸ʣ  Πϯϑϥత੔උΛ̎ਓͰ࣮ࢪ  ΏΔʙ͘ᯂΑΓ࢝ΊΑ  ʢӨڹ΋ͳ͍͠ʣΨϯΨϯ͍͜͏ͥ 5BHWFS  32

Slide 33

Slide 33 text

ମ੍ ੲ 33

Slide 34

Slide 34 text

ࢀߟจݙY

Slide 35

Slide 35 text

 ϕεϓϥ  $BTFTFOTJUJWF  Ϧιʔε΁ͷΞΫηείϯτϩʔϧ  λά؅ཧͷࣗಈԽ  λά͸গͳ͍ΑΓɺଟ͍ํ͕ϕλʔ  ओʹλάΧςΰϦΛࢀর "845BHHJOH4USBUFHJFT 35 IUUQTEBXTTUBUJDDPNBXTBOTXFST"84@5BHHJOH@4USBUFHJFTQEG

Slide 36

Slide 36 text

5BHHJOH#FTU1SBDUJDFT  "845BHHJOH4USBUFHJFTΛΑ ΓৄࡉԽ IUUQTEPDTBXTBNB[PODPNXIJUFQBQFSTMBUFTUUBHHJOHCFTUQSBDUJDFTJOUSPEVDUJPOUBHHJOHVTFDBTFTIUNM

Slide 37

Slide 37 text

 Ϧετ  Ϧετ  Ϧετ  Ϧετͷڧௐจࣈ  Ϧετ 37 ͦΜͳʹλάͷ஋ʹͭΊ͜·ΜͰ΋Α͘ͳ͍ʜ

Slide 38

Slide 38 text

౰ࣾಠࣗΧελϚΠζᶃ 38 ݴͬͯΔ͜ͱ͕ҧ͏ͷͰɺ ʮେ͸খΛ݉ͶΔʯͱ͍͏͜ͱͰ ޙ͔Βม͑Δ͜ͱ্౳Ͱ͚ͭ·͘Δ͜ͱʹͨ͠ɻ λάมߋͰ͋Ε͹Өڹ͸ͳ͘ɼ ͔ͭɺݱࡏͷ༧࣮؅ཧͰ͸ͦ͜·ͰλάΛ׆༻ͯ͠ͳ͍ͨΊ

Slide 39

Slide 39 text

5BHHJOH#FTU1SBDUJDFT  "845BHHJOH4USBUFHJFTΛΑ ΓৄࡉԽ IUUQTEPDTBXTBNB[PODPNXIJUFQBQFSTMBUFTUUBHHJOHCFTUQSBDUJDFTJOUSPEVDUJPOUBHHJOHVTFDBTFTIUNM ϏϛϣʔʹݴͬͯΔ͜ͱ͕ҧ͏ͷͰ 5BHHJOH#FTU1SBDUJDFTͷߟ͑ํΛجʹɺ 5BHHJOH4USBUFHJFTͷ࣮૷ํ๏ΛϝΠϯʹ࣮૷

Slide 40

Slide 40 text

 λά໋໊نଇέόϒέʔεεωʔΫέʔε  ΠϯϕϯτϦͬͯ%#ͩ͠ɺ͡Ό͋εωʔΫέʔεͩΑͶ  5FSSBGPSNͷϕεϓϥ΋Ξϯείͩ͠ɻ  Ϧιʔε໊نଇ  \FOWJSPONFOU^\TFSWJDF@JE^\Ϧιʔεಛ༗ͷ஋^  4΍"-#ʹ͍ͭͯ͸OBNFλάͷΑ͏ͳޠ۟ؒΛ@ͳܗࣜͩ ͱͰ͖ͳ͍ͷͰɺͰͭͳ͛Δɻ ౰ࣾಠࣗΧελϚΠζᶄ 40 IUUQTXXXUFSSBGPSNCFTUQSBDUJDFTDPNOBNJOH

Slide 41

Slide 41 text

౰ࣾಠࣗΧελϚΠζᶅ 41 λά؅ཧΛ ड͚࣋ͭ

Slide 42

Slide 42 text

౰ࣾಠࣗΧελϚΠζᶆ

Slide 43

Slide 43 text

43 λά໊ ΧςΰϦ ඞਢ ྫ name Ϧιʔε໊ ○ ${service_id}.${environment}.${service_role}.$ {name} service_id ΞϓϦɾαʔϏεID ○ dx service_role αʔϏε಺ͷ໾ׂ ○ web, db, log_storage cluster ecs Ϋϥελʔͱ͔ environment ؀ڥ ○ dev, stg, prd version owner ੹೚ઌ ○ cost_center ○ xxx, yyy, layerx (ސ٬໊) project ϓϩδΣΫτ໊ ○ customer ಛఆͷ͓٬༷޲͚༻ Τϯϓϥϓϥϯʹ͸͓٬༷ઐ༻αʔόΛఏڙ ͠·͢...తͳͱ͖ con fi dentiality ػີ౓߹͍ ○ managed_by ͲͷIaC͔ ○ manual(σϑΥϧτ), terraform, cfn compliance ن੍ɾίϯϓϥ PII, [pii, iso27002]

Slide 44

Slide 44 text

 $PNNFSDJBMEBUBDMBTTJ fi DBUJPO  4FOTJUJWF $PO fi EFOUJBM 1SJWBUF 1VCMJD  IUUQTEPDTNJDSPTPGUDPNKBKQ TFDVSJUZVQEBUFT QMBOOJOHBOEJNQMFNFOUBUJPOHVJEF  $PO fi EFOUJBMJUZʹؔ͢Δิ଍ 44

Slide 45

Slide 45 text

5BH7FS 45

Slide 46

Slide 46 text

 ࣄۀ෦੍΁  Ӭଓతͳ৘ใࢿ࢈͕ൃੜͨ͠  Πϯϑϥత੔උΛ͢Δ̎ਓ͸ࣄۀ෦ʹ೿ݣ΁ 5BHWFS  46

Slide 47

Slide 47 text

ମ੍ /PX 47

Slide 48

Slide 48 text

ڞ༗ձ 48

Slide 49

Slide 49 text

 DPTU@DFOUFSͷ஋ʹ֤ࣄۀ෦͕ೖΔΑ͏ʹ  OBNFλάΛഇࢭ  λά໊ MBZFSYλά໊ ͷQSF fi YΛഇࢭ EJGGGSPNWFS 49

Slide 50

Slide 50 text

5BH7FS 50

Slide 51

Slide 51 text

 5FSSBGPSNQSPWJEFSW  $50ަ୅  *4.4औಘ։࢝ 5BHW  51

Slide 52

Slide 52 text

ମ੍ /PX 52

Slide 53

Slide 53 text

ڞ༗ձ 53

Slide 54

Slide 54 text

5FSSBGPSN"841SPWJEFSWͷϦϦʔε 54 provider "aws" { region = var.regio n default_tags { tags = var.default_tags } } resource "aws_kms_key" "cloudtrail" { description = "key to encrypt/decrypt cloudtrail " tags = { service_role = var.service_role.km s } } resource "aws_kms_key" "cloudtrail" { description = "key to encrypt/decrypt cloudtrail " tags = { environment = pr d service_role = var.service_role.km s project = guardrai l service_id = guardrai l cost_center = layer X Owner = sr e managed_by = terrafor m github_repository - guardrai l } }  EFGBVMU@UBHT͍͜͞ʔ

Slide 55

Slide 55 text

 HJUIVC@SFQPTJUPSZ௥Ճ  ৘ใ۠෼ͷݟ௚͠  લTFOTJUJWF DPO fi EFOUJBM QSJWBUF QSPQSJFUBSZ QVCMJD  ޙDPO fi EFOUJBM QSJWBUF QVCMJD  TFSWJDF@SPMFΛ࣮ଶͰ͋ΔϦιʔεͷཻ౓ʹ͋ΘͤΔ  ྫTFDSFUTNBOBHFSWBVMU EJGGGSPNWFS 55

Slide 56

Slide 56 text

ࠓޙ 56

Slide 57

Slide 57 text

 λά౷੍  λάFWFSZXIFSF  λά؅ཧͷ؅ཧ  λά΁ͷΞΫηε؅ཧΛ៛ີԽ  λάΛ࢖ͬͨ"#"$ʁ  ਖ਼௚͋·ΓϝϦοτΛײͯ͡ͳ͍ʜ 5BHW GVUVSF 57

Slide 58

Slide 58 text

࠾༻ͯ͠·͢ ݸਓΧδϡΞϧ໘ஊ͔ΒͰ ΋0, 58

Slide 59

Slide 59 text

59 ࠾༻͸ͪ͜Β IUUQTIFSQDBSFFSTWMBZFSY ΧδϡΞϧ໘ஊ͸ͪ͜Β IUUQTNFFUZOFUBSUJDMFTUXXKK

Slide 60

Slide 60 text

60 IUUQTNFFUZOFUNBUDIFTK"C ff [W-RK/B IUUQTIFSQDBSFFSTWMBZFSYZSR)(513Y

Slide 61

Slide 61 text

5IBOLZPV 61