[初心者向け]AWS環境のセキュリティ運用(設計)をはじめてみよう

by cm-usuda-keisuke

Slide 1

Slide 1 text

<ॳ৺ऀ޲͚> "84؀ڥͷηΩϡϦςΟӡ༻ ઃܭ Λ ͸͡ΊͯΈΑ͏ 4FDVSJUZ+"84ӓాɹՂ༞

Slide 2

Slide 2 text

ࣗݾ঺հ ӓాɹՂ༞ ɾΫϥεϝιουגࣜձࣾ ɾ"84ࣄۀຊ෦ ɹιϦϡʔγϣϯΞʔΩςΫτ ɹɹηΩϡϦςΟνʔϜ ɾ4FDVSJUZ+"84ӡӦ ɾ޷͖ͳαʔϏε ɹ"848"'Ϛωʔδυϧʔϧ AWS WAF

Slide 3

Slide 3 text

͜ͷηογϣϯͷλʔήοτ w "84ॳ৺ऀ w ઃܭɾߏஙɾӡ༻ɾอकʹܞΘΔํ w ηΩϡϦςΟ୲౰ऀ w "84ࣗମͷηΩϡϦςΟʹ͸໰୊ͳ͍͜ͱ͕ Θ͔͍ͬͯΔํ

Slide 4

Slide 4 text

ͪͳΈʹηΩϡϦςΟ͕ෆ҆ͱ͍͏ํ͸ʜ ɾ"84ͷηΩϡϦςΟ͕ෆ҆ ɾ৬৔Ͱ"84͕৮Εͳ͍ͷΛͳΜͱ͔͍ͨ͠ Ҏ্ͷํ͸ڈ೥ͷࢿྉΛࢀߟʹ͍ͯͩ͘͠͞ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTKBXTEBZTJTFDVSJUZ

Slide 5

Slide 5 text

ࠓճ͸ ࣮ࡍͲΜͳ؀ڥΛ࡞ͬͯ ηΩϡϦςΟΛอ͍͔ͬͯ͘ͱ͍͏࿩

Slide 6

Slide 6 text

ίϯηϓτ ָʹڧ͘कΔ

Slide 7

Slide 7 text

ӡ༻ͰͷηΩϡϦςΟͷΠϝʔδ w ͭΒ͍ w ͍ͨ΁Μ w ੹೚ॏେ w ϧʔνϯϫʔΫ w ͭ·Βͳ͍ Ͳ͏ͯ͜͠ΜͳΠϝʔδʹͳΔͷ͔ʁ

Slide 8

Slide 8 text

࣮ࡍͲΜͳ͜ͱΛ΍͍ͬͯΔ͔ w ηΩϡϦςΟάϧʔϓͷઃఆΛมߋ͢Δ w Ϧιʔεͷ؂ࢹ ϝτϦΫεͷಈ͖ͷ֬ೝͱ͔ w ϩάʹมͳ΋ͷ͕ͳ͍͔֬ೝ͢Δ w ੬ऑੑͷ֬ೝ w ύονΛ౰ͯΔ w ଞʹ΋͍Ζ͍Ζ ຊ౰ʹਓྗͰ΍Δඞཁ͕͋Γ·͔͢ʁ

Slide 9

Slide 9 text

ηΩϡϦςΟʹݶΒͣͰ͕͢ ӡ༻͸ݱ৔Ͱى͍ͬͯ͜ΔͷͰ͸ͳ͍ ઃܭஈ֊͔Β࢝·͍ͬͯΔͷͩ

Slide 10

Slide 10 text

ͳΜͰ΋ӡ༻ʹؙ౤͛ʹͳͬͯͳ͍Ͱ͔͢ʁ ͳΔ΂͘ઃܭͰ௵͠·͠ΐ͏Ͷ

Slide 11

Slide 11 text

ΞδΣϯμ ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ ؂ࢹͷઃܭ 44.ʹΑΔηΩϡϦςΟӡ༻ࣗಈԽ

Slide 12

Slide 12 text

ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ "84શମ

Slide 13

Slide 13 text

"84؀ڥશମͷίϯϙʔωϯτ ·ͣ͸͢΂ͯͷΞΧ΢ϯτͰར༻͞ΕΔ΂͖΋ͷ w "84$MPVE5SBJM w "84$POpH w "NB[PO(VBSE%VUZ w "844IJFME

Slide 14

Slide 14 text

$MPVE5SBJM "84$MPVE5SBJMʹΑΓૢ࡞ϩάΛऔಘ͢Δ $MPVE5SBJM͸"1*ૢ࡞ͳͲͷΞΫγϣϯΛϩΪϯά͢ ΔαʔϏε ηΩϡϦςΟΠϯγσϯτ౳͕ൃੜͨ͠ࡍʹ෼ੳʹ׆༻ શϦʔδϣϯͰͷ༗ޮԽΛਪ঑ AWS CloudTrail

Slide 15

Slide 15 text

͋ΘͤͯಡΈ͍ͨ ৽نΞΧ΢ϯτͰ΋͜ΕҰൃʂ$MPVE5SBJMΛશ ϦʔδϣϯͰ༗ޮԽ͢ΔεΫϦϓτΛॻ͍ͨ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDMPVEUSBJMBDUJWBUF ·ͩ༗ޮʹͳ͍ͬͯͳ͍ΞΧ΢ϯτ͸ҰൃೖΕ͓͖ͯ·͠ΐ͏

Slide 16

Slide 16 text

"84$POpH "84$POpHͱ͸ ηΩϡϦςΟͱΨόφϯεΛՄೳʹ͢Δߏ੒มߋͷ௨ ஌ɺߏ੒ཤྺɺ"84ϦιʔεͷΠϯϕϯτϦʔΛ͓ ٬༷΁ఏڙ͢Δ׬શϚωʔδυܕͷαʔϏεͰ͢ɻ ؆୯ʹ"84Ϧιʔεͷߏ੒΍มߋΛՄࢹԽ͢Δ͜ͱ ͕ग़དྷ·͢ɻ AWS Config

Slide 17

Slide 17 text

͋ΘͤͯಡΈ͍ͨ "84$POpH͸ͱΓ͋͑ͣ༗ޮʹ͠Α͏ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTDPOpHTUBSU ·ͣ͸͜ΕΛϕʔεʹ༗ޮԽʂ

Slide 18

Slide 18 text

(VBSE%VUZ ڴҖݕ஌ͷϚωʔδυαʔϏε ػցֶशʹΑΓτϥϑΟοΫϩά౳͔Β ո͍͠௨৴Λݕ஌͢Δ ྫ͑͹44)΁ͷϒϧʔτϑΥʔε΍Ϛϧ΢ΣΞ ͷ௨৴ɺϏοτίΠϯͷϚΠχϯάʹ࢖ΘΕ͍ͯ Δ৵֐͞Εͨ&$ΠϯελϯεΛݕग़Ͱ͖·͢ɻ Amazon GuardDuty

Slide 19

Slide 19 text

͋ΘͤͯಡΈ͍ͨ ҰൃͰ(VBSE%VUZΛશϦʔδϣϯ༗ޮԽͯ͠௨஌ઃ ఆ͢ΔςϯϓϨʔτ࡞ͬͨ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFUHVBSEEVUZBMMSFHJPO ·ͣ͸Ұൃ༗ޮԽʂ

Slide 20

Slide 20 text

"844IJFME Ϛωʔδυͳ%%P4อޢαʔϏεͰ ແྉͰ࠷ॳ͔Β--Ϩϕϧ͕อޢ͞Ε͍ͯΔ 4UBOEBSEϓϥϯͱɺ"84ͷ%%P4ઐ໳νʔ Ϝͱ࿈ܞͯ͠-΍େن໛ͳ%%P4ʹର߅͢Δ "EWBODFEϓϥϯ͕͋Δ 4UBOEBSE͸ͱ͘ʹઃఆͷඞཁͳ͠ AWS Shield

Slide 21

Slide 21 text

ͪΌΜͱ༗ޮԽʹͯ͠·͔ͨ͠ʁ w ΋͠·ͩͳΒ͙͢νΣοΫ͠·͠ΐ͏ w ͲΕ΋͍͟ͱ͍͏ͱ͖ʹ໾ཱͭ΋ͷͰ͢ɺීஈ͔Β ༗ޮԽͯ͠ͳ͍ͱઈରࠔΓ·͢ w ྉۚ͸&$ͱ͔ͱൺ΂Δͱ΄ͱΜͲؾʹͳΔ΋ͷͰ ͸ͳ͍ͷͰແࢹ͠·͠ΐ͏ w අ༻ରޮՌ͸ઈେͰ͢

Slide 22

Slide 22 text

ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ 71$؀ڥपΓ

Slide 23

Slide 23 text

·ͣ͸ཧ૝ͷߏ੒

Slide 24

Slide 24 text

ҰൠతʹηΩϡΞͳߏ੒ w ࡾ૚ωοτϫʔΫ w ϑϩϯτҎ֎͸ϓϥΠϕʔτ w Ϛϧν"; w "VUP4DBMJOH w ֎෦௨৴͸/"5ܦ༝ w ඞཁʹԠ͡$MPVE'SPOU΍ 8"'Λಋೖ

Slide 25

Slide 25 text

μϝͳύλʔϯ

Slide 26

Slide 26 text

&$͕୆ͷΈɺ௚઀Πϯλʔωοτʹ໘͍ͯ͠Δ w ৑௕Խ͞Εͯͳ͍ w αʔϏεͱ؅ཧΞΫηε͕ ಉ͡*1 w εέʔϧ͠ͳ͍ w ΠϯελϯεམͪͨΒ෮چ ͠ͳ͍ ͍Ζ͍ΖϦεΩʔ

Slide 27

Slide 27 text

ઃܭͷجຊ Design for Failure ো֐͕ى͖Δ͜ͱΛલఏʹઃܭ͠·͠ΐ͏

Slide 28

Slide 28 text

࠷௿ݶͷϥΠϯ w Ϛϧν";Ͱ৑௕Խ͢Δ w ";ো֐͕ͳͯ͘΋Πϯελϯε͕ࢮ͵Մೳੑ͕͋Δ w ϦλΠΞϝϯτ΍αʔό಺ͷϝϞϦϦʔΫͳͲ w αʔϏε͕গ͠ࢭ·͍͍ͬͯͳΒγϯάϧ";Ͱ΋͍͍ w "VUP4DBMJOH(SPVQʹೖΕΔ w Πϯελϯε୆Ͱ΋࢖͏ w ো֐࣌ʹࣗಈ෮چͯ͘͠ΕΔ w ΠϯελϯεΛࣗಈతʹɾ؆୯ʹ૿΍ͤΔ ౰ॳ༧ఆ͕ͳͯ͘΋ٸ ʹ૿΍ͨ͘͠ͳͬͨͱ͖ʹศར

Slide 29

Slide 29 text

࠷௿ݶͷϥΠϯ w &-#ɾ/BU(BUFXBZΛۦ࢖ͯ͠&$͸ϓϥΠϕʔτʹ w ௚઀֎෦ʹࡽ͞ΕΔͷ͸ྑ͘ͳ͍ w &-#͸Πϯελϯε୆͔ΒͰ΋ϝϦοτ͸͍ͬͺ͍͋Δ w 5-4ऴ୺Ͱ͖Δ w "848"'͕ར༻Ͱ͖Δ w &$ͷ੾Γସ͕͑༰қ w )551पΓͷϝτϦΫεΛऩूͰ͖Δ

Slide 30

Slide 30 text

͋ΘͤͯಡΈ͍ͨ ",*#"BXTୈճجૅฤͰʮෛՙ෼ࢄ͚ͩ͡Όͳ ͍&-#ͷϝϦοτʯΛ࿩͠·ͨ͠ IUUQTEFWDMBTTNFUIPEKQFUDBLJCBBXTFMCNFSJU ϝϦοτ͍ͬͺ͍Ͱ͢Α

Slide 31

Slide 31 text

΋͏গ͠ؤுΔͳΒ w $MPVE'SPOUͰ੩తίϯςϯπΛΩϟογϡ͢Δ w ΞΫηε͕େྔʹདྷͯ΋අ༻ΛकΕΔ w ͳΜͳΒόοΫΤϯυΛ4ʹ͢Δ w ϛυϧ΢ΣΞ͕ͳ͘ͳΔͷͰ੬ऑੑ؅ཧָ͕ʹ w "848"'Λ࢖͏ w ༻్ʹ߹ΘͤͨϚωʔδυϧʔϧΛ࢖͏ͱָʹ׆༻Ͱ͖Δ w ཁ͕݅໌֬ͳΒݸผʹϧʔϧΛνϡʔχϯά

Slide 32

Slide 32 text

͋ΘͤͯಡΈ͍ͨ $MPVE'PSNBUJPOͰ0"*Λ࢖ͬͨ$MPVE'SPOU4ͷ ੩తίϯςϯπ഑৴ΠϯϑϥΛ࡞Δ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTDMPVEGSPOUXJUIPBJCZDMPVEGPSNBUJPO $'4ͳΒ4Λ੩తϗεςΟϯάͤͣ0"*Λར༻͠·͠ΐ͏

Slide 33

Slide 33 text

͋ΘͤͯಡΈ͍ͨ ʲ৽ػೳʳ"848"'ϚωʔδυϧʔϧΛ࢖ͬͯ 8PSE1SFTTʹର͢Δ߈ܸΛ๷͍ͰΈͨSFJOWFOU IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTSFJOWFOUXBGNBOBHFESVMFUSZ Ϛωʔδυϧʔϧͷྑ͞ʹ͍ͭͯৄ͘͠ղઆ͠ɺ߹Θ࣮ͤͯಈ࡞ͷݕূ Λߦͳ͍ͬͯ·͢

Slide 34

Slide 34 text

4FDVSJUZ(SPVQͷ࢖͍ํ w /"$-͸࠷௿ݶʹͯ͠ΞΫηε੍ݶ͸جຊ4(دͤ w Ϧιʔεʹෳ਺4(ΞλονՄೳͳͨΊɺ໾ׂ͝ͱͷ4(Λ࡞੒͢ΔɻҎԼྫ w &-#4(&-#༻ɻQPSUΛڐՄ͢Δ w 8FC4(8FCαʔό༻ɻ&-#4(͔ΒͷΛڐՄ w 0GpDF4(0GpDF͔Βͷ؅ཧΞΫηε ΛڐՄ w ໾ׂؒ͸4(ͷ*%ͰڐՄ͢Δ αϒωοτͷ*1Ϩϯδ͸࢖Θͳ͍ w Ұ࣌తͳ࡞ۀ͸4(ʹ*1Λ௥هͰ͸ͳͯ͘ɺ࡞ۀ༻4(ΛΞλον͢ΔΑ͏ʹ͢Δ w ࡞ۀϛεͰϧʔϧΛফͨ͠Γ͢Δ͜ͱ͕ͳ͘ͳΔ w ܁Γฦ͠ߦ͏ͱ͖ʹ࢖͍΍͍͢

Slide 35

Slide 35 text

ηΩϡϦςΟΛߟྀͨ͠جຊతͳ؀ڥ ͦͷଞ

Slide 36

Slide 36 text

"845SVTUFE"EWJTPSͰηΩϡϦςΟϦεΫͷ؂ࢹ "845SVTUFE"EWJTPS͸ʮίετ࠷దԽʯɺʮύϑΥʔϚϯεʯɺ ʮηΩϡϦςΟʯɺʮϑΥʔϧττϨʔϥϯεʯͷ̐ͭͷ؍఺͔Βɺ ར༻ऀͷ"84؀ڥΛ"84͕ࣗಈͰਫ਼ࠪ͠ɺਪ঑ઃఆͷ͓஌ΒͤΛ͠ ͯ͘ΕΔػೳͰ͢ɻ *".΍4ͷઃఆͳͲ͕໰୊ͳ͍͔νΣοΫͯ͘͠ΕΔɻ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDNBEWFOUDBMFOEBSHFUUJOHTUBSUFEBHBJOBXTUE

Slide 37

Slide 37 text

͋ΘͤͯಡΈ͍ͨ "84ίϯιʔϧͷϩάΠϯ༻ΞΧ΢ϯτΛ*".ͷϕε τϓϥΫςΟεʹैͬͯ࡞੒ͯ͠Έͨ ઃఆฤ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTJBNMPHJOVTFSCFTUQSBDUJDFT ࣮ࡍʹ*".ϕετϓϥΫςΟεΛຬͨ͢Α͏ʹઃఆ͢Δํ๏Λ֬ೝͰ͖·͢

Slide 38

Slide 38 text

*".ͷ؅ཧ͸Ԟ͕ਂ͍͚Ͳɺख͸ൈ͔ͳ͍Α͏ʹ w ਓ͕࢖͏*".6TFS͸.'"ඞਢ w ਓ͕࢖Θͳ͍*".6TFS͸࠷௿ݶͷΈ w *".3PMF͕࢖͑Δ৔߹͸3PMFΛ࢖͏ w ෳ਺ΞΧ΢ϯτΛ·͕ͨΔ৔߹ɺͭͷΞΧ΢ϯτʹਓ͕࢖͏*".6TFSΛ ू໿ͯ͠ɺ4XJUDI3PMF͢Δ w ΫϨσϯγϟϧ͕୔ࢁੜ੒͞Εͳ͍ͷͰ؅ཧ͠΍͍͢ w *".3PMF͸৭Μͳ৔໘Ͱ࡞੒͢Δඞཁ͕͋ΔͨΊɺ؅ཧऀ͕ੜ੒͢ΔΑ͏ ʹ͢Δͱਏ͍ w ՄೳͳݶΓϦςϥγʔڭҭͱ"84$POpHϧʔϧΛ׆༻ͯ͠։ൃऀͰ΋࡞੒Ͱ͖ ΔΑ͏ʹ͢Δ

Slide 39

Slide 39 text

͋ΘͤͯಡΈ͍ͨ େ͖ͳ૊৫ʹͳ͖ͬͯͨΒϚϧνΞΧ΢ϯτઓུͱͯ͠ -BOEJOH;POFͷߟ͑ํΛ׆༻͢Δ <Ϩϙʔτ>4&$r"SDIJUFDUJOH4FDVSJUZ(PWFSOBODF BDSPTTZPVS"84-BOEJOH;POFSFJOWFOU IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU

Slide 40

Slide 40 text

ো֐࣌ͷ෮چํ๏Λ༧Ίݕ౼ w ෮چ͢ΔͨΊͷखஈ͸੔͓͑ͯ͜͏Ͷ w εφοϓγϣοτɺ".*࡞੒ w $MPVE'PSNBUJPOςϯϓϨʔτ w ՄೳͳݶΓࣗಈԽ͓͍ͯͯ͠ खॱॻͱ͔ w σʔλɾϩά͸ߴ଱ٱੑͷ4΁อଘ

Slide 41

Slide 41 text

͋Δ͋Δࣦഊྫ w εΫϦϓτ౳Ͱ*1΍Πϯελϯε*%ΛݻఆύϥϝʔλͰࢦఆ͢Δ w 3%4΍&-#ͷࢦఆ͸'2%/Λ࢖͏ w Πϯελϯε*%౳͸BXTDMJϝλσʔλΛ׆༻ w ಈతͳ஋͸ຒΊࠐ·ͣ44.ύϥϝʔλετΞΛ׆༻ w &$͕"VUP4DBMJOHͰೖΕସΘͬͯϩά͕࢒͍ͬͯͳ͍ w ϩά͸qVFOUE౳Ͱ4ʹग़͢ w 4ʹग़ͨ͠ϩά͸44FMFDU΍"UIFOBͰݕࡧՄೳ w $MPVE8BUDI"HFOUͰ$MPVE8BUDI-PHTͰ΋͍͍

Slide 42

Slide 42 text

͋ΘͤͯಡΈ͍ͨ &$4ZTUFNT.BOBHFSͷύϥϝʔλετΞΛར ༻ͨ͠ΞϓϦέʔγϣϯ؀ڥઃఆͷ؅ཧ IUUQTEFWDMBTTNFUIPEKQDMPVEBXT QBSBNFUFSTUPSFBQQMJDBUJPODPOpH

Slide 43

Slide 43 text

͋ΘͤͯಡΈ͍ͨ 'MVFOUEͰ4ʹϩάΛऩूͯ͠ΈΔ IUUQTEFWDMBTTNFUIPEKQDMPVEBXT qVFOUET ϩά͸4ʹग़ͨ͠΄͏͕͍҆Ͱ͢

Slide 44

Slide 44 text

"84͚ͩͰ͸ग़དྷͳ͍ηΩϡϦςΟରࡦ αʔυύʔςΟ΋׆༻͍ͯͩ͘͠͞ ۩ମతͳ੡඼͸ׂѪ w ΞϯνϚϧ΢ΣΞ w ৵ೖݕ஌ w ϑΥϨϯδοΫ w ߴ౓ͳϩά෼ੳ

Slide 45

Slide 45 text

؂ࢹͷઃܭ

Slide 46

Slide 46 text

ҟৗʹؾͮ͘ʹ͸؂ࢹ͕ඞਢ ͍͍ͩͨ͸$MPVE8BUDIϝτϦΫεͰ֬ೝͰ͖·͢ ઃܭͰ΍Δ͜ͱ w ԿΛݟΔͷ͔ΛܾΊ͓ͯ͘ w μογϡϘʔυΛ࡞੒͓ͯ͘͠ w ΞϥʔϜΛઃఆ͓ͯ͘͠

Slide 47

Slide 47 text

$MPVE8BUDIϝτϦΫεͰԿ͕ݟΕΔͷʁ ଟ͗ͯ͢ॻ͚ͳ͍ͷͰ Ϧιʔε͝ͱάά͍ͬͯͩ͘͞

Slide 48

Slide 48 text

&$पΓͷ؂ࢹϝτϦΫεྫ w "-#5BSHFU(SPVQͷϝτϦΫεͰશମΛ֬ೝ w $POTVNFE-$6Tෛՙঢ়گͷ֬ೝ w 5BSHFU3FTQPOTF5JNFόοΫΤϯυ͔ΒͷϨεϙϯελΠϜ w 6O)FBMUIZ)PTU$PVOUϨεϙϯε͕ͳ͍ϗετͷ֬ೝ w )551$PEF@5BSHFU@99@$PVOUαʔόΤϥʔͷΧ΢ϯτ w ݸผͷ&$Ͱ֬ೝ w $166UJMJ[BUJPO$16࢖༻཰ w .FNPSZ6UJMJ[BUJPO ΧελϜϝτϦΫε ϝϞϦ࢖༻཰ w %JTL6TBHF ΧελϜϝτϦΫε σΟεΫ࢖༻཰ w $16$SFEJU#BMBODFόʔετΠϯελϯεͷ৔߹ͷ࢒ΓΫϨδοτ

Slide 49

Slide 49 text

͋ΘͤͯಡΈ͍ͨ 3VO$PNNBOEͰෳ਺ͷ&$ΠϯελϯεͷΧε λϜϝτϦΫεΛҰׅઃఆ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBNB[POMJOVYQVUDVTUPNNFUSJDTXJUISVODPNNBOE ೖΕ͓ͯ͘ͱศརͰ͢

Slide 50

Slide 50 text

ݟΔ΋ͷΛܾΊͨΒ$MPVE8BUDIμογϡϘʔυ࡞੒ ॏͶͨ΄͏͕͍ ͍ϝτϦΫε͸ ॏͶΔ ༻్ʹ߹Θͤͯ μογϡϘʔυ Λ࡞Δ

Slide 51

Slide 51 text

͋ΘͤͯಡΈ͍ͨ $MPVE8BUDIμογϡϘʔυΛར༻ͯ͠Φʔτεέʔ ϧ؀ڥͷՔಇঢ়ଶΛՄࢹԽͯ͠Έͨ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBVUPTDBMMJOHXJUIDMPVEXBUDIEBTICPBSE ۩ମతͳμογϡϘʔυͷྫ͸ͪ͜ΒΛࢀর

Slide 52

Slide 52 text

ΞϥʔϜΛઃఆ͢Δ w ͱΓ͋͑ͣᮢ஋͸ෳ਺ઃఆ͓͚ͯ͠͹͍͍ ͱ͔ w ௨஌དྷͨΒͲ͏͢Δ͔΋ܾΊ͓ͯ͘ w SFTUBSUIUUQEࣗಈԽͰ͖Δ w &$࠶ىಈࣗಈԽͰ͖Δ w &$࡟আͪΌΜͱ"VUP4DBMJOHͷઃఆ͓ͯ͘͠ w ௨஌಺༰͸ϝʔϧ௚ͩͱݟͮΒ͍͔Β੔ܗͯ͠4MBDLͱ͔ʹ ग़ͨ͠Β͍͍

Slide 53

Slide 53 text

͋ΘͤͯಡΈ͍ͨ -BNCEBͷʮ#MVFQSJOUʯͰ؆୯ʹ4MBDLͱ $MPVE8BUDIΛ࿈ܞͯ͠Έͨ ೥൛ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTMBNCEBCMVFQSJOUTMBDLDMPVEXBUDI ϝʔϧͰड͚औΔͷ͸ͭΒ͍Μ΍Ͱʜ

Slide 54

Slide 54 text

44.ʹΑΔηΩϡϦςΟӡ༻ࣗಈԽ

Slide 55

Slide 55 text

೰·͍͠ӡ༻ͷҰͭ͸੬ऑੑͷ؅ཧ ͳΔ΂ࣗ͘ಈԽ͍ͨ͠

Slide 56

Slide 56 text

"844ZTUFNT.BOBHFSٴͼͦͷίϯϙʔωϯτ ׆༻Ͱ͖ΔαʔϏε Systems Manager Patch Manager Run Command Automation Maintenance Windows

Slide 57

Slide 57 text

4ZTUFNT.BOBHFSͱ͸ w ӡ༻Λշదʹ͢Δπʔϧ܊ w ௨শ44. w ΠϯελϯεʹΠϯετʔϧ͞ΕͨΤʔδΣϯτͰ ಈ࡞ w &$ʹϩάΠϯ͠ͳͯ͘΋͍Ζ͍ΖͰ͖Δ

Slide 58

Slide 58 text

44.ͷίϯϙʔωϯτΛগ͠঺հ w 3VO$PNNBOE w &$ʹϩάΠϯ͠ͳ͍Ͱ೚ҙͷίϚϯυΛൃߦ w TZTUFNDUMTUBUVTIUUQEͱ͔Ͱ͖Δ w 44)ͷϙʔτΛ։͚ͳͯ͘΋͍͍ w τϥϒϧγϡʔτʹ΋ศར Run Command

Slide 59

Slide 59 text

44.ͷίϯϙʔωϯτΛগ͠঺հ w "VUPNBUJPO w ࣗಈԽυΩϡϝϯτΛఆٛͯ͠ɺखॱ௨Γʹࣗಈ࣮ߦ w ҎԼͷΑ͏ͳϫʔΫϑϩʔΛఆٛͰ͖Δ w &$Λ"VUP4DBMJOH͔Β੾Γ཭͠ w &$Λఀࢭ w ".*Λऔಘ w &$ͷىಈ w &$Λ"VUP4DBMJOHʹ໭͢ Automation

Slide 60

Slide 60 text

44.ͷίϯϙʔωϯτΛগ͠঺հ w .BJOUFOBODF8JOEPX w ࣌ؒ΍ִؒΛࢦఆͯ͠ॲཧΛεέδϡʔϦϯά͢Δ w "VUPNBUJPO΍3VO$PNNBOE౳Λ࣮ߦ͢Δ w ෳ਺ͷΠϯελϯεʹॱ൪ʹॲཧͨ͠ΓͰ͖Δ Maintenance Windows

Slide 61

Slide 61 text

44.ͷίϯϙʔωϯτΛগ͠঺հ w 1BUDI.BOBHFS w ύονͷϧʔϧ ϕʔεϥΠϯ Λఆٛͯ͠ύονΛ؅ཧ w ϕʔεϥΠϯͷྫ w ෼ྨ͕4FDVSJUZͰॏཁ౓͕$SJUJDBMͷύον͸͙͢ద༻ w ͦΕҎ֎͸ϦϦʔε೔ޙʹద༻ w ύονͷద༻͸3VO$PNNBOE౳͔Β࣮ࢪ w ঢ়گΛ֬ೝ͢Δ4DBOͱద༻΋ߦ͏*OTUBMMΛબ΂Δ w 8JOEPXT4FSWFS΍֤छ-JOVY΋ରԠ Patch Manager

Slide 62

Slide 62 text

͋ΘͤͯಡΈ͍ͨ &$4ZTUFNT.BOBHFSશ෦·ͱΊͯ঺հ͠· ͢ʂBXTQSFNJFS IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTZTUFNNBOBHFSNBUPNF େ·͔ͳ֓ཁ͸ͪ͜Β ΋͏গ͠ࡉ͔͍ͱ͜Ζ IUUQTXXXTMJEFTIBSFOFU"NB[PO8FC4FSWJDFT+BQBOBXTCMBDLCFMUPOMJOF TFNJOBSBXTTZTUFNTNBOBHFS

Slide 63

Slide 63 text

ࣗಈԽ͢Δπʔϧ͸ἧ͍ͬͯΔ͕ʜ ຊ౰ʹύονద༻ΛࣗಈԽ͍͍ͯ͠ͷʁ

Slide 64

Slide 64 text

ύονద༻ࣗಈԽͷͨΊʹߟ͑Δ͜ͱ w σάϨ΍ΞϓϦ΁ͷࢧো͕ग़ΔՄೳੑ͸ݕূ؀ڥͰ௵͢ w ·ͣ͸ݕূ؀ڥͰࣗಈతʹద༻͔ͯ͠Β໰୊ͳ͚Ε͹ຊ൪؀ڥʹ΋ద༻ ͢Δ w ਖ਼ৗͱ൑அ͢Δج४͸ઃ͚͓ͯ͘ w )551ΞΫηε͕ਖ਼ৗͳΒ͍͍ͷ͔ w ಛఆͷಈ࡞Λ֬ೝ͢Δͷ͔ w ςετέʔε͕ແ͍ͷʹ൑அ͢Δͷ͸ແཧ w ਖ਼ৗੑςετΛࣗಈԽ͢Δ w ཧ૝ w ೔࿨ݟΞοϓσʔτ΋͋Γ w όοΫΞοϓ͔Βͷ෮چखॱཱ͕͍֬ͯ͠Ε͹ɺΨϯΨϯ্͛Ε͹͍͍

Slide 65

Slide 65 text

େࣄͳͷ͸ ύον౰ͯͳ͍ͰΠϯγσϯτى͖ͨΒ ੹೚ॏେͰͬͤ ΍Βͳ͍ࣦഊΑΓ΍ࣦͬͯഊ͢Δ΂͠

Slide 66

Slide 66 text

44.ͷύονద༻ͷख๏ྫ "VUP4DBMJOHͰ୆ͣͭࣗಈతʹύονΛ౰ͯΔ 44."VUPNBUJPO΍ͬͯΈͨ IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTTNBVUPNBUJPOQBUDIBTHJOTUBODF ؀ڥΛॖୀͭͭ͠ఀࢭͤ͞ͳ͍ͰϩʔϦϯάΞοϓσʔτ

Slide 67

Slide 67 text

ॲཧ಺༰ w "VUP4DBMJOH͔Β୆ΠϯελϯεΛબͿ w "VUP4DBMJOH͔Β੾Γ཭͢ 4UBOECZ w ύονͷద༻ w ΠϯελϯεΛ໭͢ w Πϯελϯε͕ͳ͘ͳΔ·Ͱ܁Γฦ͢

Slide 68

Slide 68 text

ৄ͘͠ղઆ લఏͷ؀ڥ &-#"VUP4DBMJOH഑Լʹ &$͕ෳ਺୆͋Δ 44.ΤʔδΣϯτ͸Πϯετʔ ϧࡁΈ ඞཁͳ*".3PMFΞλονࡁΈ

Slide 69

Slide 69 text

ϝϯςφϯε΢Πϯυ΢͔Β࣮ߦ λʔήοτΛ "VUP4DBMJOH(SPVQʹઃఆ εέδϡʔϧ௨Γʹ։࢝ ྫຖि݄༵೔͔࣌Βͱ͔ ϝϯςφϯε΢Πϯυ΢͔Β Πϯελϯεͭͷ৘ใΛ "VUPNBUJPOʹ౉͢

Slide 70

Slide 70 text

"VUPNBUJPOͷॲཧ "VUPNBUJPO͕Πϯελϯε Λ"VUP4DBMJOH͔Β੾Γ཭͢ ਖ਼֬ʹ͸"VUPNBUJPO͔Β $MPVE'PSNBUJPOͰ -BNCEB͕࡞੒͞Εɺ -BNCEBͰ੾Γ཭͢

Slide 71

Slide 71 text

3VO$PNNBOEͰύονద༻ 3VO$PNNBOE͔Βύον ద༻Λߦ͏ ద༻͢ΔϕʔεϥΠϯ͸1BUDI .BOBHFSͰఆٛ͞Ε͍ͯΔ΋ ͷΛར༻͢Δ

Slide 72

Slide 72 text

ݩʹ໭͢܁Γฦ͢ "VUPNBUJPOͰ੾Γ཭ͨ͠Π ϯελϯεΛݩʹ໭͢ ਖ਼֬ʹ͸ɺಉ͘͡ $MPVE'PSNBUJPOͰల։͞ Εͨ-BNCEBͰ໭͢ ࣍ͷΠϯελϯεͰಉ͡ॲཧΛ ࣮ࢪ͢Δ

Slide 73

Slide 73 text

ύονద༻ࣗಈԽͬͯ εςΩ͡Όͳ͍Ͱ͔͢ʁ

Slide 74

Slide 74 text

ηΩϡϦςΟӡ༻ࣗಈԽͷεεϝ w ࣗಈԽ͢ΔͨΊͷઃܭΛ͔ͬ͠Γߦ͏ w ݕূ؀ڥɾςετख๏ɾධՁج४ w ύονϕʔεϥΠϯͷઃఆ w ύονద༻ॱং౳ͷઃܭ w ্ه͸ͲͷΈͪ͋Μ·ΓܾΊͳ͍Ͱӡ༻ʹؙ౤͛ͨ͠Βɺ ӡ༻Ͱۤ࿑͢Δ͔ΒઃܭͰ΍Δ w ઃܭͰ͖ͨͳΒࣗಈԽ͠Α͏

Slide 75

Slide 75 text

·ͱΊ w ӡ༻ʹؙ౤͛͠ͳ͍ͰɺηΩϡΞͳ؀ڥΛઃܭ͢Δ w ϚωʔδυαʔϏεΛ׆༻ͯ͠ͳΔ΂ָ͘ͳ؀ڥʹ ͢Δ w ؂ࢹ΍ύονద༻ͷӡ༻ํ๏ΛͪΌΜͱܾΊΔ w ઃܭͪΌΜͱͰ͖ͨͳΒࣗಈԽͰ͖Δɺ͖ͬͱ

Slide 76

Slide 76 text

ӡ༻ઃܭΛͪΌΜͱ΍ͬͯ Α͍ࣗಈԽϥΠϑΛ Α͍ηΩϡϦςΟϥΠϑΛ

Slide 77

Slide 77 text

͓·͚ ͜͜࠷ۙͷηΩϡϦςΟܥࢀߟࢿྉ

Slide 78

Slide 78 text

͓·͚ w ʮ4Ͱޡͬͨσʔλͷެ։Λ๷͙ύϒϦοΫΞΫηεઃఆػೳ͕௥ Ճ͞Ε·ͨ͠ʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTCMPDLQVCMJDBDDFTT w ΄΅͢΂ͯͷ"84Ϣʔβ͕͜ͷઃఆΛࠓ͙͢༗ޮԽ͢΂͖4ͷσʔλ ΛकΔػೳ w ʮ$MPVE5SBJMͷηΩϡϦςΟ؂ࢹΛͪΐʔ؆୯ʹ΍ͬͯΈͨ ʲ4VNP-PHJDʳʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTDMPVEUSBJMTFDVSJUZBOBMZUJDTXJUITVNPMPHJD w "84ηΩϡϦςΟͷͨΊͷϩά෼ੳΛ؆୯ʹߦ͏ํ๏

Slide 79

Slide 79 text

͓·͚ w ʮ<଎ใ>ηΩϡϦςΟ৘ใΛҰׅͰ؅ཧͰ͖Δ"844FDVSJUZ )VC͕ൃද͞ΕͨͷͰ࢖ͬͯΈ·ͨ͠ʂSFJOWFOUʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDVSJUZ IVC w ৽ػೳ4FDVSJUZ)VCͰηΩϡϦςΟ৘ใͷҰׅ؅ཧ w ʮ<Ϩϙʔτ>4&$"84ͷϑΥϨϯδοΫΛαʔόϨεʹߦ ͏ํ๏SFJOWFOUʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTSFJOWFOUTFDSFQPSU w &$ͷϑΥϨϯδοΫΛαʔόϨεʹ࣮ݱ͢ΔTTNBDRVJSFͷ঺հ

Slide 80

Slide 80 text

͓·͚ w ʮ"848"'ͷϩάΛ'JSFIPTFͰ4ʹग़ྗ͠ϒϩοΫϩ άΛ44FMFDUͰ֬ೝͯ͠Έͨʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXGXBGDPNQSFIFOTJWFMPHHJOH w "848"'ͷϩάऔಘํ๏ w ʮ"848"'ͷϑϧϩάΛ"UIFOBͰ෼ੳͰ͖ΔΑ͏ʹͯ͠ Έͨʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTRVFSZBXTXBGGVMMMPHCZBUIFOB w "848"'ͷϩά෼ੳํ๏

Slide 81

Slide 81 text

͓·͚ w ʮ",*#""84Ͱʮ"84ݻ༗ͷηΩϡϦςΟϦεΫͱ ରࡦʯͱ͍͏λΠτϧͰ஻Γ·ͨ͠ʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBLJCBBXTTQFDJpDBXTTFDVSJUZ w "84ݻ༗ͷϦεΫ΋͋Γ·͢ w ʮ4FDVSJUZ+"84ୈճϨϙʔτTFDKBXT TFDKBXTKBXTVHʯ w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTTFDVSJUZKBXTSFQPSU w 4FDVSJUZ+"84ͷϨϙʔτ