EC2の脆弱性対応で何が使える？ Inspector や SSM あたりを整理する #nakanoshima_dev

by MasahiroKawahara

Slide 1

Slide 1 text

&$ͷ੬ऑੑରԠͰԿ͕࢖͑Δʁ *OTQFDUPS΍ 44.͋ͨΓΛ੔ཧ͢Δ

Slide 2

Slide 2 text

OBLBOPTIJNB@EFW ࣗݾ঺հ ઒ݪ੐େ LBXBIBSBNBTBIJSP ˔ $MBTTNFUIPE"84ࣄۀຊ෦ίϯαϧςΟϯά෦ ˔ d"845PQ&OHJOFFST ˔ ޷͖ͳ΋ͷ ˓ "84"84$-* ˓ "84Ҏ֎πʔϦϯάɺ&NBDTɺѪೣ IUUQTEFWDMBTTNFUIPEKQBVUIPSLBXBIBSBNBTBIJSP

Slide 3

Slide 3 text

OBLBOPTIJNB@EFW ΞδΣϯμ ˔ ੬ऑੑରԠ͸ԿΛ͢Δʁ ˔ ࣝผ΍ద༻Ͱ໾ཱٕͭज़ GPS&$˞ ˔ ͓ΘΓʹ ˞ओʹ -JOVY04 "NB[PO-JOVY౳ ʹߜͬͨ࿩ͱ͠·͢

Slide 4

Slide 4 text

ͦ΋ͦ΋੬ऑੑରԠ͸ԿΛ͢Δʁ

Slide 5

Slide 5 text

OBLBOPTIJNB@EFW ࣝผͱద༻ɺϓϩηεΛҙࣝ͢Δ

Slide 6

Slide 6 text

OBLBOPTIJNB@EFW ࢀߟϓϩηεྫ ը૾Ҿ༻੬ऑੑରࡦͷޮՌతͳਐΊํʢπʔϧ׆༻ฤʣ ʙ ੬ऑੑݕ஌πʔϧ 7VMTΛར༻ͨ͠੬ऑੑରࡦ ʙ IUUQTXXXJQBHPKQTFDVSJUZSFQPSUTUFDIOJDBMXBUDIIKVPKNPBUUQEG

Slide 7

Slide 7 text

ࣝผͰ໾ཱٕͭज़ GPS&$

Slide 8

Slide 8 text

OBLBOPTIJNB@EFW ʮιϑτ΢ΣΞͷ೺Ѳʯͱʮ੬ऑੑͷಛఆʯʹϑΥʔΧε ˞ʮ੬ऑੑؔ࿈৘ใͷ৘ใऩूʯ͸ׂѪ

Slide 9

Slide 9 text

OBLBOPTIJNB@EFW ૉ๿ͳํ๏ rύοέʔδ؅ཧπʔϧΛ࢖͏ ιϑτ΢ΣΞͷ೺Ѳ

Slide 10

Slide 10 text

OBLBOPTIJNB@EFW 5JQT"-Ͱ͸ EOGΛ࢖͏ ZVN͸ EOG΁ͷϙΠϯλʹͳ͍ͬͯΔɻ ιϑτ΢ΣΞͷ೺Ѳ 5IFEFGBVMUTPGUXBSFQBDLBHFNBOBHFNFOUUPPMJO"-JT%/' %/' JTUIFTVDDFTTPSUP:6. UIFQBDLBHFNBOBHFNFOUUPPMJO"- r Ҿ༻1BDLBHFNBOBHFNFOUUPPM "NB[PO-JOVY

Slide 11

Slide 11 text

OBLBOPTIJNB@EFW "84ͳΒ r44.*OWFOUPSZʂ ˞44."844ZTUFNT.BOBHFSͷུশ ˔ αʔόʔͷΠϯϕϯτϦσʔλΛऩूͯ͘͠ΕΔػೳ ˔ ऩूͯ͘͠ΕΔσʔλͷྫ ˓ 04৘ใ ˓ ΞϓϦέʔγϣϯ৘ใ ˓ ωοτϫʔΫ৘ใ ͳͲ ιϑτ΢ΣΞͷ೺Ѳ

Slide 12

Slide 12 text

OBLBOPTIJNB@EFW ৄ͘͠͸ͪ͜ΒΛݟͯͶ ιϑτ΢ΣΞͷ೺Ѳ IUUQTEFWDMBTTNFUIPEKQBSUJDMFTNJEPTVKJUFDITTNJOWFOUPSZ

Slide 13

Slide 13 text

OBLBOPTIJNB@EFW ૉ๿ͳํ๏ rύοέʔδ؅ཧπʔϧΛ࢖͏ ੬ऑੑͷಛఆ

Slide 14

Slide 14 text

OBLBOPTIJNB@EFW "84ͳΒ r"NB[PO*OTQFDUPS ˔ "84ͷ੬ऑੑεΩϟϯαʔϏε ˔ ܧଓతͳεΩϟϯ ˔ τϦΞʔδʹ໾ཱͭ৘ใΛ෇༩͠ ͯϨϙʔτΛࣗಈੜ੒ ੬ऑੑͷಛఆ

Slide 15

Slide 15 text

OBLBOPTIJNB@EFW ࢀߟ*OTQFDUPSը໘ Πϯελϯεผ ੬ऑੑͷಛఆ

Slide 16

Slide 16 text

OBLBOPTIJNB@EFW ࢀߟ*OTQFDUPSը໘ Πϯελϯεผ ੬ऑੑͷಛఆ

Slide 17

Slide 17 text

OBLBOPTIJNB@EFW ࢀߟ*OTQFDUPSը໘ ੬ऑੑৄࡉ ੬ऑੑͷಛఆ

Slide 18

Slide 18 text

OBLBOPTIJNB@EFW ࢀߟ*OTQFDUPSը໘ ੬ऑੑผ ੬ऑੑͷಛఆ

Slide 19

Slide 19 text

OBLBOPTIJNB@EFW ࢀߟ*OTQFDUPSը໘ ੬ऑੑผ ੬ऑੑͷಛఆ

Slide 20

Slide 20 text

OBLBOPTIJNB@EFW 5JQT*OTQFDUPSͷ ΤʔδΣϯτϨε਍அ ʹ Ұൠఏڙ։࢝ (" ͞ΕͨػೳͰ͢ɻ ैདྷ͸&$ʹ44.ΤʔδΣϯτಋೖ͕ඞཁͰ͕ͨ͠ɺ ΤʔδΣϯτແ͠εΩϟϯ΋ՄೳʹͳΓ·ͨ͠ɻ ࢓૊Έͱͯ͠͸εφοϓγϣοτΛ׆༻͠·͢ɻ ੬ऑੑͷಛఆ

Slide 21

Slide 21 text

ద༻Ͱ໾ཱٕͭज़ GPS&$

Slide 22

Slide 22 text

OBLBOPTIJNB@EFW ૉ๿ͳํ๏ rύοέʔδ؅ཧπʔϧΛ࢖͏ XJUI44) ύονద༻

Slide 23

Slide 23 text

OBLBOPTIJNB@EFW "84ͳΒ r44.Λ࢖ͬͯεςοϓΞοϓʂ ύονద༻

Slide 24

Slide 24 text

OBLBOPTIJNB@EFW ৄ͘͠͸ͪ͜ΒΛݟͯͶ ύονద༻ IUUQTEFWDMBTTNFUIPEKQBSUJDMFTBMQBUDIQBUUFSOT

Slide 25

Slide 25 text

͓ΘΓ

Slide 26

Slide 26 text

OBLBOPTIJNB@EFW ͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·͢ʂ

Slide 27

Slide 27 text

OBLBOPTIJNB@EFW ࢀߟ ˔ ੬ऑੑରࡦͷޮՌతͳਐΊํʢπʔϧ׆༻ฤʣ c*1" ˔ "844ZTUFNT.BOBHFSͱ͸ c"84 ˔ "NB[PO*OTQFDUPSͱ͸ c"84 ˔ 44.*OWFOUPSZΛ࢖ͬͯศརʹ &$୨Է͠ʢϋϚΓͲ͜ΖΛఴ͑ͯʣ NJEPTVKJ@UFDIc%FWFMPQFST*0 ˔ ʲ੬ऑੑରԠʳ"NB[PO-JOVYͷ &$Πϯελϯε΁ಛఆύονΛ౰ͯΔํ๏Λͭ c%FWFMPQFST*0