Slide 1

Slide 1 text

"84ࣄۀຊ෦ίϯαϧςΟϯά෦ઍ༿޾޺ʢνόϢΩʣ ࢲͷ"84ѪΛฉ͚ʂ ͕͜͜޷͖ͩΑ "84*".ͷ"84؅ཧϙϦγʔ

Slide 2

Slide 2 text

ࣗݾ঺հ ઍ༿޾޺ νόϢΩ w"84ྺɿ೥ڧ w޷͖ͳ"84αʔϏεɿ"84*". w޷͖ͳ͓໘ͷछྨɿఱۡͷ͓໘ ࠓճͷεϥΠυ͸ຕ͋Γ·͢

Slide 3

Slide 3 text

ɻ

Slide 4

Slide 4 text

ͳΜͷ਺ࣈ͔Θ͔ΔͰ͠ΐ͏͔ʁ

Slide 5

Slide 5 text

ͳΜͷ਺ࣈ͔Θ͔ΔͰ͠ΐ͏͔ʁ Կ͔Λ߹ܭͨ͠਺Ͱ͢

Slide 6

Slide 6 text

ݴ͑Δ͔ͳʁ ϙ˓Ϟϯͷछྨ ˞8JLJQFEJBΑΓɻୈੈ୅͸আ͘ɻ IUUQTKBXJLJQFEJBPSHXJLJશࠃϙέϞϯਤؑॱͷϙέϞϯҰཡ

Slide 7

Slide 7 text

ϙ˓ϞϯΑΓଟ͍"84؅ཧϙϦγʔ "84؅ཧ ϙϦγʔͷ਺ ˞ +5$ ࣌఺ ͰΞΫςΟϒͳ΋ͷ ϙ˓Ϟϯͷछྨ ˞8JLJQFEJBΑΓɻୈੈ୅͸আ͘ɻ IUUQTKBXJLJQFEJBPSHXJLJશࠃϙέϞϯਤؑॱͷϙέϞϯҰཡ

Slide 8

Slide 8 text

͕͜͜޷͖ͩΑ"84؅ཧϙϦγʔ wࣗಈͰ࡞੒ɾߋ৽͞ΕΔ wͨ͘͞Μ͋Δ͠ɺͨ·ʹ͍ͳ͘ͳΔ w໊শ΍આ໌ʹϑϦʔμϜ͞Λײ͡Δ ޷͖ͩͳ͊

Slide 9

Slide 9 text

"84؅ཧϙϦγʔͱ͸

Slide 10

Slide 10 text

"84؅ཧϙϦγʔͱ͸ "84͕؅ཧ͢ΔϙϦγʔ ͷ͜ͱͰ͢

Slide 11

Slide 11 text

"84؅ཧϙϦγʔͱ͸ "84͕؅ཧ͢ΔϙϦγʔ ͷ͜ͱͰ͢ ΠϯϥΠϯͰͳ͍ ΧελϚʔ؅ཧͰͳ͍

Slide 12

Slide 12 text

ϙϦγʔΛΠϯϥΠϯ͔؅ཧ͔ͷ੾ΓޱͰݟ͍ͯ͘ ϙϦγʔ ΠϯϥΠϯϙϦγʔ ؅ཧϙϦγʔ όʔδϣϯ؅ཧɺελϯυΞϩϯɺ ෳ਺Ϧιʔε΁ͷΞλον͕Մೳ *".Ϧιʔε΁ͷຒΊࠐΈ ೥݄ʹొ৔

Slide 13

Slide 13 text

ϙϦγʔ ΠϯϥΠϯϙϦγʔ ؅ཧϙϦγʔ ΧελϚʔ ؅ཧϙϦγʔ "84 ؅ཧϙϦγʔ όʔδϣϯ؅ཧɺελϯυΞϩϯɺ ෳ਺Ϧιʔε΁ͷΞλον͕Մೳ *".Ϧιʔε΁ͷຒΊࠐΈ "84ʹΑΓ؅ཧ͞ΕΔ ΧελϚʔ͕؅ཧ ࠓճऔΓ্͛Δͷ͸͜Ε ϙϦγʔΛΠϯϥΠϯ͔؅ཧ͔ͷ੾ΓޱͰݟ͍ͯ͘

Slide 14

Slide 14 text

ϙϦγʔ ΠϯϥΠϯϙϦγʔ ؅ཧϙϦγʔ ΧελϚʔ ؅ཧϙϦγʔ όʔδϣϯ؅ཧɺελϯυΞϩϯɺ ෳ਺Ϧιʔε΁ͷΞλον͕Մೳ *".Ϧιʔε΁ͷຒΊࠐΈ "84ʹΑΓ؅ཧ͞ΕΔ ৬຿ػೳ༻ αʔϏε ϩʔϧ༻ αʔϏεϦϯΫ ϩʔϧ 4-3 ༻ ্هҎ֎ ΧελϚʔ͕؅ཧ ϙϦγʔͷύε͔Β൑ผ ϙϦγʔΛΠϯϥΠϯ͔؅ཧ͔ͷ੾ΓޱͰݟ͍ͯ͘ "84 ؅ཧϙϦγʔ

Slide 15

Slide 15 text

ͨͷ͍͠ʂ ϙϦγʔ ΠϯϥΠϯϙϦγʔ ؅ཧϙϦγʔ ΧελϚʔ ؅ཧϙϦγʔ ৬຿ػೳ༻ αʔϏε ϩʔϧ༻ αʔϏεϦϯΫ ϩʔϧ 4-3 ༻ ্هҎ֎ ͨͷ͍͠ʂ "84 ؅ཧϙϦγʔ ৽αʔϏεɺ৽ػೳͷൃදʹઌߦͯ͠ ࡞੒ɾߋ৽͞Ε͍ͯΔ͜ͱ͕ଟ͍

Slide 16

Slide 16 text

਺ࣈͰݟΔ "84؅ཧϙϦγʔ

Slide 17

Slide 17 text

࠶ܝ "84؅ཧ ϙϦγʔͷ਺ ϙ˓Ϟϯͷछྨ ˞8JLJQFEJBΑΓɻୈੈ୅͸আ͘ɻ IUUQTKBXJLJQFEJBPSHXJLJશࠃϙέϞϯਤؑॱͷϙέϞϯҰཡ ˞ +5$ ࣌఺ ͰΞΫςΟϒͳ΋ͷ

Slide 18

Slide 18 text

Ͳͷ͘Β͍ͷϖʔεͰ ૿͍͑ͯΔͷ͔ʁ

Slide 19

Slide 19 text

೥͝ͱʹݟΔ"84؅ཧϙϦγʔͷ૿Ճ ΄΅ຖ೥௒ ૿͑ͯΔ

Slide 20

Slide 20 text

Ͳͷ݄͕͍ͪ͹Μ ૿͍͑ͯΔͷ͔ʁ

Slide 21

Slide 21 text

݄͝ͱʹݟΔ"84؅ཧϙϦγʔͷ૿Ճ ݄΋ଟ͍ͷʁ

Slide 22

Slide 22 text

೥ͱ݄͝ͱʹݟΔ"84؅ཧϙϦγʔͷ૿Ճ ೥݄ ͕ଟ͍͚ͩͩͬͨ

Slide 23

Slide 23 text

͜Ε·Ͱͷ૿Ճ܏޲Λ ݄͝ͱʹݟΔ

Slide 24

Slide 24 text

΍ͬͺΓ݄ͱ݄͕ͭΑ͍

Slide 25

Slide 25 text

΍ͬͺΓ݄ͱ݄͕ͭΑ͍ ೥຤͸ "84؅ཧϙϦγʔͷ०

Slide 26

Slide 26 text

ݮΔ͜ͱ΋͋ΔΑɺ "84؅ཧϙϦγʔ

Slide 27

Slide 27 text

ඇਪ঑ͷ"84؅ཧϙϦγʔ wඇਪ঑ʢഇࢭɾ%FQSFDBUFEʣʹͳΔͱʜʜ wΞλονࡁΈͷ৔߹ wΞλον͸ܧଓ͞ΕΔ wϙϦγʔͷޮྗ΋ܧଓ͞ΕΔ wΞλον͞Εͯͳ͍৔߹ w৽نͷΞλον͕Ͱ͖ͳ͍ʢ*T"UUBDIBCMFGBMTFʣ wදࣔ͞Εͳ͘ͳΔ

Slide 28

Slide 28 text

΋͍ͬͨͳͯ͘ϦϦʔεͰ͖ͳ͍ "NB[PO$POOFDU'VMM"DDFTT "NB[PO$POOFDU'VMM"DDFTT "NB[PO$POOFDU@'VMM"DDFTT %FQSFDBUFEʢഇࢭࡁΈʣ ৽͍͠ϙϦγʔ

Slide 29

Slide 29 text

কདྷతʹඇਪ঑ʹͳΓͦ͏ͳϙϦγʔ w"NB[PO%ZOBNP%#'VMM"DDFTTXJUI%BUB1JQFMJOF w"NB[PO&$3PMFGPS44. w"NB[PO&MBTUJD.BQ3FEVDF'VMM"DDFTT w"NB[PO&MBTUJD.BQ3FEVDF3PMF w"84%BUB1JQFMJOF3PMF ʮઆ໌ʯʹEFQSFDBUJPO ΋͘͠͸EFQSFDBUFEΛ ؚΉ΋ͷΛ୳͠·ͨ͠

Slide 30

Slide 30 text

"84؅ཧϙϦγʔ ͷѪͰํ

Slide 31

Slide 31 text

"84$-*ͱKRͰ$47ग़ྗͯ͠ εϓϨουγʔτͰѪͰ·͠ΐ͏

Slide 32

Slide 32 text

BXTJBNMJTUQPMJDJFT aws iam list-policies\ --scope AWS\ --max-items 1000\ | jq -r ' ["ϙϦγʔ໊","ύε","σϑΥϧτόʔδϣϯ","࡞੒೔࣌","ߋ৽೔࣌","ΞλονՄ൱"], (.Policies[] | [.PolicyName,.Path,.DefaultVersionId,.CreateDate,.UpdateDate,.IsAttachable]) | @csv' | pbcopy είʔϓͱͯ͠ʮ"84ʯΛࢦఆ͠ɺ KRͰඞཁͳՕॴͷΈϑΟϧλϦϯά$47Խ͠ɺ ΫϦοϓϘʔυʹίϐʔʢ.BDͷ৔߹ʣ Ұ౓ͷ࣮ߦͰશྔΛ औಘͰ͖ͳ͘ͳΔ೔΋ۙͦ͏

Slide 33

Slide 33 text

͜͏ͯ͠ɺ

Slide 34

Slide 34 text

͜͏ͯ͠ɺ͜͏ͯ͠ɺ

Slide 35

Slide 35 text

͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ͯ͠ɺ

Slide 36

Slide 36 text

͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏

Slide 37

Slide 37 text

͜͏ͯ͠ɺ

Slide 38

Slide 38 text

͜͏ͯ͠ɺ͜͏ͯ͠ɺ

Slide 39

Slide 39 text

͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ͯ͠ɺ

Slide 40

Slide 40 text

͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏

Slide 41

Slide 41 text

৚݅ͰϑΟϧλ ;ˠ"Ͱฒ΂ $06/5*'4 ͋ͱ͸͍͔Α͏ʹ΋ʂ -&/

Slide 42

Slide 42 text

ʮઆ໌ʯ΋ཉ͚͠Ε͹BXTJBNHFUQPMJDZ aws iam list-policies --max-items 1000 --scope AWS | jq -r '.Policies[].Arn' \ | while read policy; do aws iam get-policy --policy-arn $policy \ | jq -r '.Policy | [.PolicyName,.Description] | @csv' >> policies.csv done MJTUQPMJDJFTͷ݁ՌΛͻͱͭͣͭ৯Θͤͯ HFUQPMJDZͰϙϦγʔ໊ɺઆ໌Λग़ྗ ͋ͱ͸7-00,61ؔ਺ͰؤுΔ ෼͘Β͍͔͔ͬͨ ؾ͕͠·͢

Slide 43

Slide 43 text

"84؅ཧϙϦγʔ ͳΜͰ΋ϥϯΩϯά ˞ +5$ ࣌఺

Slide 44

Slide 44 text

ϙϦγʔ໊ͷ௕͞

Slide 45

Slide 45 text

ϙϦγʔ໊ͷ௕͞ͷ্ݶ͸ ͍ͪ͹Μ௕͍ จࣈ "NB[PO4BHF.BLFS4FSWJDF$BUBMPH1SPEVDUT$MPVEGPSNBUJPO4FSWJDF3PMF1PMJDZ ͍ͪ͹Μ୹͍ จࣈ #JMMJOH ௕͍Αʂ ୹͍Αʂ ฏۉ஋ɿจࣈ தԝ஋ɿจࣈ

Slide 46

Slide 46 text

આ໌ͷ௕͞

Slide 47

Slide 47 text

આ໌ͷ௕͞ͷ্ݶ͸ ͍ͪ͹Μ௕͍ จࣈ 5IJTQPMJDZJTBUUBDIFEUPUIF&MBTUJD%JTBTUFS3FDPWFSZ3FQMJDBUJPOTFSWFSTJOTUBODFSPMF5IJTQPMJDZBMMPXTUIF&MBTUJD%JTBTUFS3FDPWFSZ %34 3FQMJDBUJPO4FSWFST XIJDIBSF&$JOTUBODFTMBVODIFECZ&MBTUJD%JTBTUFS3FDPWFSZUPDPNNVOJDBUFXJUIUIF%34TFSWJDF BOEUPDSFBUF TOBQTIPUTJOZPVS"84BDDPVOU"O*".SPMFXJUIUIJTQPMJDZJTBUUBDIFE BTBO&$*OTUBODF1SP fi MF CZ&MBTUJD%JTBTUFS3FDPWFSZUPUIF%34 3FQMJDBUJPO4FSWFSTXIJDIBSFBVUPNBUJDBMMZMBVODIFEBOEUFSNJOBUFECZ%34 BTOFFEFE%343FQMJDBUJPO4FSWFSTBSFVTFEUPGBDJMJUBUFEBUB SFQMJDBUJPOGSPNZPVSFYUFSOBMTFSWFSTUP"84 BTQBSUPGUIFSFDPWFSZQSPDFTTNBOBHFECZ%348FEPOPUSFDPNNFOEUIBUZPVBUUBDIUIJT QPMJDZUPZPVS*".VTFSTPSSPMFT ͍ͪ͹Μ୹͍ จࣈ %FOZBMMBDDFTT ௕͍Αʂ ඒ͢͠͞Βײ͡Δ ฏۉ஋ɿจࣈ தԝ஋ɿจࣈ "84&MBTUJD%JTBTUFS3FDPWFSZ3FQMJDBUJPO4FSWFS1PMJDZ "84%FOZ"MM

Slide 48

Slide 48 text

όʔδϣϯ਺

Slide 49

Slide 49 text

ͪͳΈʹ7JFX0OMZ"DDFTT͸όʔδϣϯ਺ͰҐ 3FBE0OMZ"DDFTT "84$PO fi H3PMF 4FDVSJUZ"VEJU "84$PO fi H4FSWJDF3PMF1PMJDZ '.44FSWJDF3PMF1PMJDZ "844VQQPSU4FSWJDF3PMF1PMJDZ "NB[PO4BHF.BLFS'VMM"DDFTT $MPVEXBUDI"QQMJDBUJPO*OTJHIUT4FSWJDF-JOLFE3PMF1PMJDZ "NB[PO&$4@'VMM"DDFTT "844FSWJDF3PMF'PS*NBHF#VJMEFS όʔδϣϯ਺501 ɹ ɹ ɹ ɹ ɹ ɹ ɹ ɹ ɹ ͓ੈ࿩ʹͳͬͯ·͢

Slide 50

Slide 50 text

͕͜͜޷͖ͩΑ "84؅ཧϙϦγʔ

Slide 51

Slide 51 text

ϙϦγʔ໊ͱ͔આ໌ʹ ͳΜ͔͜͏ʜʜ ϑϦʔμϜ͞Λײ͡Δ

Slide 52

Slide 52 text

͔ͦ͜͜͠ʹજΉѪ͠͞ϙΠϯτ wʙ3FBE0OMZ"DDFTTͩͬͨΓʙ3FBE0OMZͩͬͨΓ w3FBE0OMZ͡Όͳͯ͘3FBEPOMZ΋͋Δ wʮ"84ʯ΍ʮ"NB[POʯͷ઀಄͍ࣙͭͨΓ͔ͭͳ͔ͬͨΓ͢Δ wʙ'VMM"DDFTT ʙ3FBE0OMZ"DDFTTͷલʹΞϯμʔείΞ͋ͬͨΓͳ͔ͬͨΓ wʙ4FSWJDF3PMFͩͬͨΓʙ4FSWJDF3PMF1PMJDZͩͬͨΓ wαʔϏε໊ུ͕শͩͬͨΓϑϧ໊শͩͬͨΓ wΞϯμʔείΞͦ͜ʹڬΉΜͩʜʜͱͳͬͨΓ "NB[PO$POOFDU'VMM"DDFTT "NB[PO$POOFDU@'VMM"DDFTT "84$PO fi H3PMF "84@$PO fi H3PMF "84$MPVE5SBJM3FBE0OMZ"DDFTT "84$MPVE5SBJM@3FBE0OMZ"DDFTT ϙϦγʔͷ໋໊نଇ·ΘΓ

Slide 53

Slide 53 text

͔ͦ͜͜͠ʹજΉѪ͠͞ϙΠϯτ w"NB[PO$IJNF4%, w"84&MBTUJD#FBOTUBML&OIBODFE)FBMUI w"NB[PO'SFF350405"6QEBUF w"MFYB'PS#VTJOFTT%FWJDF4FUVQ w"84$MPVE'SPOU-PHHFS w"84*P53VMF"DUJPOT ͪΐͬͱݟͩͱϙϦγʔ໊ͱΘ͔Βͳ͍ݸੑతͳ໊લͨͪ w"84-BNCEB*OWPDBUJPO%ZOBNP%# w*".6TFS44),FZT w"NB[PO44.1BUDI"TTPDJBUJPO w"840QT8PSLT3FHJTUFS$-*@&$ w*743FDPSE5P4 w&$*OTUBODF$POOFDU

Slide 54

Slide 54 text

͔ͦ͜͜͠ʹજΉѪ͠͞ϙΠϯτ w຤ඌͷʮʯ͕͍ͭͨΓ͔ͭͳ͔ͬͨΓ wͪͳΈʹʮʯ͕෇͘ͷ͸ݸதݸ w5IJTQPMJDZ͔Β࢝·ͬͨΓ5IJT*".QPMJDZ͔Β࢝·ͬͨΓ w͍͖ͳΓಈࢺ͔Β࢝·Δύλʔϯ΋ଟ͍ wSFBEPOMZͩͬͨΓSFBEPOMZͩͬͨΓ w%0/0564&ͬͯॻ͍ͯ͋ͬͨΓ wจࣈॻ͍ͯ͋ͬͨΓจࣈͰऴΘͬͨΓ ϙϦγʔͷઆ໌ͷதʹ΋

Slide 55

Slide 55 text

͢΂͕ͯѪ͓͍͠ͳʜʜ

Slide 56

Slide 56 text

ͩͬͯͦ͜ʹ͸ ྺ࢙ νʔϜͷଟ͞ ײ͡ΒΕΔ͔Β ͱ Λ

Slide 57

Slide 57 text

"84ͱ͍͏αʔϏεͷཪʹ͍Δ਺ଟͷਓʑʜʜ

Slide 58

Slide 58 text

·ͱΊ

Slide 59

Slide 59 text

͕͜͜޷͖ͩΑ"84؅ཧϙϦγʔ wͦ͜ʹ͸ະདྷɺͦͯ͠ྺ࢙ɺͭ·Γ"84ͷ͢΂͕ͯ ͋Δ wόϦΤʔγϣϯ๛͔ɺͦΕͰ͍ͯফ͑Δ͔΋͠Εͳ͍ ၪ͞ wਪ͠ϙϦγʔΛݟ͚ͭΑ͏ʂ

Slide 60

Slide 60 text

Ͳ͕ͬͪઌʹ ʹ౸ୡ͢Δ͔ͳʁ

Slide 61

Slide 61 text

No content