Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
202203_FinJAWS
Search
Sponsored
·
Your Podcast. Everywhere. Effortlessly.
Share. Educate. Inspire. Entertain. You do you. We'll handle the rest.
→
Takuya Yonezawa
March 24, 2022
Technology
380
1
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
202203_FinJAWS
Takuya Yonezawa
March 24, 2022
More Decks by Takuya Yonezawa
See All by Takuya Yonezawa
20260516_SecJAWS_Days
takuyay0ne
5
880
20260422_Midosuji_Tech
takuyay0ne
2
96
脱 雰囲気実装!AgentCoreを良い感じにWEBアプリケーションに組み込むために
takuyay0ne
3
610
20260228_JAWS_Beginner_Kansai
takuyay0ne
5
740
20260204_Midosuji_Tech
takuyay0ne
1
250
20260129_CB_Kansai
takuyay0ne
1
380
20260126_JAWS_Osaka
takuyay0ne
1
70
こんな時代だからこそ! 想定しておきたいアクセスキー漏洩後のムーブ
takuyay0ne
4
820
セキュリティは全員参加!_JAWSのイベントサイトで脅威モデリングを学んでみよう!
takuyay0ne
0
230
Other Decks in Technology
See All in Technology
TypeScript入門 2026
recruitengineers
PRO
3
690
35分でわかるEffective Platform Engineering
nwiizo
5
400
モバイルアプリ開発概論2026
recruitengineers
PRO
6
670
同じWAFが、攻撃の“形”は弾く── 正当な“形”の不正は通す
kuroneko13
0
240
会社紹介資料 / Sansan Company Profile
sansan33
PRO
24
430k
Bits Agent Builder の⼊⾨と活⽤事例
nulabinc
PRO
0
200
事業価値と Engineering 2026年度版
recruitengineers
PRO
51
25k
【GCC2026】大規模言語モデルを活用した内製検索サービスの社内展開や業務活用
bandainamcostudios
PRO
0
260
LanceDB入門
mocobeta
9
600
Master Dataグループ紹介資料
sansan33
PRO
1
4.8k
Genie Codeハンズオン応用編
taka_aki
0
120
エンドユーザー視点で見る SansanのMeraki活用と内製自動化
sansantech
PRO
0
110
Featured
See All Featured
[RailsConf 2023 Opening Keynote] The Magic of Rails
eileencodes
31
10k
Testing 201, or: Great Expectations
jmmastey
46
8.2k
The MySQL Ecosystem @ GitHub 2015
samlambert
251
13k
Writing Fast Ruby
sferik
630
63k
Jamie Indigo - Trashchat’s Guide to Black Boxes: Technical SEO Tactics for LLMs
techseoconnect
PRO
0
620
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
eileencodes
141
35k
The Hidden Cost of Media on the Web [PixelPalooza 2025]
tammyeverts
2
470
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
254
22k
Hiding What from Whom? A Critical Review of the History of Programming languages for Music
tomoyanonymous
3
1.1k
brightonSEO & MeasureFest 2025 - Christian Goodrich - Winning strategies for Black Friday CRO & PPC
cargoodrich
3
770
Docker and Python
trallard
47
4.1k
Designing Experiences People Love
moore
143
24k
Transcript
ΞϓϦΤϯδχΞ͕Ή"84શף ଜ૯߹ݚڀॴ ถᖒ ҙࢤബऑͳ
͡Ίʹ ຊ͓͍͑ͨ͜͠ͱ ݩΦϯϓϨΞϓϦΤϯδχΞͰҙࢥͷڧ͘ͳ͍ถᖒ͕ ͲͷΑ͏ʹ"84ࢿ֨औಘͷϞνϕΛҡ࣋ͨ͠ͷ͔ ࢿ֨Λऔಘ͔ͯ͠ΒԿ͕มΘͬͨͷ͔ ຊ͓͑͠ͳ͍͜ͱ ֤ࢿ֨ࢼݧͷৄࡉͳ߈ུํ๏
͡Ίʹ ҙࢤബऑ ͍ J ͠ TIJ ͘ IBLV ͡Ό͘
KBLV ࣄΛબ·࣮ͨߦ͠Α͏ͱ͢Δࢤܾஅྗ͕ऑ͘ɺ ࣗͷߟ͑Λอͯͣɺਓͷݴಈʹࠨӈ͞Ε͍͢͞·ɻ HPPࣙॻ
͜Εʂ ʹଜ૯߹ݚڀॴʹ৽ଔೖࣾɻۚ༥ۀքͷ͓٬༷͚ʹ ϑϩϯτγεςϜͷߏஙΤϯϋϯεΛ୲ͨ͠ޙʹδϣϒνΣϯδɻ ݱࡏ࢈ۀۀքͷ͓٬༷͚ʹ"84ڥશൠͷઃܭߏஙΛ୲ɻ ࠷ۙ5BJMXJOE$44ʹڵຯɻࢦͤLTνϣοτσΩϧɻ ͖ͳ"84αʔϏε4". 4UFQ'VODUJPOT $PEF#VJME ͖ͳٕज़/FYUKT
5BJMXJOE$44 %PDLFS LT 3BODIFS UBLVZBZPOF ถᖒ 5BLVZB:POF[BXB
ҙࢤڧ͘ͳ͍͋Δ͋Δ
ถᖒҙࢥ͕͋·Γڧ͋͘Γ·ͤΜ ʹճ͔͠ड͚ΒΕͳ͍ࢼݧͳͷʹ Ӎ͕͍͔߱ͬͯͨΒडݧΛஅ೦ ࢼݧձͰචശΕͨ͜ͱʹؾ͘ˠؼ ࢼݧձۙ͘ͷߦྻ͕Ͱ͖Δϥʔϝϯٵ͍ࠐ·ΕΔˠؼ ৽͍͠ྲྀߦΓʹྲྀ͞ΕΔɺͰ͘ଓ͔ͳ͍ ݸਓ։ൃͰ͏8&#ϑϨʔϜϫʔΫΛ͜Ζ͜Ζม͑Δʢ"OHVMBSˠ7VFˠ3FBDUˠ/FYUKTʣ ʮ͖ͳ"84αʔϏεʯ͕݄Πν͘Β͍ͰมΘΔ Α͘͏*B$αʔϏε͜͜Ͱ͜Ζ͜ΖมΘΔʢ$MPVE'PSNBUJPOˠ$%,ˠ5FSSBGPSNʣ
ͨͩɺखΛಈ͔ͯ͠։ൃ͢Δͷ͖🧑💻
"84ֶशͷ͖͔͚ͬ
ࢿ֨औಘͷ͖͔͚ͬd"844VNNJUd
ࢿ֨औಘͷ͖͔͚ͬd"844VNNJUd ೝఆऀϥϯδʹೖΓ͍ͨͬʂʂʂ😇
"84ࢿ֨Λऔಘ͠Α͏ͱࢥ͖͔͚ͬͨͬ "844VNNJUͷೝఆऀϥϯδೖΓ͍ͨ ઐ༻8J'J͕͋ΔʂϊϕϧςΟ͕͋Δʂ͓͕ͭ͋Δʂˠ͕ɺແࢿ֨ͷҝೖΕͣ Ͱݟ͍ͯΔͱɺೝఆऀϥϯδ͕͘͢͝׆گˠ"84ࢿ֨Λ࣋ͬͯΔਓ͜Μͳʹ͍ΔΜͩʂͱϏϏΔ &$Ҏ֎ͷ"84αʔϏεΓ͔ͨͬͨ "844VNNJUͰ༷ʑͳαʔϏεΛͬͨࣄྫΛฉ͍ͯϏϏΔʢ͔͠͠த͔Γ·ͤΜͰͨ͠ɻɻʣ ͓٬༷ʮίετ͕ؾʹͳΔ͔Β&$ʓʓ࣌ʹͳͬͨΒҰׅγϟοτμϯ͢ΔεΫϦϓτ͕ಈ͖·͢ʯ ΅͘ʮຖεΫϦϓτ࣮ߦ໘͘͘͞ͳ͍ʁଞͷαʔϏε͑ͬͱίετ͑ΒΕΔ͚ͣͩͲɺ
ͲͷαʔϏεΛ͑ྑ͍ͷ͔͔ΒΜ͠ɺݟ͕ͳ͍😇ʯ ࣗͷεΩϧɾࢢՁ্ ྡΓʹ࠲͍ܹͬͯͨπϤΤϯδχΞͷํ͕ʮ"84ࢿ֨ྑ͍ͧʯͱݴ͍ͬͯͨ ΤϯδχΞٻਓαΠτݟͯΔͱʮ"84ΤϯδχΞืूʯͷจࣈ͕͍ͬͺ͍
ࢼݧରࡦ
ݸʑͷࢼݧରࡦάάΓ·͠ΐ͏ʂ ઌਓͷϊϋ͕ͨ͘͞Μ͋Γ·͢ʂ
ΞϓϦΤϯδχΞถᖒͷֶशϞνϕʔγϣϯ
ΦϯϓϨͳ8&#αʔϏεPO"84 ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet
&$ΛηΩϡΞʹͯ͠ΈΑ͏ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Private
Subnet
#BDLFOEɺαʔόʔϨεͰಉ͡ࣄͰ͖ΔΜ͡Όͳ͍ʁ %#ͷ&$Πϯελϯεɺ3%4ͷํ͕ӡ༻ָ͡Όͳ͍ʁ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB RDS Public Subnet Private
Subnet API Gateway API Gateway Lambda
8&#αʔόɺ4ͱ$MPVE'SPOUʹͨ͠Β҆͘ͳΔʁ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC RDS Private Subnet API Gateway API
Gateway Lambda S3 Cloud Front
ΞϓϦͷϏϧυˠσϓϩΠΛࣗಈԽָ͍ͯͨ͠͠ʂ ඞཁͳ࣌Ҏ֎ڥΛফͯ͠ίετݮ͍ͨ͠ʂ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC RDS Private Subnet API Gateway
API Gateway Lambda S3 Cloud Front Code Pipeline Cloud Formation
࠲ֶͰֶΜͩ"84αʔϏεΛͲΜͲΜΞϓϦʹऔΓࠐΜͰΈΔ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Code
Pipeline Cloud Formation Beanstalk ECS Cognito KMS Systems Manager Amplify DynamoDB
࠲ֶͰֶΜͩ"84αʔϏεΛͲΜͲΜΞϓϦʹऔΓࠐΜͰΈΔ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Code
Pipeline Cloud Formation Beanstalk ECS Cognito KMS Systems Manager Amplify DynamoDB ॳظͷແࠎͳΞϓϦ͕ͲΜͲΜߴԽ͞Εָ͍ͯ͠ʂ🎉 ͑ΔαʔϏεͷҾ͖ग़͕͠૿͑Δͱָ͍͠ʂ🎉
Ұ࣌͜ΜͳαΠΫϧͰςϯγϣϯϋΠʹͳͬͯ·ͨ͠ "84ࢼݧษڧͰ αʔϏεαʔϏεͷ͍ํΛֶͿ ֶΜͩαʔϏε͍ํΛ ࣮ફͯ͠Έͨ͘ͳΔ ࣗͷΞϓϦڥʹదԠͯ͠ΈΔ ˠಈ͘ͱָ͍͠
ͬͱߴͳ͍ํผαʔϏεΛ Γͨ͘ͳΔ
ࢿ֨શ෦औΔͷʹ͕͔͔࣌ؒΓ·ͨ͠ɺɺ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ SAA࠲ֶʢࢀߟॻʣΦϯϦʔͰ ษڧ͢Δɺ2ճͷෆ߹֨Λୟ͖ग़͢ɻ ϘϩϘϩʹͳΓͳ͕ΒԿͱ͔߹֨͠ɺ શʹ೩͑ਚ͖Δ ಉظʹʮAWSࢿ֨औͬͯͳ͍ͷʁʯͱ ἤΒΕͯCLFΛडݧ͢Δ Ζ͘ʹษڧͤͣʹ߹֨ɺຯΛΊΔ ࠲ֶͰษڧ࢝͠ΊΔɻ༰͕ΞϓϦدΓ ͩͬͨͷͰɺ໘ന͘ͳͬͯ͘Δ&࣮ػͰࢼ ͣ͞ʹ͍ΒΕͳ͘ͳΔ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ SAAͰۤ࿑ͨ͠ɺAWSશൠͷ͕ࣝ ͍ͬͯͨɻจ͕ඇৗʹจͳͷͰ ಡղྗͷ্ҙࣝͭͭ͠ɺԋशͰ ग़͖ͯͨࡉ͔͍Φϓγϣϯܥ࣮ػͰಈ ࡞֬ೝɻ།ҰͷSAPରࡦຊ(※)ಡΈࠐΈ ૯্͛ɻ͔ͳΓ࣌ؒΛ͔͚ͨɻ ˞ IUUQXXXSJDDPKQDSFBUFCPPLDPOUFOUTCPPL@IUNM ʘૣ͞Μஶʂʗ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ ςϯγϣϯϋΠظɻAWSઐଐ෦ୂʹҟಈ ͨ͜͠ͱ͋Γɺֶशҙཉ͕MAXʹɻ ܧଓͯ͠खಈ͔ͭͭ͠ɺԋशͬ ͍ͯͨɻ௨ۈ࣌ؒʹBlackbeltಡΜͩΓɻ What'sNewಡΈ࢝ΊΔ δϣϒνΣϯδ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH શ෦औಘ͔ͯ͠Βࢥ͏͜ͱ Solution ArchitectʢAssociate,Professionalʣ ΊͪΌͪ͘ΌେࣄɻSpecialty͜ͷ2ͭͷ ࢿ֨ͷ͕͔ࣝͬ͠Γʹ͍͍ͭͯΕ Ұؾʹϋʔυϧ͕Լ͕Δ
ࢿ֨Λऔͬͨޙ
"84ࢿ֨Λ࣋ͬͯΔͱ͍͍ࣄ͕ͨ͘͞Μ ᶃνϟϯε͕͕ͬͨ ύϒϦοΫΫϥυઐ෦ୂʹҟಈɺ"84ઐʹͳΔ ଞ෦ॺͷํͱͷίωΫγϣϯɺࣾ֎Ξτϓοτͷػձ ᶄͭΑ্͍࢘ͷݴͬͯΔ͜ͱ͕ཧղͰ͖ΔΑ͏ʹͳͬͨ ʙʙ"84ઃܭͷٞதʙʙ ্࢘ʮ$PO fi
Hɺ(VBSE%VUZɺ*"."DDFTT"OBMZ[FSͷݕ݁ՌΛ4FDVSJUZ)VCʹूͯ͠ 0SHBOJ[BUJPO౷߹Ͱʙʙʯ ถᖒʮ͓ʁܹπϤ্͕࢘ݴ͍ͬͯΔ୯ޠ͕͔ΔͧʂʁͳΜ͔خ͍͠ʯ ᶅγεςϜΛΉࡍͷϓϥΫςΟεֶ͕Δ ֶशΛ௨ͯ͠8FMM"SDIJUFDUFEֶ͕Δ 8FMM"SDIJUFDUFEͳࢥ"84ͷੈքΛඈͼӽ͑ͯʹཱͭ ᶆࢢՁ͕ര্͕Γͨ͠ ΊͬͪΌϝοηʔδΛ͚ΔΑ͏ʹͳΓ·ͨ͠
"84ࢿ֨Λ࣋ͬͯΔͱ͍͍ࣄ͕ͨ͘͞Μ ᶃνϟϯε͕͕ͬͨ ύϒϦοΫΫϥυઐ෦ୂʹҟಈɺ"84ઐʹͳΔ ଞ෦ॺͷํͱͷίωΫγϣϯɺࣾ֎Ξτϓοτͷػձ ᶄͭΑ্͍࢘ͷݴͬͯΔ͜ͱ͕ཧղͰ͖ΔΑ͏ʹͳͬͨ ʙʙ"84ઃܭͷٞதʙʙ ্࢘ʮ$PO fi
Hɺ(VBSE%VUZɺ*"."DDFTT"OBMZ[FSͷݕ݁ՌΛ4FDVSJUZ)VCʹूͯ͠ 0SHBOJ[BUJPO౷߹Ͱʙʙʯ ถᖒʮ͓ʁܹπϤ্͕࢘ݴ͍ͬͯΔ୯ޠ͕͔ΔͧʂʁͳΜ͔خ͍͠ʯ ᶅγεςϜΛΉࡍͷϓϥΫςΟεֶ͕Δ ֶशΛ௨ͯ͠8FMM"SDIJUFDUFEֶ͕Δ 8FMM"SDIJUFDUFEͳࢥ"84ͷੈքΛඈͼӽ͑ͯʹཱͭ ᶆࢢՁ͕ര্͕Γͨ͠ ΊͬͪΌϝοηʔδΛ͚ΔΑ͏ʹͳΓ·ͨ͠
ΤϯδχΞٻਓαΠτ ࢢՁ͕ര্͕Γͨ͠
ΤϯδχΞٻਓαΠτ ࢢՁ͕ര্͕Γͨ͠ खಈฦࣄͩͱ͍͔ͭͳ͍ఔʹֻ͓͚͚·͢🙇
·ͱΊ ࢿֶ֨शΛ௨ͯ͠ʮ"84ͷ͍ํʯҎ্ͷ͜ͱֶ͕Δ 8FMM"SDIJUFDUFEͳߟ͑ํγεςϜߏஙʹඞͣੜ͖Δ ͭͷ͜ͱΛΓൈ͍ͨʂͱڳΛுΕΔ "84ͷֶशʹΑΓνϟϯε͕͍ࠐΜͰ͘Δ "84ࢿ֨*5ք۾Ͱඇৗʹߴ͘ධՁ͞Ε͍ͯΔ δϣϒνΣϯδର֎Ξτϓοτͷۙಓ څྉ্͕͕Δ͔͠Εͳ͍ঢਐͰ͖Δ͔͠Εͳ͍ ʮͱΓ͋͑ͣಈ͔ͯ͠ΈΔʯΛڧ͓͘͢͢Ί ࠲ֶͷΈͩͱͲ͏ͯ͠٫͕ͪ͠ɻखΛಈ͔͢ͱఆண͕·ΔͰҧ͏
·ͣࣗͷ͖ͳಘҙͳྖҬ͔Βֶशͯ͠ΈΔ
·ͱΊ ࢿֶ֨शΛ௨ͯ͠ʮ"84ͷ͍ํʯҎ্ͷ͜ͱֶ͕Δ 8FMM"SDIJUFDUFEͳߟ͑ํγεςϜߏஙʹඞͣੜ͖Δ ͭͷ͜ͱΛΓൈ͍ͨʂͱڳΛுΕΔ "84ͷֶशʹΑΓνϟϯε͕͍ࠐΜͰ͘Δ "84ࢿ֨*5ք۾Ͱඇৗʹߴ͘ධՁ͞Ε͍ͯΔ δϣϒνΣϯδର֎Ξτϓοτͷۙಓ څྉ্͕͕Δ͔͠Εͳ͍ঢਐͰ͖Δ͔͠Εͳ͍ ʮͱΓ͋͑ͣಈ͔ͯ͠ΈΔʯΛڧ͓͘͢͢Ί ࠲ֶͷΈͩͱͲ͏ͯ͠٫͕ͪ͠ɻखΛಈ͔͢ͱఆண͕·ΔͰҧ͏
·ͣࣗͷ͖ͳಘҙͳྖҬ͔Βֶशͯ͠ΈΔ ೦ئͷೝఆऀϥϯδʹ·ͩೖΕͳͦ͞͏Ͱ͢ɻɻ😇
5IBOL:PV