【ビジネス編】AWS活用を考えているなら”必ず！"知っておくべきセキュリティの話

20160825 大阪

Transcript

1. Deep Security؂ࢹɾ෼ੳαʔϏε
   HOOT Security
   ͷ͝঺հ
   Ϋϥεϝιουגࣜձࣾ
   ιϦϡʔγϣϯΞʔΩςΫτ ৿Ӭେࢤ
   

   View Slide

2. ࣗݾ঺հ
   

   View Slide

3. Morinaga Taishi(@morimoritaitai)
   AWS Solution Archetect
   ✦ झຯ : ήʔϜ(શൠ) / ञ / Χϝϥ
   ✦ ڵຯ : Security / DevOps
   ✦ ޷͖ͳαʔϏε:Config/CloudTrail/IAM
   AWS Certified
   Solutions Architect - Professional
   DevOps Engineer - Professional
   I ❤ Config
   

   View Slide

4. ձࣾ঺հ
   

   View Slide

5. Classmethod,Inc.
   

   View Slide

6. AWSʢΠϯϑϥʣ
   ϞόΠϧΞϓϦ
   Ϗοάσʔλ෼ੳ
   IoTʢηϯαʔʣ
   

   View Slide

7. AWSϓϨϛΞ
   ίϯαϧςΟϯάύʔτφʔ
   ʢશੈքͰ46ࣾʣ
   

   View Slide

8. AWS Ҡߦίϯϐςϯγʔɹ ɹɹ
   ʢશੈքͰ17ࣾʣ
   Ϗοάσʔλίϯϐςϯγʔɹɹɹ
   ʢશੈքͰ20ࣾʣ
   ϞόΠϧίϯϐςϯγʔɹɹɹɹ
   ʢશੈքͰ 6ࣾʣ
   

   View Slide

9. ੈքதʹΦϑΟε
   

   View Slide

10. ळ༿ݪɾେࡕɾࡳຈɾ্ӽ
    όϯΫʔόʔɾϕϧϦϯ
    New
    ਓ͕͍Δ৔ॴʹΦϑΟε͕ग़དྷ·͢
    

    View Slide

11. Developers.IO
    

    View Slide

12. 6600ຊͷٕज़هࣄ
    2780ຊͷAWSهࣄ
    ݄ؒ100ສPV
    

    View Slide

13. ࣮຿Λ͍ͯ͠Δࣾһ͕ࣥච
    ϊ΢ϋ΢͸ੵۃతʹެ։
    

    View Slide

14. ฐࣾAWS૯߹ࢧԉαʔϏε
    ʮϝϯόʔζʯͷ͝঺հ
    

    View Slide

15. AWSΛ࢖͍͍ͨɻ
    

    View Slide

16. AWSΛ࢖͍͍ͨɻ
    ৄ͍͠ਓ͕͍ؒͳ͍…
    

    View Slide

17. AWSΛ࢖͍͍ͨɻ
    ৄ͍͠ਓ͕͍ؒͳ͍…
    ΫϨδοτΧʔυ෷͍͸ͪΐͬͱ…
    

    View Slide

18. AWSΛ࢖͍͍ͨɻ
    ৄ͍͠ਓ͕͍ؒͳ͍…
    ΫϨδοτΧʔυ෷͍͸ͪΐͬͱ…
    ग़དྷΔ͚ͩ҆͘࢖͍͍ͨ…
    

    View Slide

19. AWSΛ࢖͍͍ͨɻ
    ৄ͍͠ਓ͕͍ؒͳ͍…
    ΫϨδοτΧʔυ෷͍͸ͪΐͬͱ…
    ग़དྷΔ͚ͩ҆͘࢖͍͍ͨ…
    ӡ༻͸Ͳ͏͢ΔΜͩ…
    

    View Slide

20. ͦͷ͓೰Έɺղܾ͠·͢ɻ
    

    View Slide

21. AWS૯߹ࢧԉαʔϏε
    ϝϯόʔζ
    • AWSͷઃܭίϯαϧ
    • AWS؀ڥߏங
    • ੥ٻॻ෷͍Ͱͷ੥ٻ୅ߦ
    • ֤छਃ੥୅ߦʢ্ݶ؇࿨ਃ੥ͳͲʣ
    • QAαϙʔτɺAWSαϙʔτ୅ߦ
    • AWSར༻ྉۚͷେ෯ׂҾ
    ͝ఏҊ
    ߏங
    ӡ༻
    ؂ࢹ
    

    View Slide

22. AWS૯߹ࢧԉαʔϏε
    ϝϯόʔζ
    • AWSͷઃܭίϯαϧ
    • AWS؀ڥߏங
    • ੥ٻॻ෷͍Ͱͷ੥ٻ୅ߦ
    • ֤छਃ੥୅ߦʢ্ݶ؇࿨ਃ੥ͳͲʣ
    • QAαϙʔτɺAWSαϙʔτ୅ߦ
    • AWSར༻ྉۚͷେ෯ׂҾ
    ͝ఏҊ
    ߏங
    ӡ༻
    ؂ࢹ
    

    View Slide

23. AWSͷϕετϓϥΫςΟεΛ
    ஌Γਚͨ͘͠ΤϯδχΞ͕
    ࣭໰ɾ૬ஊʹͷΓ·͢ɻ
    

    View Slide

24. AWS૯߹ࢧԉαʔϏε
    ϝϯόʔζ
    • AWSͷઃܭίϯαϧ
    • AWS؀ڥߏங
    • ੥ٻॻ෷͍Ͱͷ੥ٻ୅ߦ
    • ֤छਃ੥୅ߦʢ্ݶ؇࿨ਃ੥ͳͲʣ
    • QAαϙʔτɺAWSαϙʔτ୅ߦ
    • AWSར༻ྉۚͷେ෯ׂҾ
    ͝ఏҊ
    ߏங
    ӡ༻
    ؂ࢹ
    

    View Slide

25. ͝ر๬ͷAWS؀ڥΛ
    ૉૣ͘௿ίετͰߏங͠·͢ɻ
    

    View Slide

26. AWS૯߹ࢧԉαʔϏε
    ϝϯόʔζ
    • AWSͷઃܭίϯαϧ
    • AWS؀ڥߏங
    • ੥ٻॻ෷͍Ͱͷ੥ٻ୅ߦ
    • ֤छਃ੥୅ߦʢ্ݶ؇࿨ਃ੥ͳͲʣ
    • QAαϙʔτɺAWSαϙʔτ୅ߦ
    • AWSར༻ྉۚͷେ෯ׂҾ
    ͝ఏҊ
    ߏங
    ӡ༻
    ؂ࢹ
    

    View Slide

27. ੥ٻॻʹΑΔ͓ࢧ෷͍ͳͷͰ
    ԁ෷͍ՄೳͰɺ
    ΫϨδοτΧʔυ͸ෆཁͰ͢ɻ
    

    View Slide

28. AWS૯߹ࢧԉαʔϏε
    ϝϯόʔζ
    • AWSͷઃܭίϯαϧ
    • AWS؀ڥߏங
    • ੥ٻॻ෷͍Ͱͷ੥ٻ୅ߦ
    • ֤छਃ੥୅ߦʢ্ݶ؇࿨ਃ੥ͳͲʣ
    • QAαϙʔτɺAWSαϙʔτ୅ߦ
    • AWSར༻ྉۚͷେ෯ׂҾ
    ͝ఏҊ
    ߏங
    ӡ༻
    ؂ࢹ
    

    View Slide

29. ൥ࡶͳαϙʔτ΁ͷ໰߹ͤ΍
    ֤छਃ੥΋୅ߦͯ͠ߦ͍·͢ɻ
    

    View Slide

30. AWS૯߹ࢧԉαʔϏε
    ϝϯόʔζ
    • AWSͷઃܭίϯαϧ
    • AWS؀ڥߏங
    • ੥ٻॻ෷͍Ͱͷ੥ٻ୅ߦ
    • ֤छਃ੥୅ߦʢ্ݶ؇࿨ਃ੥ͳͲʣ
    • QAαϙʔτɺAWSαϙʔτ୅ߦ
    • AWSར༻ྉۚͷେ෯ׂҾ
    ͝ఏҊ
    ߏங
    ӡ༻
    ؂ࢹ
    

    View Slide

31. పఈͨ͠ར༻෼ੳʹΑΔ
    ίετޮ཰ԽʹΑͬͯ
    ҟ࣍ݩͷׂҾΛఏڙ͠·͢ɻ
    

    View Slide

32. ׂҾྫ
    • EC2ΦϯσϚϯυར༻අ 10%OFF
    • CloudFront௨৴අ 64%OFF
    • AWSΤϯλʔϓϥΠζαϙʔτʹ

    ɹɹɹɹɹɹɹɹɹ૬౰͢Δαϙʔτ ແྉ
    

    View Slide

33. ͞Βʹ෇ଳଛ֐อݥΛ
    ඪ४Ͱ͓෇͚͠·͢ɻ
    

    View Slide

34. ౦ژւ্೔ಈͷAWSϢʔβʔ޲͚
    ઐ༻อݥ͕ඪ४Ͱద༻
    

    View Slide

35. ༷ʑͳΦϓγϣϯαʔϏεΛ
    ͝༻ҙ͓ͯ͠Γ·͢ɻ
    

    View Slide

36. ϝϯόʔζͷΦϓγϣϯαʔϏε
    • ೔தӡ༻ࢧԉαʔϏε
    • 24/365 ແਓࣗಈ؂ࢹαʔϏεʮ͘Β΋Μʯ
    • Deep Security؂ࢹɾ෼ੳαʔϏε

    ɹɹɹɹɹɹɹɹɹɹɹɹʮHoot Securityʯ
    

    View Slide

37. ϝϯόʔζͷΦϓγϣϯαʔϏε
    • ೔தӡ༻ࢧԉαʔϏε
    • 24/365 ແਓࣗಈ؂ࢹαʔϏεʮ͘Β΋Μʯ
    • Deep Security؂ࢹɾ෼ੳαʔϏε

    ɹɹɹɹɹɹɹɹɹɹɹɹʮHoot Securityʯ
    

    View Slide

38. ฐࣾDeep Security؂ࢹɾ෼ੳαʔϏε
    ʮHoot Securityʯͷ͝঺հ
    

    View Slide

39. ηΩϡϦςΟରࡦͰ
    Deep SecurityΛಋೖ͠Α͏ɻ
    

    View Slide

40. ηΩϡϦςΟରࡦͰ
    Deep SecurityΛಋೖ͠Α͏ɻ
    ಋೖͨ͠΋ͷͷઃఆ͕෼͔Βͳ͍…
    

    View Slide

41. ηΩϡϦςΟରࡦͰ
    Deep SecurityΛಋೖ͠Α͏ɻ
    ಋೖͨ͠΋ͷͷઃఆ͕෼͔Βͳ͍…
    DS͕ͪΌΜͱಈ࡞͍ͯ͠Δ͔ෆ҆…
    

    View Slide

42. ηΩϡϦςΟରࡦͰ
    Deep SecurityΛಋೖ͠Α͏ɻ
    ಋೖͨ͠΋ͷͷઃఆ͕෼͔Βͳ͍…
    DS͕ͪΌΜͱಈ࡞͍ͯ͠Δ͔ෆ҆…
    ߈ܸ͞Ε͚ͯͨͲؾ෇͔ͳ͔ͬͨ…
    

    View Slide

43. ηΩϡϦςΟରࡦͰ
    Deep SecurityΛಋೖ͠Α͏ɻ
    ಋೖͨ͠΋ͷͷઃఆ͕෼͔Βͳ͍…
    DS͕ͪΌΜͱಈ࡞͍ͯ͠Δ͔ෆ҆…
    ߈ܸ͞Ε͚ͯͨͲؾ෇͔ͳ͔ͬͨ…
    ͜ͷ߈ܸͬͯͲ͏ରࡦ͢Ε͹͍͍ͷ…ʁ
    

    View Slide

44. ͦͷ͓೰Έɺղܾ͠·͢ɻ
    

    View Slide

45. Deep Security؂ࢹɾ෼ੳαʔϏε
    Hoot Security
    • ॳظߏங
    • ηΩϡϦςΟΠϯγσϯτ෼ੳ
    • ϩάɺϨϙʔτ
    • γεςϜϑΝϯΫγϣϯ؂ࢹ
    • ϙϦγʔνϡʔχϯά
    • Web ϙʔλϧαΠτ
    • ৘ใఏڙ
    ෼ੳ
    ؂ࢹ
    

    View Slide

46. Deep Security؂ࢹɾ෼ੳαʔϏε
    Hoot Security
    • ॳظߏங
    • ηΩϡϦςΟΠϯγσϯτ෼ੳ
    • ϩάɺϨϙʔτ
    • γεςϜϑΝϯΫγϣϯ؂ࢹ
    • ϙϦγʔνϡʔχϯά
    • Web ϙʔλϧαΠτ
    • ৘ใఏڙ
    ෼ੳ
    ؂ࢹ
    

    View Slide

47. Trend Microͷೝఆࢿ֨Λ
    ࣋ͬͨࣾһ͕ߏஙΛߦ͍·͢ɻ
    

    View Slide

48. Deep Security؂ࢹɾ෼ੳαʔϏε
    Hoot Security
    • ॳظߏங
    • ηΩϡϦςΟΠϯγσϯτ෼ੳ
    • ϩάɺϨϙʔτ
    • γεςϜϑΝϯΫγϣϯ؂ࢹ
    • ϙϦγʔνϡʔχϯά
    • Web ϙʔλϧαΠτ
    • ৘ใఏڙ
    ෼ੳ
    ؂ࢹ
    

    View Slide

49. ηΩϡϦςΟͷઐ໳Ո͕
    ϩάΛ෼ੳ͠ɺඞཁʹԠͯ͡
    ϝʔϧ௨஌͍ͨ͠·͢ɻ
    

    View Slide

50. ݄࣍ΠϯγσϯτϨϙʔτΛ
    ૹ෇͍ͨ͠·͢ɻ
    

    View Slide

51. Deep Security؂ࢹɾ෼ੳαʔϏε
    Hoot Security
    • ॳظߏங
    • ηΩϡϦςΟΠϯγσϯτ෼ੳ
    • ϩάɺϨϙʔτ
    • γεςϜϑΝϯΫγϣϯ؂ࢹ
    • ϙϦγʔνϡʔχϯά
    • Web ϙʔλϧαΠτ
    • ৘ใఏڙ
    ෼ੳ
    ؂ࢹ
    

    View Slide

52. Deep Securityͷػೳ͕
    ਖ਼ৗʹಈ࡞͍ͯ͠Δ͔Λ
    24/365༗ਓ؂ࢹ͠·͢ɻ
    

    View Slide

53. Deep Security؂ࢹɾ෼ੳαʔϏε
    Hoot Security
    • ॳظߏங
    • ηΩϡϦςΟΠϯγσϯτ෼ੳ
    • ϩάɺϨϙʔτ
    • γεςϜϑΝϯΫγϣϯ؂ࢹ
    • ϙϦγʔνϡʔχϯά
    • Web ϙʔλϧαΠτ
    • ৘ใఏڙ
    ෼ੳ
    ؂ࢹ
    

    View Slide

54. ੬ऑੑɺαʔόઃఆ౳ʹԠͯ͡
    ϙϦγʔνϡʔχϯά͠·͢ɻ
    

    View Slide

55. ࣄྫ͝঺հ
    • ࣜձࣾIDOM༷ʢچΨϦόʔΠϯλʔφγϣφϧ༷ʣ
    http://classmethod.jp/cases/gulliver/gulliver-221616-com/
    

    View Slide

56. ʮηΩϡϦςΟ͕ؾʹͳΔʯ
    ʮDeep Security࢖͍͍ͨʯ
    ͱ͍͏ํ͸͝ݕ౼Լ͍͞ɻ
    

    View Slide

57. Πϕϯτͷ͝঺հ
    

    View Slide

58. େࡕͰ͸9/15։࠵༧ఆ
    http://dev.classmethod.jp/news/bigdata-20160915-27/
    

    View Slide

59. 9/16։࠵༧ఆ
    http://dev.classmethod.jp/news/aws-premier-night-2/
    

    View Slide

60. ͋Γ͕ͱ͏͍͟͝·ͨ͠ɻ
    

    View Slide

61. View Slide