15分でわかるCloud One Workload Security を利用したEC2キュリティ対策

イベントDevelopersIO 2022で「15分でわかるCloud One Workload Security を利用したEC2キュリティ対策」についてのビデオセッション登壇資料です。
イベントページ:https://classmethod.jp/m/developers-io/

Transcript

1. 15 Cloud One Workload Security EC2 2023/8/22 AWS
2. 2 • ( ) • AWS • • EC2
3. 3 • Cloud One Workload Security (C1WS) • EC2利用者にオススメできる理由 • Workload Securityの仕組みについて • 8 • • •
4. Cloud One Workload Security (C1WS) 4 1
5. Cloud One 5 Cloud One
6. EC2 6 Workload Security 8 1 ⾒ • • ( IPS/IDS ) • Web • • • • • ( XDR )
7. EC2 7 AWS 課 C1 • Amazon Linux 2023 (NEW) / Amazon Linux 2 / Amazon Linux • AWS IAM AWS • Amazon SNS
8. EC2 8 AWS Marketplace CPPO / SPPO • AWS https://aws.amazon.com/marketplace/pp/prodview-g232pyu6l55l4 2023 8
9. Workload Security 9 Workload Security Deep Security SaaS SaaS DSA 11
10. Workload Security 10 Workload Security Amazon EC2 Azure Virtual Machines Google Compute Engine
11. 8 11 C1WS Agent 8 • • ( IPS/IDS ) • Web • • • • • ( XDR )
13. 13 Smart Protection
14. ( IPS/IDS ) 14 OS SQL
15. ( IPS/IDS ) 15 ⾒ ⾒
16. ( IPS/IDS ) 16 C1WS
17. Web 17 Web URL URL Smart Protection Network ⾒
18. 18 C1WS 2 4
19. 19 ⾒
20. 20 ⾒
21. 21 ⾒
23. 23 OS
24. 24 Windows Linux Apache ⾒
25. ( XDR ) 25 Trend Vision One
26. ( XDR ) 26 Trend Vision One
27. 27 Cloud One Workload Security AWS Marketplace Units Cost Workload Essentials: Anti-malware, WRS, and XDR only, per workload /hr $0.007 / unit Workload: Per Micro-Med EC2 instance, WorkSpace, Other Cloud 1 vCPU/Hr $0.011 / unit Workload: Per Large EC2 instance, Other Cloud 2 vCPU/Hr $0.032 / unit Workload: Per XL & larger EC2 instance, Other Cloud 4+ vCPU/Hr $0.047 / unit Workload: Per Data Center / Not Cloud instance /Hr $0.047 / unit m6i.large $0.032 × 24 × 31 = $23.8 2023 8
28. 28 Workload Essentials m6i.large $0.007 × 24 × 31 = $5.2 Web ( IPS/IDS ) ( XDR ) Essentials Web ( IPS/IDS ) ( XDR )
29. 29 AWS SPPO AWS Marketplace 5 SPPO CPPO AWS ID Private Offer
30. 30 Q. A. Cloud One 30 1 20
31. 31 Q. Workload Security Deep Security A. Workload Security 32 91 Workload Security https://cloudone.trendmicro.com/docs/jp/workload-security/events/#How
32. 32 Q. Workload Security A. Workload Security Agent Trend Cloud One Maintenance https://cloudone.trendmicro.com/docs/maintenance-schedule/ Note that the system maintenance does not affect protection provided by Trend Cloud One Endpoint and Workload Security agents activated before the start of the maintenance period. Trend Micro Cloud One
33. 33 Cloud One Workload Security EC2 Agent • • • Deep Security