[JAWS-UG鹿児島 vol.9]AWSの監査機能を使って 大事なリソースを守ろう / Protect important resources with AWS auditing

Transcript

1. "84ͷ؂ࠪػೳΛ࢖ͬͯ
   େࣄͳϦιʔεΛकΖ͏ 5BLBZVLJ
   /JJOVNB
2. © Chatwork ࣗݾ঺հ 2 w5BLBZVLJ
   /JJOVNB
   !UXJOVNB
   w$IBUXPSLגࣜձࣾʢ೥݄ೖࣾʣ
   w4JUF
   3FMJBCJMJUZ
   &OHJOFFSJOHʢ43&ʣ
   wϑϧλΠϜϦϞʔτϫʔΫ
   w,VCFSOFUFTͷIFMN΍DIBSUʹ͓ٔΕத
   wԻָؑ৆ɺΧϝϥɺਂ໷ϥδΦɺ/FUqJY
   w5)&
   (3&"5
   4"546."/*"/
   )&45*7"-
   ࠷ߴͰͨ͠
3. © Chatwork "HFOEB 3 w$IBUXPSLͷ43&ͷ׆ಈ
   w$IBUXPSLͷΞʔΩςΫνϟʔ
   wकΓ͍ͨ͜ͱ
   wकΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ
   w4FSWFSMFTT
   4FDVSJUZ
   "SDIJUFDUVSF
   PO
   $IBUXPSL
   w·ͱΊ
4. © Chatwork $IBUXPSLͷ43&ͷ׆ಈ 4 ීஈͷ׆ಈʹ͍ͭͯ w$IBUXPSLͷΠϯϑϥӡ༻ͱো֐ରԠ
   wίετ࠷దԽ
   wࢭ·Βͳ͍վળ
   wৼΓฦΓ
5. © Chatwork $IBUXPSLͷ43&ͷ׆ಈ 5 ৼΓฦΓ wिؒ͝ͱͷεϓϦϯτ
   wͨͩͷৼΓฦΓ͡Όͳͯ͘ҰॹʹσʔλΛݟͯߟ͑Δ࣌ؒ w $PTU
   &YQMPSFS
   w 1FSTPOBM
   )FBMUI
   %BTICPBSE
   w 5SVTUFE
   "EWJTPS
   w (VBSE
   %VUZ
   w *OTQFDUPS
6. © Chatwork $IBUXPSLͷΞʔΩςΫνϟʔ 6 ৽ϝοηʔδج൫લޙʢdʣ
7. © Chatwork कΓ͍ͨ͜ͱ 7 wෆਖ਼ΞΫηεʢ%%P4౳ʣ
   w"84ϦιʔεઃఆෆඋʹΑΔηΩϡϦςΟϗʔϧ
   w*".Λ࢖ͬͨ"84Ϧιʔε΁ͷΞΫηε
   wαʔό04΍ϛυϧ΢ΣΞʹજΉ੬ऑੑ
8. © Chatwork कΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ 8 wෆਖ਼ΞΫηεʢ%%P4౳ʣ w"84
   8"'
   w"84
   4IJFME
9. © Chatwork कΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ 9 w"84ϦιʔεઃఆෆඋʹΑΔηΩϡϦςΟϗʔϧ w"84
   $POpH
   w5SVTUFE
   "EWJTPS
10. © Chatwork कΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ 10 w*".Λ࢖ͬͨ"84Ϧιʔε΁ͷΞΫηε w"84
    $MPVE5SBJM
    w5SVTUFE
    "EWJTPS
11. © Chatwork कΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ 11 wαʔό04΍ϛυϧ΢ΣΞʹજΉ੬ऑੑ w"NB[PO
    (VBSE%VUZ
    w"NB[PO
    *OTQFDUPS
12. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 12 ͜ͷύλʔϯ͸ͱͯ΋࡞Γ΍͍͢ͷͰ͓͢͢Ί w$MPVE8BUDIΠϕϯτ͕ର৅ϦιʔεΛ෯޿͘ରԠ
    w-BNBCEBͰ௨஌ઌΛΧελϚΠζ
    w$IBUXPSL
    8FCIPPLͳͲ IUUQEFWFMPQFSDIBUXPSLDPNKBXFCIPPLIUNM
13. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 13 wηΩϡϦςΟάϧʔϓૢ࡞ݕ஌
14. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 14 w44)ϙʔτશ։์ݕ஌
15. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 15 w(VBSE
    %VUZͷ'JOEJOHT௨஌
16. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 16 w1FSTPOBM
    )FBMUI
    %BTICPBSE௨஌
17. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 17 w5SVTUFE
    "EWJTPS௨஌
18. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 18 wෆਖ਼ͳ*1ΞυϨεͷϒϥοΫϦετࣗಈ؅ཧ
19. © Chatwork ·ͱΊ 19 w"84ʹ͸ηΩϡϦςΟରࡦ΍؅ཧͷαʔϏε͕๛෋
    w૊Έ߹Θͤ࣍ୈͰ͞·͟·ͳཁ݅Λຬͨ͢͜ͱ͕Ͱ͖Δ
    wϚωʔδυαʔϏεΛ૊Έ߹Θ͢ͷ͕ίετతʹ΋͓͢͢Ί
    wఆظతʹࢪࡦΛݟ௚͢͜ͱ΋େࣄ
20. Ұॹʹಇ͘ΤϯδχΞΛืू͓ͯ͠Γ·͢ʂ IUUQTDPSQDIBUXPSLDPNKBSFDSVJU