[JAWS-UG鹿児島 vol.9]AWSの監査機能を使って 大事なリソースを守ろう / Protect important resources with AWS auditing

Transcript

1. "84ͷ؂ࠪػೳΛ࢖ͬͯ
   େࣄͳϦιʔεΛकΖ͏ 5BLBZVLJ
   /JJOVNB

2. © Chatwork ࣗݾ঺հ 2 w5BLBZVLJ
   /JJOVNB
   !UXJOVNB
   w$IBUXPSLגࣜձࣾʢ೥݄ೖࣾʣ
   w4JUF
   3FMJBCJMJUZ
   &OHJOFFSJOHʢ43&ʣ
   wϑϧλΠϜϦϞʔτϫʔΫ
   

   w,VCFSOFUFTͷIFMN΍DIBSUʹ͓ٔΕத
   wԻָؑ৆ɺΧϝϥɺਂ໷ϥδΦɺ/FUqJY
   w5)&
   (3&"5
   4"546."/*"/
   )&45*7"-
   ࠷ߴͰͨ͠

3. © Chatwork "HFOEB 3 w$IBUXPSLͷ43&ͷ׆ಈ
   w$IBUXPSLͷΞʔΩςΫνϟʔ
   wकΓ͍ͨ͜ͱ
   wकΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ
   w4FSWFSMFTT
   4FDVSJUZ
   "SDIJUFDUVSF
   PO
   $IBUXPSL
   w·ͱΊ

4. © Chatwork $IBUXPSLͷ43&ͷ׆ಈ 4 ීஈͷ׆ಈʹ͍ͭͯ w$IBUXPSLͷΠϯϑϥӡ༻ͱো֐ରԠ
   wίετ࠷దԽ
   wࢭ·Βͳ͍վળ
   wৼΓฦΓ

5. © Chatwork $IBUXPSLͷ43&ͷ׆ಈ 5 ৼΓฦΓ wिؒ͝ͱͷεϓϦϯτ
   wͨͩͷৼΓฦΓ͡Όͳͯ͘ҰॹʹσʔλΛݟͯߟ͑Δ࣌ؒ w $PTU
   &YQMPSFS
   w

   1FSTPOBM
   )FBMUI
   %BTICPBSE
   w 5SVTUFE
   "EWJTPS
   w (VBSE
   %VUZ
   w *OTQFDUPS

6. © Chatwork $IBUXPSLͷΞʔΩςΫνϟʔ 6 ৽ϝοηʔδج൫લޙʢdʣ

7. © Chatwork कΓ͍ͨ͜ͱ 7 wෆਖ਼ΞΫηεʢ%%P4౳ʣ
   w"84ϦιʔεઃఆෆඋʹΑΔηΩϡϦςΟϗʔϧ
   w*".Λ࢖ͬͨ"84Ϧιʔε΁ͷΞΫηε
   wαʔό04΍ϛυϧ΢ΣΞʹજΉ੬ऑੑ

8. © Chatwork कΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ 8 wෆਖ਼ΞΫηεʢ%%P4౳ʣ w"84
   8"'
   w"84
   4IJFME

9. © Chatwork कΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ 9 w"84ϦιʔεઃఆෆඋʹΑΔηΩϡϦςΟϗʔϧ w"84
   $POpH
   w5SVTUFE
   "EWJTPS

10. © Chatwork कΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ 10 w*".Λ࢖ͬͨ"84Ϧιʔε΁ͷΞΫηε w"84
    $MPVE5SBJM
    w5SVTUFE
    "EWJTPS

11. © Chatwork कΓ͍ͨ͜ͱΛ"84Λ׆༻͢Δ 11 wαʔό04΍ϛυϧ΢ΣΞʹજΉ੬ऑੑ w"NB[PO
    (VBSE%VUZ
    w"NB[PO
    *OTQFDUPS

12. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 12 ͜ͷύλʔϯ͸ͱͯ΋࡞Γ΍͍͢ͷͰ͓͢͢Ί w$MPVE8BUDIΠϕϯτ͕ର৅ϦιʔεΛ෯޿͘ରԠ
    w-BNBCEBͰ௨஌ઌΛΧελϚΠζ
    w$IBUXPSL
    8FCIPPLͳͲ IUUQEFWFMPQFSDIBUXPSLDPNKBXFCIPPLIUNM

13. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 13 wηΩϡϦςΟάϧʔϓૢ࡞ݕ஌

14. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 14 w44)ϙʔτશ։์ݕ஌

15. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 15 w(VBSE
    %VUZͷ'JOEJOHT௨஌

16. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 16 w1FSTPOBM
    )FBMUI
    %BTICPBSE௨஌

17. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 17 w5SVTUFE
    "EWJTPS௨஌

18. © Chatwork 4FSWFSMFTT
    4FDVSJUZ
    "SDIJUFDUVSF
    PO
    $IBUXPSL 18 wෆਖ਼ͳ*1ΞυϨεͷϒϥοΫϦετࣗಈ؅ཧ

19. © Chatwork ·ͱΊ 19 w"84ʹ͸ηΩϡϦςΟରࡦ΍؅ཧͷαʔϏε͕๛෋
    w૊Έ߹Θͤ࣍ୈͰ͞·͟·ͳཁ݅Λຬͨ͢͜ͱ͕Ͱ͖Δ
    wϚωʔδυαʔϏεΛ૊Έ߹Θ͢ͷ͕ίετతʹ΋͓͢͢Ί
    wఆظతʹࢪࡦΛݟ௚͢͜ͱ΋େࣄ

20. Ұॹʹಇ͘ΤϯδχΞΛืू͓ͯ͠Γ·͢ʂ IUUQTDPSQDIBUXPSLDPNKBSFDSVJU