Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
IAMの地味なUpdateをご紹介_掲載用.pdf
Search
yhamano
December 17, 2019
Technology
0
820
IAMの地味なUpdateをご紹介_掲載用.pdf
yhamano
December 17, 2019
Tweet
Share
More Decks by yhamano
See All by yhamano
TIPSTAR におけるデータ分析基盤信頼性向上の取り組み
yhamano
1
320
複数プロダクトを管理する AWS Organizations における AWS IAM Identity Center を GitHub x Terraform でいい感じに運用したい
yhamano
1
480
Opsしかやってこなかった私が DevOpsが根付いたチームにJoinした話
yhamano
2
290
CI/CD環境のTerraform versionを最新に保つと幸せになれる
yhamano
9
1.8k
lightning-talk-toyosu_hamano_20190925_open.pdf
yhamano
0
780
Other Decks in Technology
See All in Technology
Evolutionary Optimization of Model Merging Recipes
fuyu_quant0
3
550
関数型DDDの理論と実践:「決定を遅らせる」を先につくり、 ビジネスの機動力と価値をあげる
knih
2
500
Azureコストは水道代/The_47th_Tokyo_Jazug
aeonpeople
3
390
Challenges - Open Farming Hackdays 2024
loleg
0
570
統計的学習理論読み Chapter 1
kmatsui
4
960
AMLD 2024 - Build Your Own GPT
donlelef
1
260
2023 Japan AWS Jr.Championsに選出されての振り返りとこれから
hiropy877
1
130
OCI Data Integration技術情報 / ocidi_technical_jp
oracle4engineer
PRO
1
1.5k
生成AIサービスPanorama AIご説明資料
sdt
0
300
エバンジェリスト活動を7年やってきて見えてきた、コミュニティとエバンジェリストの関係
soracom
PRO
1
200
中学生でもわかる深層学習
e869120
10
2.7k
実務への応用例から考える 変更に強いオブジェクト指向設計 / 20240324-ooc2024
bengo4com
7
5.5k
Featured
See All Featured
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
tammyeverts
12
1.4k
A Modern Web Designer's Workflow
chriscoyier
689
190k
What's new in Ruby 2.0
geeforr
335
31k
The Straight Up "How To Draw Better" Workshop
denniskardys
227
130k
RailsConf & Balkan Ruby 2019: The Past, Present, and Future of Rails at GitHub
eileencodes
124
32k
Code Reviewing Like a Champion
maltzj
512
39k
Automating Front-end Workflow
addyosmani
1353
200k
Code Review Best Practice
trishagee
54
15k
How GitHub (no longer) Works
holman
301
140k
Dealing with People You Can't Stand - Big Design 2015
cassininazir
355
22k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
19
1.6k
Visualization
eitanlees
135
14k
Transcript
Ops JAWS Meetup#17 re:Invent2019 Recap IAMͷຯͳUpdateΛ͝հ
ࠓΛҾͨ͘͘͞Μͷൃද͕͋Γ·ͨ͠ w&,4͕͍ͭʹ'BSHFUFରԠʂ IUUQTBXTBNB[PODPNKQCMPHTOFXTBNB[POFLTPOBXTGBSHBUFOPXHFOFSBMMZBWBJMBCMF w%FFQγϦʔζͱͯ͠%FFQ$PNQPTFS͕ؒೖΓʂ IUUQTBXTBNB[PODPNKQEFFQDPNQPTFS w"*ܥαʔϏεͷ6QEBUF͕നԡ͠ʂ
ओཁαʔϏεͷհଞͷํʹ͓ͤͯ͠ɺ ࢲ͔Βຯͳ6QEBUFΛҰ͚ͭͩ͝հ͠·͢
͝հ͢Δ6QEBUF *".ϩʔϧೝূใͷ࠷ऴ༻͕࣌ औಘͰ͖ΔΑ͏ʹͳΓ·ͨ͠ʂʂ https://aws.amazon.com/jp/about-aws/whats-new/2019/11/identify-unused-iam-roles-easily-and-remove-them-confidently-by-using-the-last-used-timestamp/
Ϛωδϝϯτίϯιʔϧ
BXTJBNHFUSPMFSPMFOBNFUFTUSPMF \ 3PMF\ ɾ ɾ ɾ 3PMF-BTU6TFE\ -BTU6TFE%BUF5YYYYYY; 3FHJPOBQOPSUIFBTU
$-*
ຯ͗͢ΔΞοϓσʔτ wϖʔδʹٴͿ#MBDL#FMUࢿྉʹ هࡌແ͠ w"84+ُా͞ΜͷϒϩάͰߦ͚ͩ հ
࠷ऴ༻͕࣌औಘͰ͖ΔͱͲ͏͍͏໘Ͱ ϋοϐʔʹͳΕΔ͔આ໌͍͖ͯ͠·͢
ͪΐͬͱ࣭ Έͳ͞Μ*".ͬͯ·͔͢ʁ
"84ͬͯΔ㲈*".ͬͯΔ "84Λ༻͢Δ্Ͱɺ*".΄΅ඞਢ
*".͓͞Β͍ *". "84*EFOUJUZBOE.BOBHFNFOU "84ར༻ʹؔ͢ΔೝূೝՄΛ࢘ΔαʔϏε w*".Ϣʔβ ‣ "84αʔϏεͷΞΫηεΛߦ͏ݸਓɺγεςϜ͕ར༻͢Δ w*".άϧʔϓ ‣
ಉҰׂΛ࣋ͭ*".ϢʔβΛάϧʔϓԽ͢Δ w*".ϩʔϧɹɹˡࠓͷϝΠϯ ‣ "84αʔϏεʹରͯ͠"84αʔϏεͷૢ࡞ݖݶΛ༩͑Δ w*".ϙϦγʔ ‣ "84αʔϏεͷΞΫηεݖݶΛ·ͱΊͨͷ
*".ϩʔϧ૿৩͕ͪ͠ wϦιʔεϨϕϧͰ༩͢ΔݖݶΛ͚Α͏ͱ͢ΔͱϦιʔε*".ϩʔ ϧ͕ඞཁʹͳΔ wϚωδϝϯτίϯιʔϧ͔ΒͷϦιʔε࡞࣌ʹϙϦγʔΛΑ͠ͳʹ༩ ͨ͠*".ϩʔϧΛ࡞ͯ͘͠ΕΔ͜ͱ͕͋Δ
ະ༻ͷ*".ϩʔϧΓ͍͢ wϦιʔεআ࣌Ұॹʹআͯ͘͠Εͳ͍ w*".ϩʔϧࣗମʹ՝͕ۚൃੜ͠ͳ͍ͷͰɺ ҙࣝతʹআ͠Α͏ͱͳΓʹ͍͘ w୨Է͠͠Α͏ʹɺ֤ؔॴ͕ଟ͗͢Δͱɺ ͍͍ͪͪώΞϦϯάͯ͠ΒΕͳ͍
ະ༻ͷ*".ϩʔϧ͕͋Δͱμϝʁ wཧෛՙ͕૿͑Δ wҙਤ͠ͳ͍"84αʔϏεʹؔ࿈͚ͮΒΕΔϦεΫ͕૿͑Δ
ະ༻ͷ*".ϩʔϧ ͪΌΜͱແޮԽPSআ͠·͠ΐ͏ʂ
ະ༻ͷ*".ϩʔϧΛݟ͚ͭΔ ࠷ऴ༻͔࣌Β Ұఆظؒܦա͍ͯ͠Δ*".ϩʔϧΛະ༻ͱΈͳ͢
୨Էࣗ͠ಈԽ खಈ୨Է͠৭ʑͱ൵͠Έ͕ଟ͍ͷͰ "84$POpH3VMFTΛͬͯࣗಈԽ͠Α͏ʂ
"84$POpH3VMFT͓͞Β͍ w"84$POpH3VMFT ‣"84αʔϏε͕ɺఆٛͨ͠ઃఆঢ়ଶͱͳ͍ͬͯΔ͔ΛධՁ ‣"84͕ఏڙ͢ΔϚωʔδυϧʔϧͱϢʔβଆͰࣗ༝ʹධՁ༰Λ ఆٛͰ͖ΔΧελϜϧʔϧ͕͋Δ ‣ධՁճʹର͢Δ՝ۚͱͳ͓ͬͯΓ͓͍҆ ݄d
"84$POpH3VMFTΛ༻͍ͨࣗಈ୨Է͠ ఆظతʹ$POpH3VMFΛىಈ -BNCEBΛݺͼग़͢ *".ϩʔϧͷྻڍͱ࠷ऴ༻࣌Λऔಘ͢Δ"1*Λݺͼग़͢ *"."1*ͷ݁ՌΛ-BNCEBʹฦ͢ ४ڌඇ४ڌͷ݁ՌΛ$POpHʹઃఆ ࠷ऴ༻͔࣌Βʓʓؒܦա͍ͯ͠Δ͔ΛνΣοΫ͢ΔΧελϜϧʔϧ https://aws.amazon.com/jp/blogs/security/continuously-monitor-unused-iam-roles-aws-config/
"84$POpH3VMFT݁Ռ
ࣗಈम෮Մೳʂ 44."VUPNBUJPOͱ࿈ܞͨ͠ඇ४ڌϦιʔεͷࣗಈम෮ wϩʔϧࣗମͷআ wϩʔϧอ࣋͢Δ͕ɺશڋ൱͢ΔϙϦγʔΛΞλον
·ͱΊ w *".ϩʔϧͷ࠷ऴར༻͕͔࣌ΔΑ͏ʹͳΓ·ͨ͠ w ະ༻*".ϩʔϧΛࣗಈ୨Էͯ͠͠ɺηΩϡϦςΟΛ୲อ ͠·͠ΐ͏
͝੩ௌ ͋Γ͕ͱ͏͍͟͝·ͨ͠