regrowth2018-introduce-reinvent-sessions

AWS re:Invent 2018に参加して面白かったセッションについての紹介です。
特に面白いと思ったZocdoc社のセキュリティ関連の事例中心です。

Transcript

1. re:Invent2018Ͱ໘ന͔ͬͨηογϣϯͷ঺հ ZocdocͷηΩϡϦςΟͷ࿩ - ڴҖͷݕ஌ͱम෮ͷࣗಈԽ ɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹΫϥεϝιουגࣜձࣾ ɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹɹ ɹɹฏ઒ 1
2. About me • ෱ԬΦϑΟεॴଐ • ϞόΠϧΞϓϦαʔϏε෦ • αʔόʔαΠυΤϯδχΞ • ೖࣾͯ͠1೥ͪΐͬͱ • ΍ͬͯΔ͜ͱ • AWSͷΠϯϑϥߏங • ϞόΠϧΞϓϦؔ࿈ͷαʔό։ൃ • ෼ੳ༻σʔλͷऩू/Ճ޻ (ETL) 2
3. re:Invent 2018 • ΍ͬͨ͜ͱ • ηογϣϯʹࢀՃ • ࠷৽৘ใܥ • ࣄྫܥ • Deep Diveܥ • ৽αʔϏε/Ξοϓσʔτͷݕূ • Ͱ͖ͳ͔ͬͨ͜ͱ • ϫʔΫγϣοϓʹࢀՃ • Game DayʹࢀՃ 3
4. ໘ന͔ͬͨࣄྫܥͷηογϣϯ • Ac$vision Blizzard: Giving Call of Duty Gamers an Edge with Alexa and AWS • Ac$vision Blizzardʹ͓͚ΔAlexa׆༻ࣄྫ • How Zocdoc Achieves Automa$c Threat Detec$on & Remedia$on with Security as Code • Zocdocʹ͓͚ΔڴҖݕग़ɾम෮ͷࣗಈԽࣄྫ • Globalizing Player Accounts at Riot Games While Maintaining Availability • Riot Gamesʹ͓͚ΔϓϨΠϠʔΞΧ΢ϯτج൫ͷมભʹ͍ͭͯ 4
5. ࿩͢͜ͱ ࣄྫܥηογϣϯͷ1ͭɺZocdocͷηΩϡϦςΟʹ͍ͭͯͷ࿩ • Zocdocʹ͍ͭͯ • ηΩϡϦςΟΛࢧ͑ΔAWSͷαʔϏε • ݕ஌ɾΞϥʔτɾम෮ͷࣗಈԽ • ·ͱΊ 5
6. Zocdocʹ͍ͭͯ • ҩྍݕࡧɾ༧໿ͷΦϯϥΠϯαʔϏε • ݸਓ৘ใΛѻ͍ͬͯΔͨΊηΩϡϦςΟ͕ॏཁ • 2017೥͔Β͢΂ͯAWS্ͰՔಇ͍ͯ͠Δ 6
7. ηΩϡϦςΟΛࢧ͑ΔAWSͷαʔϏε • Amazon CloudWatch : ؂ࢹαʔϏε • Amazon GuardDuty : ηΩϡϦςΟ؂ࢹͱڴҖͷݕ஌ • Amazon Inspector : ηΩϡϦςΟධՁ • Aws CloudTrail : AWSΞΧ΢ϯτΞΫςΟϏςΟͷه࿥ • AWS Lambda (FuncBon) : αʔόʔϨεͳίʔυ࣮ߦ؀ڥ • AWS Trusted Advisor : AWS؀ڥ࠷దԽͷͨΊͷΞυόΠβʔ • AWS WAF / AWS Shield : WAF / ϚωʔδυܕͷDDoSอޢ 7
8. ݕ஌ɾΞϥʔτɾम෮ͷࣗಈԽ • ݕ஌ • AWS CloudTrail • Amazon GuardDuty • Amazon Inspector • Ξϥʔτ • Amazon CloudWatch • म෮ • AWS Lambda 8
9. ࣗಈԽͷࣄྫ • ۩ମతͳࣄྫ͸ re:Invent 2018ͷεϥΠυΛࢀরʂ • How Zocdoc Achieves Automa;c Threat Detec;on & Remedia;on with Security as Code (SEC321-R1) • hHps:/ /www.slideshare.net/AmazonWebServices/how- zocdoc-achieves-automa;c-threat-detec;on-remedia;on- with-security-as-code-sec321r1-aws-reinvent-2018 9
10. ·ͱΊ • ηΩϡϦςΟͷϦεΫʹͳΓಘΔ໰୊Λࠜຊղܾ͢Δ • AWSͷαʔϏεΛ׆༻͢Δͱখ࢝͘͞Ίͯঃʑʹվળ͍͚ͯ͠Δ • ؂ࢹɾݕ஌ɾम෮ΛࣗಈԽ͢ΔϝϦοτ • ϏδωεΛܧଓͰ͖Δ • ӡ༻ऀʹ΍͍͞͠ (ৄࡉௐࠪΛޙ೔ʹ·ΘͤΔ) • Քಇ͍ͯ͠ΔαʔϏεͷӡ༻ࣄྫΛฉ͘ͷ͸ָ͍͠ 10
11. ͓͠·͍ 11
12. ࢀߟจݙ • How Zocdoc Achieves Automa3c Threat Detec3on & Remedia3on with Security as Code (SEC321-R1) • hDps:/ /www.slideshare.net/AmazonWebServices/how- zocdoc-achieves-automa3c-threat-detec3on-remedia3on- with-security-as-code-sec321r1-aws-reinvent-2018 12