プロダクション環境での Amazon Bedrock 利用とセキュリティの考慮点 / Amazon Bedrock Security in Production

Anthropic Claude や Meta Llama を AWS で、本番環境で Amazon Bedrock をセキュアに利用するための事例イベント。
株式会社Poetics、株式会社スタディスト、株式会社Conoris Technologiesによる登壇もありました。

Transcript

1. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE ϓϩμΫγϣϯ؀ڥͰͷ "NB[PO
   #FESPDL
   ར༻ͱ ηΩϡϦςΟͷߟྀ఺ ਑ݪ Ղو J U L 3 1 , 2 0 2 4 γχΞ ελʔτΞοϓ ػցֶश ιϦϡʔγϣϯΞʔΩςΫτ ΞϚκϯ ΢Σϒ αʔϏε δϟύϯ 
2. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE • "NB[PO
   #FESPDL
   ͓͞Β͍ • ੜ੒
   "*
   ຊ൪σϓϩΠʹ͓͚Δ యܕతͳ՝୊ • #FESPDL
   αʔϏεΞʔΩςΫνϟ "HFOEB 
3. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE ੜ੒
   "*
   ΞϓϦ ΁ͷ౷߹ ج൫Ϟσϧ
   
   --. Λબ୒ ಠࣗσʔλͰ ΧελϚΠζ ηΩϡϦςΟɾ ΨόφϯεΛ࣮ݱ "NB[PO
   #FESPDL
   Ͱ؆୯ʹ
4. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE 4VNNBSJ[BUJPO
   DPNQMFY
   SFBTPOJOH
   XSJUJOH
   DPEJOH $POUFYUVBM
   BOTXFST
   TVNNBSJ[BUJPO
   QBSBQISBTJOH )JHIRVBMJUZ
   JNBHFT
   BOE
   BSU 5FYU
   HFOFSBUJPO
   TFBSDI
   DMBTTJGJDBUJPO 2"
   BOE
   SFBEJOH
   DPNQSFIFOTJPO 5FYU
   TVNNBSJ[BUJPO
   HFOFSBUJPO
   2"
   TFBSDI
   JNBHF
   HFOFSBUJPO "NB[PO
   5JUBO
   5FYU
   1SFNJFS "NB[PO
   5JUBO
   5FYU
   -JUF "NB[PO
   5JUBO
   5FYU
   &YQSFTT "NB[PO
   5JUBO
   5FYU
   &NCFEEJOHT "NB[PO
   5JUBO
   5FYU
   &NCFEEJOHT
   7 "NB[PO
   5JUBO
   .VMUJNPEBM
   &NCFEEJOHT "NB[PO
   5JUBO
   *NBHF
   (FOFSBUPS
   $MBVEF
   
   4POOFU $MBVEF
   
   0QVT $MBVEF
   
   4POOFU $MBVEF
   
   )BJLV $MBVEF
    $MBVEF
    $MBVEF
   *OTUBOU -MBNB
    -MBNB
   
   # -MBNB
   
   # -MBNB
   
   # -MBNB
   
   # $PNNBOE $PNNBOE
   -JHIU &NCFE
   &OHMJTI
   &NCFE
   .VMUJMJOHVBM $PNNBOE
   3 $PNNBOE
   3
   4UBCMF
   %JGGVTJPO
   9- 4UBCMF
   %JGGVTJPO
   9-
    +BNCB*OTUSVDU +VSBTTJD
   6MUSB +VSBTTJD
   .JE .JTUSBM
   -BSHF
   
    .JTUSBM
   -BSHF
    .JTUSBM
   4NBMM .JYUSBM
   Y# .JTUSBM
   # 5FYU
   TVNNBSJ[BUJPO
   UFYU
   DMBTTJGJDBUJPO
   UFYU
   DPNQMFUJPO
   DPEF
   HFOFSBUJPO
   2" ج ൫ Ϟ σ ϧ ɾ େ ن ໛ ݴ ޠ Ϟ σ ϧ - - .
   ͷ બ ୒ ࢶ "NB[PO
   #FESPDL $MBVEF
   
   ౦ژϦʔδϣϯ $PNJOH
   TPPOʜ
5. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE ੜ੒
   "*
   ຊ൪σϓϩΠʹ͓͚Δయܕతͳ՝୊ 🔐
   ηΩϡϦςΟɾίϯϓϥΠΞϯε ♻
   ӡ༻ͱվળ 💰
   ίετ 🤖 ੹೚͋Δ
   "*
   3FTQPOTJCMF
   "*
   ͷར༻ 
6. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE "NB[PO
   #FESPDL
   ʹ͓͚Δ ηΩϡϦςΟ
7. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE "NB[PO ͸σʔλΛηΩϡΞ ͔ͭϓϥΠϕʔτʹ ͓٬༷ͷσʔλ͸ɺ ج൫ϞσϧͷτϨʔχϯάʹ͸ Ұ੾࢖༻͞Ε·ͤΜɻ ͢΂ͯͷσʔλ͸ɺ సૹ࣌ʹ
   5-4
   
   Λ࢖༻ͯ͠҉߸Խɺ อଘ࣌͸
   "84
   ,.4
   Λ࢖༻ͯ͠҉߸Խɻ "NB[PO
   ϚωʔδυΩʔ·ͨ͸ ΧελϚʔϚωʔδυΩʔ
   $.,
   ΋αϙʔτɻ ϑΝΠϯνϡʔχϯά͞ΕͨϞσϧ͸ɺ ͓٬༷ͷ
   "84
   ,.4
   ΩʔΛ࢖༻ͯ͠ ҉߸Խ͓Αͼอଘ͞Ε·͢ɻ ΧελϚΠζ͞ΕͨϞσϧʹΞΫηεͰ͖Δͷ͸ ͓٬༷͚ͩͰ͢ɻ "84
   *EFOUJUZ
   BOE
   "DDFTT
   .BOBHFNFOU
   *".
   ͱͷ౷߹ʹΑΓɺ ͖Ίࡉ͔ͳΞΫηε੍ޚ͕Մೳɻ (%13
   )*1""
   1$*
   ΛؚΉ ίϯϓϥΠΞϯεج४Λαϙʔτɻ
8. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE "1*
   ΞΫςΟϏςΟΛ؂ࢹ͠໰ ୊ͷτϥϒϧγϡʔςΟϯά ར༻ঢ়گͷϝτϦΫεΛ௥੻͠ ΧελϚΠζ͞Εͨ μογϡϘʔυΛߏங 'FE3".1
   .PEFSBUF
   (%13
   40$
   *40
   $4"
   )*1"" "NB[PO
   $MPVE8BUDI
   ͱͷ౷߹ "84
   $MPVE5SBJM
   ͱͷ౷߹ $PNQMJBODF
   ϑϨʔϜϫʔΫ ϞχλϦϯάͱίϯϓϥΠΞϯε "NB[PO
   
9. ˜
   
   "NB[PO
   8FC
   4FSWJDFT
   *OD
   PS
   JUT
   BGGJMJBUFT
   "MM
   SJHIUT
   SFTFSWFE *".
   ʹΑΔ
   "NB[PO
   #FESPDL
   ͷΞΫηεڐՄ *". { "Version": "2012-10-17", "Statement": { "Sid": "AllowInference", "Effect": "Allow", "Action": [ "bedrock:InvokeModel", "bedrock:InvokeModelWithResponseStream" ], "Resource": "arn:aws:bedrock:*::foundation- model/model-id" } } "MMPX
   ϙϦγʔͷྫ %FOZ
   ϙϦγʔͷྫ { "Version": "2012-10-17", "Statement": { "Sid": "DenyInference", "Effect": "Deny", "Action": [ "bedrock:InvokeModel", "bedrock:InvokeModelWithResponseStream" ], "Resource": "arn:aws:bedrock:*::foundation- model/model-id" } }
10. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE "NB[PO
    #FESPDL
    Ͱͷ Ϟσϧར༻ํ๏
11. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE "NB[PO
    #FESPDL
    ͷϞσϧΞΫηε "NB[PO
    #FESPDL
    ج൫Ϟσϧ΁ͷ ΞΫηεΛ੍ޚՄೳ • ֤ "84
    ϦʔδϣϯͰ ϞσϧΛબ୒͠༗ޮԽ • ֤Ϟσϧʹ͸ɺରԠ͢Δ ΤϯυϢʔβʔϥΠηϯεܖ໿
    &6-"
    ͕෇ଐ
12. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE 0OEFNBOE
    WT
    1SPWJTJPOFE
    Ϟʔυ ڞ௨͢Δಛ௃ εϧʔϓοτΛߪೖɻ ࣌ؒ͝ͱͷ՝ۚɺ ϲ݄
    PS
    ϲ݄ͷ ίϛοτ΋Մೳ ϕʔεϥΠϯϞσϧͷ ϓϥΠϕʔτͳίϐʔ ϑΝΠϯνϡʔχϯάࡁͷ έʔε΋ ϦΫΤετͷ ೖग़ྗτʔΫϯ՝ۚ ରԠϞσϧͷ ϕʔεϥΠϯ όʔγϣϯΛอ࣋ 0OEFNBOE
    1SPWJTJPOFE
    DBQBDJUZ
    ਪ࿦ϦΫΤετͷೖग़ྗ͸ Ϟσϧͷֶशʹ࢖ΘΕͳ͍ Ϟσϧఏڙاۀ͸ ސ٬σʔλʹΞΫηεͰ͖ͳ͍ "NB[PO
    #FESPDL
    αʔϏενʔϜ ʹΑΓॴ༗ɾӡ༻͞ΕΔ
    "84
    ΞΧ΢ϯτ಺ʹσϓϩΠ
13. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE ؆୯ͳઃఆͰΧελϚΠζ &QPDIT
    #BUDI
    4J[F
    -FBSOJOH
    3BUF
    .VMUJQMJFS
    &BSMZ
    4UPQQJOH
    4FUVQ .PEFM 0VUQVU
    MBZFS *OQVU
    MBZFS ؆୯ ηΩϡΞ ϓϥΠϕʔτ 4JNQMJGJFE
    IZQFS
    QBSBNT
    VQEBUF %BUB
    FODSZQUFE XJUI
    $., "DDFTT
    UP
    4
    CVDLFU WJB
    1SJWBUF-JOL $MBVEF
    
    )BJLV
    Ϟσ ϧ 'JOFUVOF
    ࡁ
    $MBVEF
    
    )BJLV
    Ϟσϧ *OGFSFODF *OGFSFODF 6QEBUFE
    XFJHIUT -BCFMMFE EBUB "NB[PO
    #FESPDL
    JT
    UIF
    POMZ
    GVMMZNBOBHFE
    TFSWJDF
    UIBU
    QSPWJEFT
    DVTUPNFST
    XJUI
    UIF
    BCJMJUZ
    UP
    GJOFUVOF
    $MBVEF
    NPEFMT "OUISPQJD
    $MBVEF
    
    )BJLV
    Λ
    "NB[PO
    #FESPDL
    Ͱ
    'JOFUVOJOH
14. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    B⒏MJBUFT
    "MM
    SJHIUT
    SFTFSWFE "NB[PO
    #FESPDL
    ͰͷϦΫΤετॲཧϑϩʔ
15. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    B⒏MJBUFT
    "MM
    SJHIUT
    SFTFSWFE "84
    ϦʔδϣϯωοτϫʔΫ ΫϥΠΞϯτ઀ଓ ΫϥΠΞϯτΞΧ΢ϯτ ސ٬
    71$ "84
    1SJWBUF-JOL اۀωοτϫʔΫ Πϯλʔωοτ ΫϥΠΞϯτ "84
    %JSFDU
    $POOFDU "1*
    ΤϯυϙΠϯτ ΫϥΠΞϯτ "NB[PO
    #FESPDL
    αʔϏεΞΧ΢ϯτ "NB[PO
    #FESPDL
    αʔϏε /"5
    HBUFXBZ
16. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE 0OEFNBOE
    ΞΫηεΞʔΩςΫνϟ "1*
    ΤϯυϙΠϯτ "NB[PO
    #FESPDL
    αʔϏεΞΧ΢ϯτ "NB[PO
    #FESPDL
    αʔϏε .BOBHFNFOU
    DPOTPMF
    4%,T
    "1*
    ͳͲ ͔ΒͷྲྀೖτϥϑΟοΫ ਪ࿦
    3VOUJNF ϞσϧσϓϩΠΞΧ΢ϯτ "84
    ͕ॴ༗ɾӡ༻ "84
    $MPVE5SBJM *".
    BOE
    "NB[PO
    $MPVE8BUDI
    ͳͲ΁ͷΞΫηε ϕʔεϞσϧ 4
    όέοτ 0OEFNBOE
    ίϯϐϡʔτ
17. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE 1SPWJTJPOFE
    DBQBDJUZ
    ΞΫηεΞʔΩςΫνϟ "1*
    ΤϯυϙΠϯτ "NB[PO
    #FESPDL
    αʔϏεΞΧ΢ϯτ "NB[PO
    #FESPDL
    αʔϏε .BOBHFNFOU
    DPOTPMF
    4%,T
    "1*
    ͳͲ ͔ΒͷྲྀೖτϥϑΟοΫ ਪ࿦
    3VOUJNF ϞσϧσϓϩΠΞΧ΢ϯτ "84
    ͕ॴ༗ɾӡ༻ "84
    $MPVE5SBJM *".
    BOE
    "NB[PO
    $MPVE8BUDI
    ͳͲ΁ͷΞΫηε 'JOFUVOF
    ࡁϞσϧ
    4
    όέοτ ϕʔεϞσϧ 4
    όέοτ 1SPWJTJPOFE
    DBQBDJUZ
    ίϯϐϡʔτ lಛఆ NPEFM
    *%
    ·ͨ͸
    "3/
    Λࢦఆz
18. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE Ϟσϧ
    pOFUVOJOH
    ΞʔΩςΫνϟ τϨʔχϯά ΦʔέετϨʔγϣϯ ϞσϧσϓϩΠΞΧ΢ϯτ "84
    ͕ॴ༗ɾӡ༻ "NB[PO
    4BHF.BLFS
    USBJOJOH 'JOFUVOF
    ࡁϞσϧ
    4
    όέοτ ϕʔεϞσϧ 4
    όέοτ ސ٬ΞΧ΢ϯτ ֶशσʔλ
    4
    όέοτ 71$ "1*
    ΤϯυϙΠϯτ "NB[PO
    #FESPDL
    αʔϏεΞΧ΢ϯτ "NB[PO
    #FESPDL
    αʔϏε .BOBHFNFOU
    DPOTPMF
    4%,T
    "1*
    ͳͲ ͔ΒͷྲྀೖτϥϑΟοΫ "84
    $MPVE5SBJM *".
    BOE
    "NB[PO
    $MPVE8BUDI
    ͳͲ΁ͷΞΫηε
19. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE ϓϩϯϓτͱԠ౴݁ՌΛอޢ͢Δ ΨʔυϨʔϧ
20. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE ੜ੒
    "*
    ΞϓϦέʔγϣϯߏஙʹ͓͚Δ՝୊ ϓϥΠόγʔอޢ Ϣʔβʔ৘ใ΍ ػີσʔλΛอޢ όΠΞεɾ εςϨΦλΠϓ ภͬͨ݁Ռ΍ ෆެฏͳ Ϣʔβʔମݧ ๬·͘͠ͳ͍ɺຢ͸ ؔ܎ͳ͍τϐοΫ ඍົͳΫΤϦɾԠ౴ ༗֐ੑɾ҆શੑ ϒϥϯυᆝଛϦεΫ ༗֐·ͨ͸ ߈ܸతͳԠ౴ ૊৫ݻ༗ͷηΩϡϦςΟɾίϯϓϥΠΞϯε ҟͳΔϞσϧʹ͓͍ͯɺҰ؏ͨ͠ϓϩϯϓτͱԠ౴ͷίϯτϩʔϧ
21. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE (VBSESBJMT
    GPS
    "NB[PO
    #FESPDL ੹೚͋Δ
    "*
    ϙϦγʔʹج͖ͮ ༗֐ͳίϯςϯπͷϑΟϧλϦϯά ؆ܿͳࣗવݴޠදݱʹΑΓɺ ڋ൱τϐοΫΛఆٛ ج൫ϞσϧͷԠ౴͔Βɺ ݸਓ৘ใͳͲηϯγςΟϒͳ৘ใΛআڈɻ ಛఆͷ୯ޠ΍ਖ਼نදݱʹΑΔϑΟϧλʔ΋ ΞϓϦέʔγϣϯཁ݅ͱ ੹೚͋Δ
    "*
    ϙϦγʔʹԠͯ͡ ΧελϚΠζՄೳͳΨʔυϨʔϧΛ࣮૷ ෳ਺ج൫ϞσϧΛԣஅ͠ɺ "*
    ΤʔδΣϯτʹ΋ద༻ՄೳͳΨʔυϨʔϧ
22. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE (VBSESBJMT
    GPS
    "NB[PO
    #FESPDL
    ͷ࢓૊Έ Ϣʔβʔೖྗ ج൫Ϟσϧग़ྗ ΨʔυϨʔϧ อޢ͞ΕͨԠ౴ ج൫Ϟσϧਪ࿦ 3FTQPOTJCMF
    "*
    ϙϦγʔ ڋ൱τϐοΫ ίϯςϯπϑΟϧλʔ ୯ޠϑΟϧλʔ ݸਓ৘ใ
    1**
    อޢ
23. ˜
    
    "NB[PO
    8FC
    4FSWJDFT
    *OD
    PS
    JUT
    BGGJMJBUFT
    "MM
    SJHIUT
    SFTFSWFE Thank you! ਑ݪ Ղو γχΞ ελʔτΞοϓ ػցֶश ιϦϡʔγϣϯΞʔΩςΫτ ΞϚκϯ ΢Σϒ αʔϏε δϟύϯ  υΩϡϝϯτ "NB[PO
    #FESPDL
    ͷ ηΩϡϦςΟͱϓϥΠόγʔ