EC2の脆弱性対応で何が使える？ Inspector や SSM あたりを整理する #nakanoshima_dev

Transcript

1. &$ͷ੬ऑੑରԠͰԿ͕࢖͑Δʁ *OTQFDUPS
   ΍ 44.
   ͋ͨΓΛ੔ཧ͢Δ
2. OBLBOPTIJNB@EFW ࣗݾ঺հ ઒ݪ੐େ LBXBIBSBNBTBIJSP ˔ $MBTTNFUIPE
   "84ࣄۀຊ෦ίϯαϧςΟϯά෦ ˔ 
   d
   
   "84
   5PQ
   &OHJOFFST ˔ ޷͖ͳ΋ͷ ˓ "84
   "84
   $-* ˓ "84Ҏ֎
   πʔϦϯάɺ&NBDTɺѪೣ IUUQTEFWDMBTTNFUIPEKQBVUIPSLBXBIBSBNBTBIJSP
3. OBLBOPTIJNB@EFW ΞδΣϯμ ˔ ੬ऑੑରԠ͸ԿΛ͢Δʁ ˔ ࣝผ΍ద༻Ͱ໾ཱٕͭज़ GPS
   &$
   ˞ ˔ ͓ΘΓʹ ˞
   ओʹ -JOVY
   04
   "NB[PO
   -JOVY
   
   ౳
   ʹߜͬͨ࿩ͱ͠·͢
4. ͦ΋ͦ΋੬ऑੑରԠ͸ԿΛ͢Δʁ
5. OBLBOPTIJNB@EFW ࣝผͱద༻ɺϓϩηεΛҙࣝ͢Δ
6. OBLBOPTIJNB@EFW ࢀߟ
   ϓϩηεྫ ը૾Ҿ༻
   ੬ऑੑରࡦͷޮՌతͳਐΊํʢπʔϧ׆༻ฤʣ ʙ ੬ऑੑݕ஌πʔϧ 7VMT
   Λར༻ͨ͠੬ऑੑରࡦ ʙ IUUQTXXXJQBHPKQTFDVSJUZSFQPSUTUFDIOJDBMXBUDIIKVPKNPBUUQEG
7. ࣝผͰ໾ཱٕͭज़ GPS
   &$
8. OBLBOPTIJNB@EFW ʮιϑτ΢ΣΞͷ೺Ѳʯͱʮ੬ऑੑͷಛఆʯʹϑΥʔΧε ˞ʮ੬ऑੑؔ࿈৘ใͷ৘ใऩूʯ͸ׂѪ
9. OBLBOPTIJNB@EFW ૉ๿ͳํ๏ r
   ύοέʔδ؅ཧπʔϧΛ࢖͏ ιϑτ΢ΣΞͷ೺Ѳ
10. OBLBOPTIJNB@EFW 5JQT
    "-
    Ͱ͸ EOG
    Λ࢖͏ ZVN
    ͸ EOG
    ΁ͷϙΠϯλʹͳ͍ͬͯΔɻ ιϑτ΢ΣΞͷ೺Ѳ 5IF
    EFGBVMU
    TPGUXBSF
    QBDLBHF
    NBOBHFNFOU
    UPPM
    JO
    "-
    JT
    %/' %/' JT
    UIF
    TVDDFTTPS
    UP
    :6.
    UIF
    QBDLBHF
    NBOBHFNFOU
    UPPM
    JO
    "- r Ҿ༻
    1BDLBHF
    NBOBHFNFOU
    UPPM
     "NB[PO
    -JOVY
    
11. OBLBOPTIJNB@EFW "84
    ͳΒ r
    44.
    *OWFOUPSZʂ ˞
    44.
    
    "84
    4ZTUFNT
    .BOBHFS
    ͷུশ ˔ αʔόʔͷΠϯϕϯτϦσʔλΛऩूͯ͘͠ΕΔػೳ ˔ ऩूͯ͘͠ΕΔσʔλͷྫ ˓ 04৘ใ ˓ ΞϓϦέʔγϣϯ৘ใ ˓ ωοτϫʔΫ৘ใ ͳͲ ιϑτ΢ΣΞͷ೺Ѳ
12. OBLBOPTIJNB@EFW ৄ͘͠͸ͪ͜ΒΛݟͯͶ ιϑτ΢ΣΞͷ೺Ѳ IUUQTEFWDMBTTNFUIPEKQBSUJDMFTNJEPTVKJUFDITTNJOWFOUPSZ
13. OBLBOPTIJNB@EFW ૉ๿ͳํ๏ r
    ύοέʔδ؅ཧπʔϧΛ࢖͏ ੬ऑੑͷಛఆ
14. OBLBOPTIJNB@EFW "84ͳΒ r
    "NB[PO
    *OTQFDUPS
     ˔ "84ͷ੬ऑੑεΩϟϯαʔϏε ˔ ܧଓతͳεΩϟϯ ˔ τϦΞʔδʹ໾ཱͭ৘ใΛ෇༩͠ ͯϨϙʔτΛࣗಈੜ੒ ੬ऑੑͷಛఆ
15. OBLBOPTIJNB@EFW ࢀߟ
    *OTQFDUPS
    ը໘ Πϯελϯεผ ੬ऑੑͷಛఆ
16. OBLBOPTIJNB@EFW ࢀߟ
    *OTQFDUPS
    ը໘ Πϯελϯεผ ੬ऑੑͷಛఆ
17. OBLBOPTIJNB@EFW ࢀߟ
    *OTQFDUPS
    ը໘ ੬ऑੑৄࡉ  ੬ऑੑͷಛఆ
18. OBLBOPTIJNB@EFW ࢀߟ
    *OTQFDUPS
    ը໘ ੬ऑੑผ  ੬ऑੑͷಛఆ
19. OBLBOPTIJNB@EFW ࢀߟ
    *OTQFDUPS
    ը໘ ੬ऑੑผ  ੬ऑੑͷಛఆ
20. OBLBOPTIJNB@EFW 5JQT
    *OTQFDUPS
    ͷ ΤʔδΣϯτϨε਍அ 
    ʹ Ұൠఏڙ։࢝ ("
    ͞ΕͨػೳͰ͢ɻ ैདྷ͸&$ʹ44.ΤʔδΣϯτಋೖ͕ඞཁͰ͕ͨ͠ɺ ΤʔδΣϯτແ͠εΩϟϯ΋ՄೳʹͳΓ·ͨ͠ɻ ࢓૊Έͱͯ͠͸&#4εφοϓγϣοτΛ׆༻͠·͢ɻ ੬ऑੑͷಛఆ
21. ద༻Ͱ໾ཱٕͭज़ GPS
    &$
22. OBLBOPTIJNB@EFW ૉ๿ͳํ๏ r
    ύοέʔδ؅ཧπʔϧΛ࢖͏ XJUI
    44) ύονద༻
23. OBLBOPTIJNB@EFW "84ͳΒ r
    44.Λ࢖ͬͯεςοϓΞοϓʂ ύονద༻
24. OBLBOPTIJNB@EFW ৄ͘͠͸ͪ͜ΒΛݟͯͶ ύονద༻ IUUQTEFWDMBTTNFUIPEKQBSUJDMFTBMQBUDIQBUUFSOT
25. ͓ΘΓ
26. OBLBOPTIJNB@EFW ͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·͢ʂ
27. OBLBOPTIJNB@EFW ࢀߟ ˔ ੬ऑੑରࡦͷޮՌతͳਐΊํʢπʔϧ׆༻ฤʣ c
    *1" ˔ "84
    4ZTUFNT
    .BOBHFS
    ͱ͸ c
    "84 ˔ "NB[PO
    *OTQFDUPS
    ͱ͸ c
    "84 ˔ 44.
    *OWFOUPSZ
    Λ࢖ͬͯศརʹ &$
    ୨Է͠ʢϋϚΓͲ͜ΖΛఴ͑ͯʣ NJEPTVKJ@UFDI
    c
    %FWFMPQFST*0 ˔ ʲ੬ऑੑରԠʳ"NB[PO
    -JOVY
    
    ͷ &$Πϯελϯε΁ಛఆύονΛ౰ͯΔํ๏Λͭ c
    %FWFMPQFST*0