Lock in $30 Savings on PRO—Offer Ends Soon! ⏳

スケーラブルなセキュリティ監視基盤の作り方 /techconf2019-mizutani

スケーラブルなセキュリティ監視基盤の作り方 /techconf2019-mizutani

Masayoshi Mizutani

February 27, 2019
Tweet

More Decks by Masayoshi Mizutani

Other Decks in Technology

Transcript

  1. ࣗݾ঺հɿਫ୩ਖ਼ܚ (@m_mizutani) 2 w લ৬ w ৘ใηΩϡϦςΟؔ࿈ͷݚڀ։ൃ w ηΩϡϦςΟΦϖϨʔγϣϯηϯλʔͷΞφϦετ w

    ೥݄ΫοΫύουೖࣾ w ٕज़෦ηΩϡϦςΟάϧʔϓάϧʔϓ௕ w ηΩϡϦςΟ؂ࢹΛத৺ʹηΩϡϦςΟؔ࿈ۀ຿ʹैࣄ
  2. Security as Code ʢϩάऩूͱ෼ੳʣ 11 w ݕ஌ʹؔΘΔॲཧΛίʔυԽ͢Δ͜ͱͰղܾ w มߋޙͷϧʔϧΛςετՄೳ w

    Ξϥʔτ൑ఆ৚݅ͷߴ͍هड़ྗ w ࣗಈతͳ௥ՃσʔλऩूʹΑΔলྗԽ w όʔδϣϯ؅ཧʹΑΔอकੑͷ޲্
  3. 3rd Party Services ΞϥʔτॲཧͷύΠϓϥΠϯ 12 S3 ϩάσʔλ Ξϥʔτͷݕग़ ؔ࿈৘ใͷऩू ΞϥʔτͷධՁ

    ରԠঢ়گͷڞ༗ ؔ࿈৘ใͷू໿ Ξϥʔτͷ௨஌ 3rd Party Services Internal Data Source
  4. Ξϥʔτͷݕग़ 13 w 4ʹసૹ͞Εͨϩά͔ΒΞϥʔτ Λݕग़͢ΔͨΊͷॲཧ w ηΩϡϦςΟϓϩμΫτ͕Ξϥʔτ ͱͯ͠ൃใͨ͠ϩάͷநग़ w ͦͷଞɺϩάͰෆ৹ͳߦಈ͕͋ͬͨ

    ৔߹ʹΞϥʔτͱͯ͠ൃใ Ξϥʔτݕग़-BNCEB ʢݕग़ϧʔϧʣ ো֐ൃੜ࣌ʹॲཧ࠶։Λ ༰қʹ͢ΔͨΊ,JOFTJT %BUB4USFBNΛར༻ ฒྻॲཧͷͨΊͷ %JTQBUDIFS S3 Bucket SNS S3 Bucket S3 Bucket SNS SNS Lambda Kinesis data stream Lambda Lambda Lambda Lambda SNS
  5. Ξϥʔτؔ࿈৘ใͷऩू 16 w ֎෦͔Βͷऩू w ྫʣϚϧ΢ΣΞؔ࿈৘ใαΠτ w ྫʣαϯυϘοΫεαΠτ w ಺෦͔Βͷऩू

    w ྫʣؔ࿈Ϣʔβͷߦಈϩά w ྫʣΞΫηεݩσόΠεͷ৘ใ Ξϥʔτʹؔ࿈ͨ͠ϩά ͷ౸ணΛ଴ͭͨΊͷ%FMBZ ৘ใऩूͷ݁ՌΛ ଴ͭͨΊͷ%FMBZ Ξϥʔτݕ஌ͷ௨஌ ৘ใऩूͷ݁ՌΛ ଴ͭͨΊʹ%FMBZ ৘ใऩू -BNCEB Lambda Lambda Lambda Lambda Lambda Lambda DynamoDB SNS SNS Step Function Step Function
  6. DynamoDB Step Function Lambda Lambda Lambda (1) Invoke (2) Invoke

    (3) Invoke ΞϥʔτͷධՁ 17 w Ξϥʔτʴऩूͨؔ͠࿈৘ใ͔ΒϦ εΫධՁͯ݁͠ՌΛ௨஌ w ෳ਺ͷ৘ใΛ૊Έ߹ΘͤΔ͜ͱͰΑ Γਫ਼ີͳධՁ͕Մೳ w ίʔυͱͯ͠هड़͓ͯ͘͜͠ͱͰ୭ ͕ͲͷΑ͏ͳҙਤͰϩδοΫ͕मਖ਼ ͞Ε͔ͨΛ೺Ѳ͠΍͍͢ ௨஌ͳͲ ϦεΫධՁ -BNCEB ৘ใऩूޙʹൃಈ ؔ࿈৘ใΛूੵ ؔ࿈৘ใΛϚʔδ ධՁ׬ྃͷ௨஌