Upgrade to Pro — share decks privately, control downloads, hide ads and more …

vuls-jp_ec2-vuls-config_ja

Shuichi Ohsawa
September 26, 2016

 vuls-jp_ec2-vuls-config_ja

Shuichi Ohsawa

September 26, 2016
Tweet

More Decks by Shuichi Ohsawa

Other Decks in Programming

Transcript

  1. ͳͥͭͬͨ͘ͷ͔ • Πϯελϯε(αʔό)͕ৗʹมΘΓଓ͚͍ͯΔ؀ڥʹ͓͍ͯ
 εΩϟϯର৅΋ৗʹมΘΓଓ͚͍ͯΔ
 e.g. ΦʔτεέʔϦϯάɺ৽نαʔόߏஙɺ࡟আ etc • ৗʹεΩϟϯର৅Λߋ৽(ઃఆϑΝΠϧΛߋ৽)͢Δͷ͸େม •

    ͢΂ͯͷαʔόΛεΩϟϯ͢Δඞཁ͸ͳ͍ • ಉ͡ߏ੒ͷαʔό(e.g. Webαʔό)͕ෳ਺୆͋ΔͳΒͦͷ಺ͷ1୆͚ͩΛ
 εΩϟϯ͢Ε͹ྑ͍͸ͣ(ಛʹChef, Ansible౳Ͱߏ੒ͨ͠৔߹) • Amazon Inspector ͷΑ͏ʹλά͚ͩΛݟͯࣗಈతʹεΩϟϯର৅Λݟ͚ͭΔ
 ࢓૊Έ͕ཉ͔ͬͨ͠
  2. Πϯετʔϧ&ઃఆ • $ go get -u github.com/ohsawa0515/ec2-vuls-config • $ export

    AWS_ACCESS_KEY_ID=ACCESS_KEY_ID • $ export AWS_SECRET_ACCESS_KEY=ECRET_ACCESS_KEY • $ export AWS_REGION=us-east-1 • EC2Πϯελϯεʹ࣍ͷλάΛઃఆ
 ɾ Nameλά: αʔό໊ e.g. web-server-1
 ɾ εΩϟϯλά: εΩϟϯର৅ʹࢦఆ͍ͨ͠λά e.g. Vuls-Scan:True