Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Amazon inspector で自動セキュリティ診断 / Automatic secur...

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Ryo Shibayama Ryo Shibayama
November 20, 2016
Technology
98
0

Amazon inspector で自動セキュリティ診断 / Automatic security diagnostics with Amazon inspector

Avatar for Ryo Shibayama

Ryo Shibayama

November 20, 2016

More Decks by Ryo Shibayama

See All by Ryo Shibayama
技術広報の集い #3 Lightning Talk - LayerX
Avatar for Ryo Shibayama serima
0
460
採用は全員で | Chuo TECH #1
Avatar for Ryo Shibayama serima
4
1.5k
高専 5 年時に 7 泊 8 日の合宿型ビジコンに参加したら人生が変わった
Avatar for Ryo Shibayama serima
0
470
カジュアル面談を通して “自社”のことを知る
Avatar for Ryo Shibayama serima
0
290
倒れても進捗 / Progress even if I fall
Avatar for Ryo Shibayama serima
1
890
CircleCI 導入への入門 / Introduction to CircleCI
Avatar for Ryo Shibayama serima
0
150
GameWithを支えるインフラ基盤 - スケールイン・アウト戦略編 / GameWith infrastructure - Scale in and out strategy
Avatar for Ryo Shibayama serima
0
100
エンジニア採用と PHP / Engineer Recruitment and PHP
Avatar for Ryo Shibayama serima
0
130
できることから始める OSS Contribution / Start OSS Contribution With What You Know
Avatar for Ryo Shibayama serima
1
280

Other Decks in Technology

See All in Technology
生成AI時代の クレデンシャルとパーミッション設計
Avatar for NRI Netcom nrinetcom
PRO
4
1.6k
Webとヘルスデータ
Avatar for Yuku Kotani yukukotani
0
190
Self Healing Rollouts: Automating Production Fixes with Agentic AI
Avatar for Kevin Dubois kdubois
0
160
コスト最適化の「めんどくさい」を AWS FinOps Agent でチョット楽にする
Avatar for kaz classmethod_kaz
0
250
Microsoft 365 Copilot chat -tekoälypalvelun tietosuojaongelmat
Avatar for Harto Pönkä hponka
0
450
Jetpack Compose で挑む新聞紙面UI ─ 複合ジェスチャー・ポリゴン記事領域・適応的ページ構成という3つの壁/droidkaigi2026
Avatar for 日本経済新聞社 エンジニア採用事務局 nikkei_engineer_recruiting
0
230
20260903 Tokyo Jazug Night #62 | Azure エンジニアよ、 その環境は本当にセキュアか？
Avatar for Olivia olivia_0707
1
620
Bet AI Day 2026丨Production-Ready AI Agents — エンタープライズの実務を任せるための設計と運用
Avatar for LayerX layerx
PRO
3
2.5k
V8コントリビュート超入門
Avatar for Riya Amemiya riyaamemiya
0
140
全員がプロダクトへ向き合う組織を持続成長させるために——組織づくりのフライホイールと4象限 / The Flywheel Model and Four Quadrants for Organizational Design
Avatar for hiro-torii hiro_torii
3
870
Guerilla InnerSource in enterprises, during the AI hype
Avatar for Oleg Nenashev onenashev
PRO
0
150
AIエージェントの開発・提供におけるセキュリティリスクの論点と対策
Avatar for GMO Flatt Security flatt_security
1
590

Featured

See All Featured
The innovator’s Mindset - 
Leading Through an Era of Exponential Change - McGill University 2025
Avatar for Jean-Marc De Jonghe jdejongh
PRO
1
320
Performance Is Good for Brains [We Love Speed 2024]
Avatar for Tammy Everts tammyeverts
12
1.8k
Build your cross-platform service in a week with App Engine
Avatar for Jose L jlugia
234
19k
HTML-Aware ERB: The Path to Reactive Rendering @ RubyCon 2026, Rimini, Italy
Avatar for Marco Roth marcoroth
4
580
Joys of Absence: A Defence of Solitary Play
Avatar for Sebastian Deterding codingconduct
1
480
How to Think Like a Performance Engineer
Avatar for Harry Roberts csswizardry
28
2.8k
SEOcharity - Dark patterns in SEO and UX: How to avoid them and build a more ethical web
Avatar for Sara Fernández Carmona sarafernandez
0
270
How to Talk to Developers About Accessibility
Avatar for Jason CranfordTeague jct
2
540
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
Avatar for Vitaly Friedman smashingmag
254
22k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
Avatar for mongodb mongodb
49
10k
The Illustrated Children's Guide to Kubernetes
Avatar for Chris Short chrisshort
51
53k
コードの90%をAIが書く世界で何が待っているのか / What awaits us in a world where 90% of the code is written by AI
Avatar for r-kagaya rkaga
63
45k

Transcript

  1. Amazon Inspector Ͱ ࣗಈηΩϡϦςΟ਍அ גࣜձࣾβούϥε @serima / ࣲࢁ ྮ

  2. ࣗݾ঺հ • ىۀˠ·͙·͙ˠάϦʔˠβούϥε • βούϥεೖࣾ 1 ೥ܦͬͨ • αʔόαΠυΤϯδχΞ •

    Πϯϑϥ΋΍͍ͬͯ·͢

  3. Rint

  4. AWS ࢖ͬͯ·͢ • βούϥεͰ͸ɺҰ෦αʔϏεͰ AWS Λར༻ • EC2/ELB/Route 53/S3/RDS/ElastiCache ౳

    • ελϯμʔυͳߏ੒

  5. ੬ऑੑ ಡΊͳ͍

  6. ੬ऑੑ • γεςϜͷ҆શ্ͷܽؕ • ηΩϡϦςΟϗʔϧ • ์͓ͬͯ͘ͱɺ͜ΕΛಥ͔Εͯඃ֐Λड͚Δ Մೳੑ͕͋Δ

  7. ຖिͷΑ͏ʹݟ͔ͭΔ੬ऑੑ

  8. ৘ใݯ • JPCERT • IPA • Wordpress ެࣜαΠτ • PHP

    ެࣜαΠτ • ଞʹ΋͍Ζ͍Ζ…
  9. None

  10. CVE • Common Vulnerabilities and Exposures • ڞ௨੬ऑੑࣝผࢠ • ถࠃͷMITRE͕ࣾఏڙ͍ͯ͠Δ੬ऑੑ৘ใ

    σʔλϕʔε • CVE-ID ͸ҰҙʹৼΒΕɺੈքڞ௨

  11. ηΩϡϦςΟνΣοΫɺ ͯ͠·͔͢ʁ

  12. Amazon Inspector • 2016೥5݄ʹҰൠར༻։࢝ • EC2 Πϯελϯεͷ੬ऑੑΛݕ஌ͯ͘͠ΕΔ αʔϏε

  13. None
  14. None

  15. ԿͷνΣοΫ͕Ͱ͖Δͷ͔ • Common Vulnerabilities and Exposures • CIS Operating System

    Security Configuration Benchmarks • Security Best Practices • Runtime Behavior Analysis

  16. खॱ • Inspector ༻ͷϩʔϧΛ࡞੒͢Δ • ର৅ͱ͢Δ EC2 ΠϯελϯεʹλάΛઃఆ • σʔϞϯΛΠϯετʔϧ

    • ධՁςϯϓϨʔτͷ࡞੒ • Ͳͷλά͕͍ͭͨΠϯελϯεʹ͍࣮ͭͯߦ͢Δͷ͔ • ԿͷηΩϡϦςΟνΣοΫΛߦ͏ͷ͔ • ࣮ߦ
  17. None

  18. $ curl -O https:// d1wk0tztpsntt1.cloudfront. net/linux/latest/install $ sudo bash install

  19. None

  20. ࢼݧ༻ʹ OpenSSL ͷ όʔδϣϯ͕গ͠ݹ͍ ΠϯελϯεΛ༻ҙ

  21. None

  22. ݁Ռ

  23. ͦΕͧΕʹ͍ͭͯৄࡉઆ໌ͱରॲ๏͕ࢀরͰ͖Δ

  24. Ϧϕϯδ ͱΓ͋͑ͣॏཁ౓ High ͷ΋ͷ͸ͳ͘ͳͬͨ

  25. ֦͕Γͱͯ͠͸ • Amazon SNS ରԠ͍ͯ͠ΔͷͰɺ׬ྃ࣌ʹ Slack ͳͲʹ௨஌ • ΋ͪΖΜ SDK

    ΋ެ։͞Ε͍ͯΔͷͰɺఆظత ʹࣗಈ࣮ߦͤ͞Δ͜ͱ΋Մೳ
 ʢࠓͷͱ͜Ζίϯιʔϧ͔ΒͰ͖Δػೳ͸ͳ ͛͞ʣ

  26. ҆৺ɾ҆શͳ։ൃΛ • ͱ͸͍͑ɺ͜Ε͚ͩͰ͸ෆे෼ • ੬ऑੑʹରͯ͠ɺҰఆͷอݥΛ͔͚Δ • χϡʔεΛνΣοΫͯ͠ɺద੾ͳରԠΛʂ