インナーソースはじめました @ NES Tech Brewery

Transcript

1. Πϯφʔιʔε
   ͸͡Ί·ͨ͠ 
 4JN4UB
   !TIJNBHBKJ
    
 /&4
   4BQQPSP
   5FDI
   #SFXFSZ
   /FT5FDI#SFXFSZ 
 ˡϗϫΠτγϚϦεͷΞϧλ
2. ࣗݾ঺հ ɹ࡛ۄɹʢʙେֶͷ్த·Ͱʣ
   ˠࡳຈɹʢʙେֶɾ೥ʣ
   ˠਆಸ઒ʢʙେֶӃʙब৬ͯ͠೥൒͘Β͍ʣ
   ˠࡳຈɹʢʙ೥ͪΐͬͱɺݱࡏʣ
   ޷͖ͳ"84αʔϏεɿ
   4UFQ
   'VODUJPOT 4JN4UBʢΦϯϥΠϯͷ͕ͨ͢ʣ
   ,%%*ΞδϟΠϧ։ൃηϯλʔגࣜձࣾ
   ϓϥοτϑΥʔϜΤϯδχΞϦϯά෦ !TIJNBHBKJ
   5XJUUFS 4FSWFSMFTT ΧάΧά
3. ϗϫΠτγϚϦεͱ
   ฻Β͍ͯ͠·͢🐿 ˢ౳਎େνϧλϦε 5XJUUFSΞΧ΢ϯτ΋͋ΔΑ
   !BMUB@XIJUFDIJQ
   ࠷ۙॳΊͯ
   ಈ෺පӃʹߦ͖·ͨ͠
4. աڈͷొஃࢿྉΞοϓͯ͠·͢ʢࠓ೔ͷࢿྉ΋ʂʣ IUUQTTQFBLFSEFDLDPNTIJNBHBKJ
5. ݸਓϒϩάΛӡ༻͍ͯ͠·͢
   ͠·͕͡ ͠Ήͦ͘
   "84ΞοϓσʔτΛ
   ຖिߋ৽ʂ 
 ͦͷଞ
   Ϋϥ΢υΨδΣοτ
   γϚϦεͷ࿩ͳͲ
6. "HFOEB • ϓϥοτϑΥʔϜΤϯδχΞͷ͓࢓ࣄ
   • Πϯφʔιʔεͱͷग़ձ͍
   • ΠϯφʔιʔεͷޮՌͱ೉͠͞
   • ·ͱΊ
7. ϓϥοτϑΥʔϜΤϯδχΞͷ
   ͓࢓ࣄ
8. ϓϥοτϑΥʔϜΤϯδχΞϦϯάͬͯʁ ϓϥοτϑΥʔϜɾΤϯδχΞϦϯάͱ͸Կ͔ʁ
   
   (BSUOFS
   IUUQTXXXHBSUOFSDPKQKBBSUJDMFTXIBUJTQMBUGPSNFOHJOFFSJOH ҎԼΛຬͨ͢ϓϥοτϑΥʔϜΛ 
 ߏங͢ΔΞϓϩʔνΛࢦ͢
   ໨ඪɿ
   ɾ։ൃऀͷੜ࢈ੑ޲্
   ɾϏδωεՁ஋ͷ૑ग़
   ໨తɿ
   ɾ։ൃऀͷೝ஌ෛՙΛܰݮ
   ɾ։ൃऀͷΤΫεϖϦΤϯε޲্
   खஈɿ
   ɾηϧϑαʔϏεػೳͷॆ࣮
   ɾΠϯϑϥ΍ӡ༻ͷࣗಈԽ
9. ,"(
   ϓϥοτϑΥʔϜνʔϜͷ͓࢓ࣄ • ࣾ಺ڞ௨(JU)VC
   &OUFSQSJTF
   4FSWFSʢ()&4ʣͷ؅ཧ
   • ()&4΍ࣗࣾΫϥ΢υ؀ڥͷίετ࠷దԽ
   • ࣗࣾΫϥ΢υ؀ڥ΍*E1ͷӡ༻ɺ؅ཧ
   • ࣗࣾΫϥ΢υ؀ڥͱ֤Ҋ݅؀ڥͷηΩϡϦςΟվળ 
 ˠ4FDVSJUZ
   )VC΍(VBSE%VUZͷಋೖɺ؅ཧͳͲ
   • ֤εΫϥϜνʔϜ΁ͷώΞϦϯάɺࢧԉϝχϡʔ࡞੒
   • ͦͷଞɺͪΐͬͱ֎Ͱ͸࿩ͤͳ͍͜ͱͳͲ
10. ,"(
    ϓϥοτϑΥʔϜνʔϜͷ͓࢓ࣄ • ࣾ಺ڞ௨(JU)VC
    &OUFSQSJTF
    4FSWFSʢ()&4ʣͷ؅ཧ
    • ()&4΍ࣗࣾΫϥ΢υ؀ڥͷίετ࠷దԽ
    • ࣗࣾΫϥ΢υ؀ڥ΍*E1ͷӡ༻ɺ؅ཧ
    • ࣗࣾΫϥ΢υ؀ڥͱ֤Ҋ݅؀ڥͷηΩϡϦςΟվળ 
 ˠ4FDVSJUZ
    )VC΍(VBSE%VUZͷಋೖɺ؅ཧͳͲ
    • ֤εΫϥϜνʔϜ΁ͷώΞϦϯάɺࢧԉϝχϡʔ࡞੒
    • ͦͷଞɺͪΐͬͱ֎Ͱ͸࿩ͤͳ͍͜ͱͳͲ ˠ͜Ε͸ϓϥοτϑΥʔϜΤϯδχΞϦϯάͬΆ͍ ˠ͜Ε΋ϓϥοτϑΥʔϜΤϯδχΞϦϯάͬΆ͍͚Ͳൿີ ˠ͜͜ΑΓ্͸Πϯϑϥ΍$$P&ཁૉڧΊ
11. ηϧϑαʔϏεܕͷϓϥοτϑΥʔϜ 1MBUGPSN
    &OHJOFFSJOH
    PO
    4FSWFSMFTT
    IUUQTTQFBLFSEFDLDPN@LFOTIQMBUGPSNFOHJOFFSJOHPOTFSWFSMFTT • ҎԼͭ͸ʮ1MBUGPSN
    &OHJOFFSJOH
    PO
    4FSWFSMFTTʯ͔Βൈਮ
    • "NB[PO
    $PEF$BUBMZTU
    • "84
    4FSWJDF
    $BUBMPH
    • #BDLTUBHF
    • ॳظ͸(JU)VCͳͲͷίʔυϦϙδτϦͰ΋ՄೳͰ͸ʁͱߟ͑Δ 
 ˠࣾ಺ͷ(JU)VC
    &OUFSQSJTF
    0SHBOJ[BUJPOΛબఆ
12. (JU)VC
    &OUFSQSJTFͷ੔උʹΑΔ஍൫ݻΊ ϙʔλϧϦϙδτϦͷ࡞੒ ϦϙδτϦͷ࡞੒ϧʔϧ੍ఆ 5FBNTʹΑΔݖݶ؅ཧ
13. (JU)VC
    &OUFSQSJTFͷ੔උʹΑΔ஍൫ݻΊ • ೝ஌ෛՙͷ௿ݮͱՄࢹੑ޲্ʹΑΔෛ࠴Խͷ༧๷
    • ϙʔλϧϦϙδτϦͷ࡞੒
    • ϦϙδτϦ࡞੒ϧʔϧͷ੍ఆ
    • ηΩϡϦςΟ໘ͷݟ௚͠
    • 5FBNTʹΑΔϦϙδτϦ୯ҐͷΞΫηεݖݶઃఆ
    • 0SHBOJ[BUJPOʹ͓͚Δ#BTF
    1FSNJTTJPOTͷແޮԽ
    • ϦϙδτϦͷ7JTJCJMJUZΛݪଇ1SJWBUF΁มߋ
    • ࢧԉπʔϧ܈ͷѪশߟҊ
14. ࢧԉπʔϧ܈ʮLBHUPPMTʯͷߟҊ wҎԼͷΑ͏ͳ΋ͷΛࠓޙ࡞੒ɾఏڙ༧ఆ
    w (JU)VC
    "DUJPOT༻ͷ$PEF#VJME
    3VOOFSΛల։͢Δπʔϧ
    w /"5
    (BUFXBZΛࢦఆͨ࣌ؒ͠ͷΈϓϩϏδϣχϯά͢Δπʔϧ
    w ։ൃ؀ڥ޲͚ʹ/"5ΠϯελϯεΛ࡞੒͢ΔςϯϓϨʔτ
    wίϯϙʔωϯτ΍ίʔυεχϖοτͳͲɺ։ൃΛ௚઀αϙʔτ͢Δ΋ͷ΋࡞੒͍ͨ͠ LBHUPPMT
    w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈
    w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ
    
15. LBHUPPMTୈ஄ɿ(VBSE%VUZ4VNNBSJ[FS (VBSE%VUZ͔Βͷ௨஌Λ
    ͦͷ··4/4Ͱૹ৴͢Δͱ
    ͚ͬ͜͏ೝ஌ෛՙߴ͍ͷͰ
    શ෦#FESPDLʹ౤͛ͯ
    ͍͍ײ͡ʹͯ͠௨஌͢Δπʔϧ
16. (VBSE%VUZ4VNNBSJ[FSͷߏ੒ ௨஌ઌʹ4MBDLʢ&ϝʔϧ౳΋ՄʣΛ࢖͏͜ͱͰ
    ʢ΄΅ʣϊʔίʔυΛ࣮ݱ AWS Cloud GuardDuty Step Functions Bedrock SNS Invoke Execute EventBridge User Threats E-Mail Publish Slack Security Hub ᶃ(VBSE%VUZͷΠϕϯτΛ௚઀र͏
    ᶄ4FDVSJUZ
    )VCʹू໿͞ΕͨΠϕϯτΛर͏
    ͷͲͪΒ͔Λબ୒ͯ͠σϓϩΠՄೳ
17. LBHUPPMTʢϓϥοτϑΥʔϜΤϯδχΞϦϯάʣͷ՝୊ • ,"(ͷ૊৫ܗଶ
    • ࣄۀձࣾͱҟͳΓɺ֤Ҋ֤݅νʔϜͰγεςϜ͕ҟͳΔ
    • "84͚ͩͰͳ͘(PPHMF
    $MPVE"[VSFͷҊ݅΋ͦͦ͜͜
    • ϓϥοτϑΥʔϜνʔϜͷݶք
    • ΧόʔͰ͖Δٕज़ྖҬ͕ݶΒΕͯ͠·͏ 
 ˠʮࢧԉͰ͖Δ΋ͷʯͱʮٻΊΒΕ͍ͯΔ΋ͷʯͷΞϯϚον
    • πʔϧ૿ՃʹΑΔϝϯςφϯε΍վળ͕Ͱ͖Δ࿑ྗͷෆ଍
    • ޮՌతʹ֤νʔϜΛࢧԉͰ͖Δ͔ͱ͍͏ෆ҆ɾɾɾ
18. Πϯφʔιʔεͱͷग़ձ͍
19. ·ͣ͸ͪ͜ΒΛ͝ཡ͍ͩ͘͞
20. IUUQTZPVUVCF/0I@J'-:D TJ@,NF.TX#RER1(
22. ɹͦ͏ͩɺ
    ɹΠϯφʔιʔεɺ
    ɹ΍Ζ͏ɻ
23. Πϯφʔιʔεͱ͸ʁ ΠϯφʔιʔεͰ࢝ΊΔ
    ૊৫಺Φʔϓϯιʔε։ൃೖ໳
    IUUQTTQFBLFSEFDLDPNZVIBUUPSJOOFSTPVSDFMFBSOJOHQBUIKBQBOFTF ҰݴͰද͢ͱʮࣾ಺Φʔϓϯιʔεʯ
24. LBHUPPMTͷํ਑มߋ LBHUPPMT
    w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈
    w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ
    w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ
25. LBHJTNͷ௥Ճ ͲͪΒ΋Πϯφʔιʔεʢࣾ಺ΦʔϓϯιʔεʣͷҐஔ෇͚
    ؅ཧӡ༻ͷओମ͕ϓϥοτϑΥʔϜνʔϜ͔༗ࢤ͔ͷҧ͍ LBHUPPMT
    w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈
    w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ
    w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ LBHJTN
    w ֤νʔϜ΍νʔϜͳͲɺࣾ಺ͷ͋ΒΏΔ৔ॴ͔Βఏڙӡ༻͞ΕΔϓϩμΫτ
    w ϦϙδτϦͷ࡞੒ϧʔϧʹଇΕ͹୭Ͱ΋ఏڙ0,
    w ֤ϦϙδτϦͷϧʔϧʹै͑͹୭Ͱ΋ίϯτϦϏϡʔτ0,
26. LBHJTNͷJTNͬͯͳʹʁ
27. LBHJTNͷJTNͬͯͳʹʁ JOOFS
    TPVSDF
    NBO
28. ΠϯφʔιʔεͷޮՌͱ೉͠͞
29. ΠϯφʔιʔεͷޮՌ • Φʔϓϯͳ؀ڥͷߏங
    • πʔϧ΍φϨοδͷڞ༗ɺࣾ಺શମͰͷ஝ੵ
    • ʮंྠͷ࠶ൃ໌ʯͷ๷ࢭ
    • ίϥϘϨʔγϣϯจԽͷৢ੒
    • ϑΟʔυόοΫͱίϯτϦϏϡʔγϣϯͷଅਐ
    • νʔϜؒͷڠྗମ੍ͷڧԽ
    ɺαΠϩԽͷղফ
    • ϓϩμΫτͱ૊৫ͷվળ
    • ੡඼඼࣭΍։ൃੜ࢈ੑͷ޲্
    • ৽ͨͳΠϊϕʔγϣϯͷଅਐ
30. Πϯφʔιʔεͷ೉͠͞ • ܧଓతͳϝϯςφϯεͷཁٻ
    • ϝϯςφϯε͞Εͳ͍πʔϧ΍φϨοδ͸ෛ࠴Խ͢Δ
    • ʮ๩͍͔͠ΒϝϯςͰ͖ͳ͍ʯʮఏڙͯ͠ऴΘΓʯΛແ͍ͨ͘͠
    • ίϥϘϨʔγϣϯจԽͷৢ੒
    • (JWFͱ5BLFͷؔ܎͕ҰํతʹͳΓ͗͢ͳ͍Α͏ʹ͢Δ
    • ࣗൃతͳίϯτϦϏϡʔγϣϯ͕ߦ͑Δ؀ڥͱจԽ͕ඞཁ
    • վળʹΑΔޮՌͷଌఆ
    • ޮՌΛ࣮ײ͢ΔͨΊʹ͸ࢦඪΛઃ͚ɺ֤Ҋ݅Ͱܭଌͯ͠΋Β͏
    
31. Πϯφʔιʔεͷ೉͠͞ • ܧଓతͳϝϯςφϯεͷཁٻ
    • ϝϯςφϯε͞Εͳ͍πʔϧ΍φϨοδ͸ෛ࠴Խ͢Δ
    • ʮ๩͍͔͠ΒϝϯςͰ͖ͳ͍ʯʮఏڙͯ͠ऴΘΓʯΛແ͍ͨ͘͠
    • ίϥϘϨʔγϣϯจԽͷৢ੒
    • (JWFͱ5BLFͷؔ܎͕ҰํతʹͳΓ͗͢ͳ͍Α͏ʹ͢Δ
    • ࣗൃతͳίϯτϦϏϡʔγϣϯ͕ߦ͑Δ؀ڥͱจԽ͕ඞཁ
    • վળʹΑΔޮՌͷଌఆ
    • ޮՌΛ࣮ײ͢ΔͨΊʹ͸ࢦඪΛઃ͚ɺ֤Ҋ݅Ͱܭଌͯ͠΋Β͏
    ˠࣾ಺ͷʮΠϯφʔιʔεʯͱ͍͏ίϛϡχςΟΛӡӦ͍ͯ͘͠೉͠͞
32. ʮ೉͠͞ʯʹର͢Δ,"(ͷ͍͍ॴʢએ఻ʣ • ΞδϦςΟͱࣗ༝౓͕ߴ͍
    • উखʹLBHUPPMTͱ͔LBHJTNͱ͔࡞ͬͯ΋ڐ͞ΕΔ
    • ͋Δఔ౓͸ࣗݾͷ੹೚ʹ͓͍ͯਐΊΒΕΔͷͰૉૣ͘औΓ૊ΊΔ
    • ࣦഊΛա౓ʹ੹ΊΔจԽ͕ͳ͍
    • ৺ཧతͳϓϨογϟʔ͕΄ͱΜͲͳ͍
    • ʮೋਓ໨ʹགྷΔਓʯ͕͍Δ
    • औΓ૊Έʹରͯ͠৐ͬͯ͘ΕΔޙԡͯ͘͠͠ΕΔਓ͕͍Δ
    • ʮΠϯφʔιʔεʯͱ͍͏ίϛϡχςΟӡӦ͕ʢൺֱతʣָʹ࣮ફͰ͖Δ 
 ʢࣗ૸Ͱ͖Δ΄Ͳ؆୯Ͱ͸ͳ͍ͷͰؤுΓ·͢ʣ νʔϜʹϊϦΛ΋ͨΒͨ࣌͠ʹ͍ͨʮೋਓ໨ʹགྷΔਓʯͷڞ௨఺
    IUUQTTQFBLFSEFDLDPNQJZPOBLBKJNBUJNVOJOPSJXPNPUBSBTJUBTIJOJJUBFSSFONVOJZPOHSVSFOOPHPOHUPOHEJBO
33. ࢀߟɿΞδϟΠϧ։ൃηϯλʔݑষ
34. ԿΑΓֶΜͰ࣮ફ͢΂͖ʂ νʔϜτϙϩδʔ Πϯφʔιʔεύλʔϯ ίϛϡχςΟ
35. ࣮ફྫɿEFWJP
    ΑΓ Πϯφʔιʔε1MBUGPSN
    &OHJOFFSJOH͍ͣΕ΋,"(͕໨ࢦ͢΂͖࢟ͷҰͭͳؾ͕͢Δ
    $MBTTNFUIPEྲྀͷ1MBUGPSN
    &OHJOFFSJOH
    IUUQTEFWDMBTTNFUIPEKQBSUJDMFTDMBTTNFUIPEQMBUGPSNFOHJOFFSJOHEFWJP
36. ࣮ફྫɿ4FSWFSMFTT
    %BZT
    5PLZP
    ΑΓ 1MBUGPSN
    &OHJOFFSJOHͷ࣮ફʹఆ·ͬͨਖ਼ղ͸ແ͘ɺ૊৫ʹద߹͍ͤͯ͘͜͞ͱ͕ॏཁͩͱ௧ײ
    ͍·͋ΔνʔϜʹϑΟοτͤ͞Δ
    4FSWFSMFTT
    ͦͯ͠
    1MBUGPSN
    &OHJOFFSJOH΁ͷ௅ઓ
    IUUQTTQFBLFSEFDLDPNTFJLFTFSWFSMFTTGJUTUIFUFBNZPVIBWFBOEQMBUGPSNFOHJOFFSJOH
37. ·ͱΊ
38. ·ͱΊ • ϓϥοτϑΥʔϜΤϯδχΞϦϯάͷऔΓ૊ΈΛ࢝ΊΔ্Ͱɺ 
 ΠϯφʔιʔεʹײԽ͞Εɺཱ྆ͤ͞ΔܗͰൃ଍ 
 ˠʮLBHUPPMTʯͱʮLBHJTNʯ
    • ΠϯφʔιʔεʹΑΓνʔϜؒͷίϥϘϨʔγϣϯ͕ਪਐ͞Εɺ 
 ंྠͷ࠶ൃ໌Λ๷͙͜ͱ͕Ͱ͖Δ
    • Πϯφʔιʔε׆ಈ͸ίϛϡχςΟʹࣅ͍ͯΔ 
 ˠద੾ʹӡӦ͠ͳ͚Ε͹ޮՌΛൃشͤͣɺٕज़ෛ࠴ͷԹচͱͳΔ
    • ϓϥοτϑΥʔϜΤϯδχΞͱͯ͠ηϧϑαʔϏεܕͷࢧԉΛਪਐ 
 Πϯφʔιʔε׆ಈͱͷ૬৐ޮՌʹΑΓɺΑΓ։ൃऀମݧͷ޲্Λ໨ࢦ͢
    • ઌਓͷφϨοδͱίϛϡχςΟ͔Βֶͼɺ࣮ફ͢Δʂ
39. 5IBOL
    ZPVʂ