AWSアカウントのセキュリティを守る　IAM編

"84ΞΧ΢ϯτͷ ηΩϡϦςΟΛकΔ *".ฤ /3*ωοτίϜגࣜձࣾɹ ࠤʑ໦୓࿠ ෋ࢁ*5ษڧձ #෋ࢁITษڧձ

ࠤʑ໦୓࿠ CMPHIUUQTCMPHUBLVSPTOFU 5XJUUFS!ELGK ࣗݾ঺հ #෋ࢁITษڧձ

+BQBO"1/"NCBTTBEPS બग़͞Ε·ͨ͠ ࣗݾ঺հ #෋ࢁITษڧձ

ࠓ೔࿩͢ςʔϚ "84ʹ͓͚Δ̐ͭͷηΩϡϦςΟͷ࣠ *".େࣄͩΑ ηΩϡϦςΟΛҡ࣋͢ΔͨΊͷ"84αʔϏε ͓·͚ #෋ࢁITษڧձ

"84ͱηΩϡϦςΟ

"84ͱηΩϡϦςΟ #෋ࢁITษڧձ ͍Ζ͍Ζ΍Δ͜ͱ͕ଟͯ͘ɺ ΍΍͍͜͠ͱࢥͬͨ͜ͱ͋Γ·ͤΜ͔ શମ૾Λ೺Ѳ͢ΔͨΊʹɺͬ͘͟Γͱ ෼ྨͯ͠Έ·͠ΐ͏

"84ͱηΩϡϦςΟ #෋ࢁITษڧձ "84ͷηΩϡϦςΟ͸ͭͷ࣠Ͱߟ͑Δ ᶃ"84಺ʹߏஙͨ͠ωοτϫʔΫͱαʔόʔͷηΩϡϦςΟ ᶄ"84ͷαʔϏε܈ͷઃܭɾઃఆ ᶅ"84ૢ࡞ʹؔ͢Δݖݶʢ*".ʣ ᶆηΩϡϦςΟΛҡ࣋؅ཧ͢ΔͨΊͷ"84αʔϏε AWS Management Console
Role VPC AWS Cloud Subnet Internet gateway Amazon Simple Storage Service (S3) VPN gateway Endpoints User ૢ࡞ݖݶ Instance Instance Instance AWS Lambda Role ᶅ ᶄ ᶃ AWS Command Line Interface AWS Config AWS Systems Manager AWS Service Catalog AWS Trusted Advisor AWS CloudTrail ᶆ ηΩϡϦςΟΛҡ࣋ ؅ཧ͢ΔαʔϏε

ᶃ"84಺ʹߏஙͨ͠ωοτϫʔΫͱ αʔόʔͷηΩϡϦςΟ #෋ࢁITษڧձ ੹೚ڞ༗Ϟσϧͷ੺࿮ͷ෦෼ ઃܭͷߟ͑ํ͸ΦϯϓϨͱେ͖͘ҧΘͳ͍͕ɺઃఆͷ࢓ ํ͸"84ͷྲّྀʹै͏ඞཁ͕͋Δ IUUQTBXTBNB[PODPNKQDPNQMJBODFTIBSFESFTQPOTJCJMJUZNPEFM

ᶄ"84ͷαʔϏε܈ͷઃܭɾઃఆ ͍ΘΏΔϚωʔδυαʔϏε Ϣʔβʔࣗ਎ͰΧόʔ͢Δൣғ͸গͳ͍͕ɺαʔϏε͝ ͱʹಛੑΛཧղ͢Δඞཁ͕͋Δ 㱺·ͣ͸ɺ࢖͏΋ͷ͚֮ͩ͑Ε͹ྑ͍ IUUQTXXXTMJEFTIBSFOFU"NB[PO8FC4FSWJDFT+BQBOBXTXIJUFCFMUPOMJOFTFNJOBSBXT

ᶅ"84ͷૢ࡞ʹؔ͢Δݖݶʢ*".ʣ #෋ࢁITษڧձ "84ͷηΩϡϦςΟͷத֩ͷҰͭ ͲΜͳʹωοτϫʔΫ΍αʔόʔͷηΩϡϦςΟΛڧݻʹ ͍ͯͯ͠΋ɺ"84Λ௚઀ૢ࡞͞ΕΔͱ͕݀։͚ΒΕΔ "84ͷബ͍ຊɹ*".ͷϚχΞοΫͳ࿩ IUUQTCPPUIQNKBJUFNT

ᶆηΩϡϦςΟΛҡ࣋؅ཧ͢Δ ͨΊͷ"84αʔϏε #෋ࢁITษڧձ "84ಠࣗͷ෦෼ ར༻͠ͳͯ͘΋γεςϜΛηΩϡΞͳঢ়ଶΛҡ࣋Ͱ͖Δ͕ɺ ্ख͘׆༻͢ΔͱࣗྗͰ΍ΔΑΓഒָʹͳΔ "84ͷബ͍ຊᶘΞΧ΢ϯτηΩϡϦςΟͷϕʔγοΫηΦϦʔ IUUQTCPPUIQNKBJUFNT

෼ྨ͠ݴޠԽ͢Δ͜ͱʹΑΓ ཧղ͕ਐΉ #෋ࢁITษڧձ @kaitendaentais https://twitter.com/kaitendaentai/status/1052689241744896001

*".ͷઃܭΛݴޠԽ͢Δ

*".ͷϚχΞοΫͳ࿩ͷ঺հ https://takuros.booth.pm/items/1563844

*".ͷϚχΞοΫͳ࿩ɹ໨࣍ ͸͡Ίʹ ୈষ"84ͱ*". ୈষ*".ͷػೳ ୈষ*".νϡʔτϦΞϧ ୈষ*".ϙϦγʔͷσβΠϯύλʔϯ ୈষ*".άϧʔϓͷσβΠϯύλʔϯ ୈষ*".ͱηΩϡϦςΟ ୈষ*".ͷӡ༻ ୈষ*".ͱ$MPVE'PSNBUJPO
ୈষ*".ͷςϯϓϨʔτू ୈষ*".Ҏ֎ͷ"84αʔϏεͷ׆༻ ෇࿥"ΞΧ΢ϯτ։ઃ࣌ͷઃఆνΣοΫϦετ #෋ࢁITษڧձ

*".ઃܭͷجຊํ਑

*".ઃܭͷجຊํ਑ #෋ࢁITษڧձ कΔ΂͖جຊํ਑͸͚̎ͭͩ ೝূ৘ใΛ౪·Εͳ͍Α͏ʹ͢Δӡ༻ઃܭ ΞΫηεΩʔʗγʔΫϨοτΞΫηεΩʔͰ͸ͳ͘ϩʔϧͷར༻ HJUTFDSFUTͷར༻ ೝূ৘ใ͕౪·Εͯ΋ඃ֐Λ࠷খݶʹ͢Δݖݶઃܭ .'"ඞਢԽ΍*1੍ݶ΍ͳͲͷར༻੍ݶ ࠷খݖݶͷઃఆ

*".ϙϦγʔͷσβΠϯύλʔϯ

*".ϙϦγʔ *".ϙϦγʔͷσβΠϯύλʔϯ͸̏ͭ ϗϫΠτϦετɾύλʔϯ ϒϥοΫϦετɾύλʔϯ ϋΠϒϦοτɾύλʔϯ #෋ࢁITษڧձ

ڐՄ͢ΔݖݶͷΈ෇༩͍ͯ͘͠ύλʔϯɹɹ &$΍4ͱ͍ͬͨαʔϏε୯Ґ΍ɺߋʹࡉ͔͘ΞΫγϣϯ୯ҐͰ෇༩ "84؅ཧϙϦγʔ΋ɺ͋ΔҙຯϗϫΠτϦετύλʔϯ ˞Ͱ΋ɺͦͷ··࢖͏ʹ͸ૈ͍ #෋ࢁITษڧձ ϗϫΠτϦετɾύλʔϯ FD %FTDSJCF 4UPQ 4UBSU
ಛఆͷαʔϏεɾΞΫγϣϯͷΈڐՄ ڋ൱ ڐՄ ڐՄ ڐՄ ڋ൱ ϝϦοτɹ ࠷খݖݶͷઃܭ͕Ͱ͖Δ ཧղͯ͠࡞Ε͹ɺҰ൪ηΩϡΞ σϝϦοτɹ ઃܭ͕ਐ·ͳ͍ͱઃఆͰ͖ͳ͍ ؅ཧෛՙ͕ߴ͍

ڋ൱Λ௥Ճ͍ͯ͘͠ύλʔϯɹɹ ڐՄͯ͠͸͍͚ͳ͍ݖݶΛണୣ͍ͯ͘͠ #෋ࢁITษڧձ ϒϥοΫϦετɾύλʔϯ ڐՄ 4 &D *". ಛఆͷαʔϏεɾΞΫγϣϯͷΈڋ൱ ڐՄ
ڋ൱ ڋ൱ ڋ൱ ϝϦοτɹ ઃܭ͕࠷খݶʹͰ͖Δ ࣗ༝౓͕ߴ͍ σϝϦοτɹ ༧ظͤ͵αʔϏε͕ಥવ࢖͑ΔΑ͏ ʹͳΔϦεΫ͕͋Δ

ϗϫΠτϦετɾϒϥοΫϦετͷ૊Έ߹Θͤ ݖݶΛ෇༩্ͨ͠Ͱɺېࢭ͍ͨ͠ݖݶΛ࡟Δ ˞ݫີʹ͍͏ͱɺϒϥοΫϦετύλʔϯ͸͢΂ͯϋΠϒϦοτʹͳΔ #෋ࢁITษڧձ ϋΠϒϦοτɾύλʔϯ ڐՄ "ENJOJTUSBUPS "DDFTT &D ࠷ॳʹݖݶΛ෇༩ͯ͠ɺෆཁͳݖݶΛ࡟Δ
ϝϦοτɹ "84؅ཧϙϦγʔ͕࢖͍΍͍͢ ࣗ༝౓͕ߴ͘ઃܭָ͕ σϝϦοτɹ ͋·Γແ͍ ɹ˞ॏͶ͕͚ํ๏ʹ͸஫ҙ *". ڋ൱

*".άϧʔϓͷσβΠϯύλʔϯ

*".άϧʔϓ *".άϧʔϓͷσβΠϯύλʔϯ͸̎ͭ ෳ਺άϧʔϓʹॴଐ άϧʔϓ಺ʹෳ਺ͷϙϦγʔ #෋ࢁITษڧձ

Ϣʔβʔ͕ෳ਺ͷάϧʔϓʹଐ͢Δ͜ͱΛલఏʹݖݶઃఆɹ શࣾһ޲͚ͷڞ௨άϧʔϓͱ໾ׂผͷάϧʔϓ ֊૚ߏ଄Λ࡞Γ΍͍͢ #෋ࢁITษڧձ ෳ਺άϧʔϓʹॴଐ

Ϣʔβʔ͕ͭͷάϧʔϓʹଐ͢Δ͜ͱΛલఏʹݖݶઃఆ Ϣʔβ͔ΒΈΔͱγϯϓϧͳߏ੒ ݖݶͷݟ௨͕͠ྑ͍ #෋ࢁITษڧձ άϧʔϓ಺ʹෳ਺ϙϦγʔ

ύλʔϯͷݪଇΛ౿·্͑ͨͰ ۩ମతͳઃܭʹམͱ͠ࠐΉ

ڞ௨Ͱར༻͢ΔϙϦγʔͰ·ͣݕ౼͢Δͷ͸͜ͷͭ .'"ඞਢԽ͸ඞͣ͢Δ͜ͱ *1੍ݶ͸ɺӡ༻ϙϦγʔͱ૬ஊɻ࡞ۀ৔ॴΛ੍ݶͰ͖Δͱ͍͏ޮՌ͕͋Δ #෋ࢁITษڧձ .'"ඞਢԽͱ*1੍ݶ \ &⒎FDU%FOZ "DUJPO
$POEJUJPO\ /PU*Q"EESFTT\ BXT4PVSDF*Q< > ^ ^ 3FTPVSDF ^ \ &⒎FDU%FOZ /PU"DUJPO< JBN > 3FTPVSDF $POEJUJPO\ #PPM*G&YJTUT\ BXT.VMUJ'BDUPS"VUI1SFTFOUGBMTF ^ ^ ^

"ENJOݖݶΛ෇༩্ͨ͠Ͱ੍ݶΛՃ͑Δ .'"ඞਢˍ*1ΞυϨε੍ݶ *1੍ݶΛͳͨ͘͢Ίͷ؅ཧऀ༻ϩʔϧ #෋ࢁITษڧձ ؅ཧऀݖݶͷઃܭ 㱺εΠονલΛࢀরݖݶͷΈʹ͢Δͱ͍͏ઃܭ΋Α͋͘Δ

ϩάΠϯ࣌͸ࢀরݖݶͷΈ ࢀরݖݶͱ4XJUDI3PMFΛڐՄ͢ΔݖݶΛ෇༩ εΠονϩʔϧ͢Δ͜ͱʹΑΓ؅ཧऀݖݶ͕ར༻Մೳ ஈΫογϣϯΛஔ͘͜ͱʹΑΓɺΦϖϛεͷ๷ࢭޮՌΛૂ͏ #෋ࢁITษڧձ ؅ཧऀݖݶͷ҆શઃܭ

৬຿ػೳͷ"84؅ཧϙϦγʔͷ׆༻ ಛఆͷ༻్޲͚ͷݖݶηοτʢ৬຿ػೳͷ"84؅ཧϙϦγʔʣ FDͷݖݶ͸ɺΠϯελϯεͷૢ࡞ͱωοτϫʔΫૢ࡞ؚ͕·Ε͍ͯΔͷͰ ஫ҙ͕ඞཁ #෋ࢁITษڧձ ωοτϫʔΫ؅ཧऀͷઃܭ

Ұ൪೰·͍͠ͷ͕։ൃऀ޲͚ݖݶ *".ϩʔϧͷ࡞੒ݖݶ͕ඞཁʹͳ͖͍ͬͯͯΔ ؅ཧऀݖݶΛ෇༩্ͨ͠Ͱɺ1FSNJTTJPO#PVOEBSZͷ׆༻͔ʁ #෋ࢁITษڧձ ։ൃऀͷઃܭ ͋ͱ࡞ͬͨ*".ϩʔϧɾϙϦγʔͷςετํ๏ΛԿͱ͔͍ͨ͠

1SJODJQBMΛߜΒͳ͍ͱɺશϢʔβʔ͕εΠονͰ͖Δ σϑΥϧτςϯϓϨʔτͷઃఆ͸ɺΞΧ΢ϯτ಺ͷϢʔβʔʹରͯ͠ ߜΔඞཁ͕͋ΓɺϢʔβʔࢦఆͰߜΔʢάϧʔϓ͸Ͱ͖ͳ͍ʣ ผղͱͯ͠"TTVNF3PMFͷݖݶΛ͢΂ͯണୣͷ͏͑ͰɺඞཁͳϢʔβʔʹ ෇༩͢Δͱ͍͏ํ๏΋͋Δ #෋ࢁITษڧձ εΠονϩʔϧͷ஫ҙ఺ \ 7FSTJPO
4UBUFNFOU< \ &⒎FDU"MMPX 1SJODJQBM\ "84 BSOBXTJBNSPPU ^ "DUJPOTUT"TTVNF3PMF $POEJUJPO\^ ^ > ^ \ 7FSTJPO 4UBUFNFOU< \ &⒎FDU"MMPX 1SJODJQBM\ "84BSOBXTJBNVTFSUFTU VTFS ^ "DUJPOTUT"TTVNF3PMF $POEJUJPO\^ ^ > ^

ϕετϓϥΫςΟε͚ͩͲɻɻɻ ઃܭ͕ݻ·্ͬͨͰɺ*".ʹؔ͢Δߴ౓ͳ஌͕ࣝඞཁ ϓϩάϥϜతͳར༻ʹ͸޲͍͍ͯΔ͕ɺ"84ίϯιʔϧ͔Βͷར༻͸޲͍ ͍ͯͳ͍ ৽نαʔϏεͷ௥Ճʹऑ͍ ͦ΋ͦ΋"ENJOݖݶΛ͍࣋ͬͯΔਓ͔͠࠷খݖݶΛ௥ٻͰ͖ͳ͍ ઃܭɾӡ༻޻਺͕େ͖͍ ݱ࣮తͳӡ༻ ఆܕతͳ࡞ۀʢ-BNCEBɾόον౳ʣͷΈ࠷খݖݶΛ෇༩ ਓؒܥͷ࡞ۀ͸ɺϒϥοΫϦετͷ׆༻΋ࢹ໺ʹ
ηΩϡϦςΟࣄނΛى͜͞ͳ͍ͱ͍͏؍఺Ͱ࠷খݖݶΛ୳ٻ #෋ࢁITษڧձ ࠷খݖݶͷδϨϯϚ

ηΩϡϦςΟΛҡ࣋͢ΔͨΊͷ "84αʔϏε

ʲ࠶ܝʳ"84ͱηΩϡϦςΟ #෋ࢁITษڧձ "84ͷηΩϡϦςΟ͸ͭͷ࣠Ͱߟ͑Δ ᶃ"84಺ʹߏஙͨ͠ωοτϫʔΫͱαʔόʔͷηΩϡϦςΟ ᶄ"84ͷαʔϏε܈ͷઃܭɾઃఆ ᶅ"84ૢ࡞ʹؔ͢Δݖݶʢ*".ʣ ᶆηΩϡϦςΟΛҡ࣋؅ཧ͢ΔͨΊͷ"84αʔϏε AWS Management Console
Role VPC AWS Cloud Subnet Internet gateway Amazon Simple Storage Service (S3) VPN gateway Endpoints User ૢ࡞ݖݶ Instance Instance Instance AWS Lambda Role ᶅ ᶄ ᶃ AWS Command Line Interface AWS Config AWS Systems Manager AWS Service Catalog AWS Trusted Advisor AWS CloudTrail ᶆ ηΩϡϦςΟΛҡ࣋ ؅ཧ͢ΔαʔϏε

ΨόφϯεͷҝͷΨʔυϨʔϧ #෋ࢁITษڧձ ηΩϡϦςΟ͸Ұ౓ઃఆ͓ͯ͠ऴ͍Ͱ͸ͳ͍ɻ ؀ڥશମʹܧଓతͳΨόφϯεΛఏڙ͢Δҝͷϧʔϧ͕ඞ ཁɻ"84͸ͦΕΛαϙʔτ͢ΔαʔϏεΛఏڙ͍ͯ͠Δ ᶃ༧๷ɹʜɹ*".΍4$1Ͱېࢭࣄ߲ͷૢ࡞ࣄ߲Λग़དྷͳ͘͢Δ͜ͱ ᶄݕ஌ɹʜɹېࢭࣄ߲ͷૢ࡞͕͞ΕͨΒؾ͕෇͚Δঢ়ଶʹ͢Δ͜ͱ ΨʔυϨʔϧ ؔॴ

#෋ࢁITษڧձ $MPVE5SBJM AWS Management Console User AWS Command Line Interface
AWS CloudTrail Amazon Simple Storage Service (S3) Amazon CloudWatch "84Ϧιʔεͷૢ࡞ཤྺΛه࿥ɾ௨஌ ᶃϚωδϝϯτίϯιʔϧͱ"1*ͷૢ࡞ཤྺΛ4ʹอଘ ᶄ$MPVE8BUDI-PHTΛར༻ͯ͠4/4ܦ༝Ͱ௨஌΋Մೳ AWSϦιʔε

#෋ࢁITษڧձ $POpH ఆ఺ˍΠϕϯτൃੜ࣌ʹ"84ͷঢ়ଶΛه࿥ ᶃ"84ͷঢ়ଶΛه࿥͠؅ཧ͢ΔαʔϏε ᶄ$POpH3VMFTΛར༻͢Δ͜ͱʹΑΓɺ͋Δ΂͖ঢ়ଶ͔Β֎Ε ͨ͜ͱΛݕ஌͢Δ͜ͱ͕Ͱ͖Δ AWS Config User AWSϦιʔε
ͷߏ੒มߋ ߏ੒؅ཧɾه࿥ ͷอଘ มߋޙͷߏ੒ͷ ධՁ ʢConfig Rulesʣ Amazon Simple Notification Service

#෋ࢁITษڧձ (VBSE%VUZ ڴҖͷݕग़ ᶃηΩϡϦςΟ؍఺͔ΒͷڴҖϦεΫΛݕग़ ᶄϩάσʔλʢ71$'MPX-PHT $MPVE5SBJM&WFOU-PHT %/4 -PHTʣΛ෼ੳ ᶅڴҖΛ"*ʹΑΓΠϯςϦδΣϯεʹݕग़ ѱҙͷ͋ΔεΩϟϯ
Πϯελϯε΁ͷڴҖ ΞΧ΢ϯτ΁ͷڴҖ Amazon GuardDuty Flow logs Event Logs DNS Logs ϩά ڴҖͷ൑அ Amazon Simple Notification Service Amazon CloudWatch Events ௨஌

#෋ࢁITษڧձ 4FDVSJUZ)VC https://aws.amazon.com/jp/security-hub/ ηΩϡϦςΟΞϥʔτΛҰݩ؅ཧ ᶃ(VBSE%VUZ .BDJF *OTQFDUPSͷΞϥʔτΛ౷߹ͯ͠؅ཧ ᶄ֤छϩάΛݩʹίϯϓϥΠΞϯενΣοΫ ᶅαʔυύʔςΟπʔϧͱͷ࿈ܞɾෳ਺"84ΞΧ΢ϯτͷ౷߹ ΋Մೳ

#෋ࢁITษڧձ 5SVTUFE"EWJTPS "84ͷར༻ঢ়گΛධՁ ᶃ̑ͭͷ؍఺ʢίετ࠷దԽɾύϑΥʔϚϯεɾηΩϡϦςΟɾ ϑΥʔϧττϨϥϯεɾαʔϏε੍ݶʣͰධՁ ᶄσϑΥϧτͰద༻͞Ε͍ͯΔͷͰɺҰ౓ݟͯΈΔ͜ͱ ᶅ௨஌ʢ&ϝʔϧͷΈʣ΋Մೳ

#෋ࢁITษڧձ $POUSPM5PXFS https://aws.amazon.com/jp/controltower/ ෳ਺ΞΧ΢ϯτͷηΩϡϦςΟઃఆͱ؂ࢹ ᶃ"84ͷϕετϓϥΫςΟεΛ੝ΓࠐΜͩઃఆͰɺ"84ΞΧ΢ ϯτͷߏங ᶄΞΧ΢ϯτͷϙϦγʔΛܧଓతʹ؅ཧͱՄࢹԽ ᶅݱঢ়ͷͱ͜ΖɺطଘͷΞΧ΢ϯτʹద༻Ͱ͖ͳ͍

#෋ࢁITษڧձ ϕετϓϥΫςΟε ᶃద੾ͳݖݶ؅ཧ͕࠷ॏཁʢ*".ͱ4$1ʣ ᶄ"84ͷαʔϏεΛ࢖ͬͯݕ஌ͷػೳΛ੝ΓࠐΉ ᶅߏஙςϯϓϨʔτԽɻϚϧνΞΧ΢ϯτͰ͋Ε͹ɺ $MPVE'PSNBUJPO4UBDL4FUT 0SHBOJ[BUJPOT͕ਆ

͓·͚

#෋ࢁITษڧձ ͜Ε͚ͩ͸΍͓͚ͬͯ "84ΞΧ΢ϯτʹ࠷௿ݶɺԼهͷઃఆΛ͢Δ ϧʔτΞΧ΢ϯτͷ.'"ઃఆ ؅ཧऀ༻ͷ*".άϧʔϓͱ*".Ϣʔβʔͷ࡞੒ *".ύεϫʔυϙϦγʔͷద༻ $MPVE5SBJMͱ$POpH (VBSE%VUZͷ༗ޮԽ 5SVTUFE"EWJTPUSͷ&ϝʔϧ௨஌ઃఆ $PTU6TBHF3FQPSUͷग़ྗ
*".Ϣʔβʔ΁ͷ੥ٻ৘ใͷΞΫηεڐՄ ࢧ෷͍௨՟Λ೔ຊԁʹมߋ ίετ഑෼λάͷઃఆ ୅ସ࿈བྷઌͷઃఆ

#෋ࢁITษڧձ ͜Ε͸΍ͬͪΌμϝ *".Ͱ͜ΕΛ΍ͬͪΌμϝ ϧʔτϢʔβʔͰӡ༻ ར༻ऀશһɺ"ENJOݖݶ ؅ཧऀҎ֎ʹ*".ݖݶΛ෇༩ ڞ༻ͷ*".Ϣʔβʔͷ࡞੒ ෳ਺ͷ$-*ɾϓϩάϥϜ͔Βͷ*".Ϣʔβʔʗϩʔϧͷڞ༻ ιʔείʔυʹΫϨσϯγϟϧʢΞΫηεΩʔɾγʔΫϨοτΞ ΫηεΩʔʣͷຒΊࠐΈ
-BNCEB'VMM"DDFTTͷ෇༩ ωοτϫʔΫ؅ཧऀҎ֎ʹ&$'VMM"DDFTTͷ෇༩ 4ͷΞΫηείϯτϩʔϧΛ*".͚ͩͰߦ͏ʢόέοτϙϦγʔ ͷซ༻ඞਢʣ

·ͱΊ

ࠓ೔࿩ͨ͠ςʔϚ "84ʹ͓͚Δ̐ͭͷηΩϡϦςΟͷ࣠ *".େࣄͩΑ ηΩϡϦςΟΛҡ࣋͢ΔͨΊͷ"84αʔϏε ͓·͚ #෋ࢁITษڧձ

AWSアカウントのセキュリティを守る IAM編

AWSアカウントのセキュリティを守る IAM編

More Decks by Takuro SASAKI

Other Decks in Technology

Featured

Transcript

AWSアカウントのセキュリティを守る　IAM編

AWSアカウントのセキュリティを守る　IAM編