Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
IAMの地味なUpdateをご紹介_掲載用.pdf
Search
yhamano
December 17, 2019
Technology
0
850
IAMの地味なUpdateをご紹介_掲載用.pdf
yhamano
December 17, 2019
Tweet
Share
More Decks by yhamano
See All by yhamano
MIXI での HCP Terraform 活用事例 / Use Case of HCP Terraform at MIXI
yhamano
2
370
Self-Service Implementation of AWS IAM Identity Center Permissions
yhamano
1
340
TIPSTAR におけるデータ分析基盤信頼性向上の取り組み
yhamano
1
1.5k
複数プロダクトを管理する AWS Organizations における AWS IAM Identity Center を GitHub x Terraform でいい感じに運用したい
yhamano
1
1.6k
Opsしかやってこなかった私が DevOpsが根付いたチームにJoinした話
yhamano
2
1.2k
CI/CD環境のTerraform versionを最新に保つと幸せになれる
yhamano
9
2.1k
lightning-talk-toyosu_hamano_20190925_open.pdf
yhamano
0
860
Other Decks in Technology
See All in Technology
CSS polyfill とその未来
ken7253
0
140
令和最新版TypeScriptでのnpmパッケージ開発
lycorptech_jp
PRO
0
110
プロジェクトマネジメント実践論|現役エンジニアが語る!~チームでモノづくりをする時のコツとは?~
mixi_engineers
PRO
3
180
ITエンジニアを取り巻く環境とキャリアパス / A career path for Japanese IT engineers
takatama
4
1.5k
All About Sansan – for New Global Engineers
sansan33
PRO
1
1.2k
DevOpsDays Taipei 2025 -- Creating Awesome Change in SmartNews!
martin_lover
0
160
AIオンボーディングとAIプロセスマイニング
nrryuya
5
1.3k
令和トラベルQAのAI活用
seigaitakahiro
0
520
Swiftは最高だよの話
yuukiw00w
2
280
それでもぼくらは貢献をつづけるのだ(たぶん) @FOSS4GLT会#002
furukawayasuto
1
270
GigaViewerにおけるMackerel APM導入の裏側
7474
0
460
技術書典18結果報告
mutsumix
2
180
Featured
See All Featured
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
PRO
180
53k
4 Signs Your Business is Dying
shpigford
183
22k
Thoughts on Productivity
jonyablonski
69
4.7k
How To Stay Up To Date on Web Technology
chriscoyier
790
250k
The Illustrated Children's Guide to Kubernetes
chrisshort
48
50k
CoffeeScript is Beautiful & I Never Want to Write Plain JavaScript Again
sstephenson
160
15k
VelocityConf: Rendering Performance Case Studies
addyosmani
329
24k
Practical Tips for Bootstrapping Information Extraction Pipelines
honnibal
PRO
19
1.2k
Visualizing Your Data: Incorporating Mongo into Loggly Infrastructure
mongodb
45
9.6k
A better future with KSS
kneath
239
17k
What's in a price? How to price your products and services
michaelherold
245
12k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
45
7.3k
Transcript
Ops JAWS Meetup#17 re:Invent2019 Recap IAMͷຯͳUpdateΛ͝հ
ࠓΛҾͨ͘͘͞Μͷൃද͕͋Γ·ͨ͠ w&,4͕͍ͭʹ'BSHFUFରԠʂ IUUQTBXTBNB[PODPNKQCMPHTOFXTBNB[POFLTPOBXTGBSHBUFOPXHFOFSBMMZBWBJMBCMF w%FFQγϦʔζͱͯ͠%FFQ$PNQPTFS͕ؒೖΓʂ IUUQTBXTBNB[PODPNKQEFFQDPNQPTFS w"*ܥαʔϏεͷ6QEBUF͕നԡ͠ʂ
ओཁαʔϏεͷհଞͷํʹ͓ͤͯ͠ɺ ࢲ͔Βຯͳ6QEBUFΛҰ͚ͭͩ͝հ͠·͢
͝հ͢Δ6QEBUF *".ϩʔϧೝূใͷ࠷ऴ༻͕࣌ औಘͰ͖ΔΑ͏ʹͳΓ·ͨ͠ʂʂ https://aws.amazon.com/jp/about-aws/whats-new/2019/11/identify-unused-iam-roles-easily-and-remove-them-confidently-by-using-the-last-used-timestamp/
Ϛωδϝϯτίϯιʔϧ
BXTJBNHFUSPMFSPMFOBNFUFTUSPMF \ 3PMF\ ɾ ɾ ɾ 3PMF-BTU6TFE\ -BTU6TFE%BUF5YYYYYY; 3FHJPOBQOPSUIFBTU
$-*
ຯ͗͢ΔΞοϓσʔτ wϖʔδʹٴͿ#MBDL#FMUࢿྉʹ هࡌແ͠ w"84+ُా͞ΜͷϒϩάͰߦ͚ͩ հ
࠷ऴ༻͕࣌औಘͰ͖ΔͱͲ͏͍͏໘Ͱ ϋοϐʔʹͳΕΔ͔આ໌͍͖ͯ͠·͢
ͪΐͬͱ࣭ Έͳ͞Μ*".ͬͯ·͔͢ʁ
"84ͬͯΔ㲈*".ͬͯΔ "84Λ༻͢Δ্Ͱɺ*".΄΅ඞਢ
*".͓͞Β͍ *". "84*EFOUJUZBOE.BOBHFNFOU "84ར༻ʹؔ͢ΔೝূೝՄΛ࢘ΔαʔϏε w*".Ϣʔβ ‣ "84αʔϏεͷΞΫηεΛߦ͏ݸਓɺγεςϜ͕ར༻͢Δ w*".άϧʔϓ ‣
ಉҰׂΛ࣋ͭ*".ϢʔβΛάϧʔϓԽ͢Δ w*".ϩʔϧɹɹˡࠓͷϝΠϯ ‣ "84αʔϏεʹରͯ͠"84αʔϏεͷૢ࡞ݖݶΛ༩͑Δ w*".ϙϦγʔ ‣ "84αʔϏεͷΞΫηεݖݶΛ·ͱΊͨͷ
*".ϩʔϧ૿৩͕ͪ͠ wϦιʔεϨϕϧͰ༩͢ΔݖݶΛ͚Α͏ͱ͢ΔͱϦιʔε*".ϩʔ ϧ͕ඞཁʹͳΔ wϚωδϝϯτίϯιʔϧ͔ΒͷϦιʔε࡞࣌ʹϙϦγʔΛΑ͠ͳʹ༩ ͨ͠*".ϩʔϧΛ࡞ͯ͘͠ΕΔ͜ͱ͕͋Δ
ະ༻ͷ*".ϩʔϧΓ͍͢ wϦιʔεআ࣌Ұॹʹআͯ͘͠Εͳ͍ w*".ϩʔϧࣗମʹ՝͕ۚൃੜ͠ͳ͍ͷͰɺ ҙࣝతʹআ͠Α͏ͱͳΓʹ͍͘ w୨Է͠͠Α͏ʹɺ֤ؔॴ͕ଟ͗͢Δͱɺ ͍͍ͪͪώΞϦϯάͯ͠ΒΕͳ͍
ະ༻ͷ*".ϩʔϧ͕͋Δͱμϝʁ wཧෛՙ͕૿͑Δ wҙਤ͠ͳ͍"84αʔϏεʹؔ࿈͚ͮΒΕΔϦεΫ͕૿͑Δ
ະ༻ͷ*".ϩʔϧ ͪΌΜͱແޮԽPSআ͠·͠ΐ͏ʂ
ະ༻ͷ*".ϩʔϧΛݟ͚ͭΔ ࠷ऴ༻͔࣌Β Ұఆظؒܦա͍ͯ͠Δ*".ϩʔϧΛະ༻ͱΈͳ͢
୨Էࣗ͠ಈԽ खಈ୨Է͠৭ʑͱ൵͠Έ͕ଟ͍ͷͰ "84$POpH3VMFTΛͬͯࣗಈԽ͠Α͏ʂ
"84$POpH3VMFT͓͞Β͍ w"84$POpH3VMFT ‣"84αʔϏε͕ɺఆٛͨ͠ઃఆঢ়ଶͱͳ͍ͬͯΔ͔ΛධՁ ‣"84͕ఏڙ͢ΔϚωʔδυϧʔϧͱϢʔβଆͰࣗ༝ʹධՁ༰Λ ఆٛͰ͖ΔΧελϜϧʔϧ͕͋Δ ‣ධՁճʹର͢Δ՝ۚͱͳ͓ͬͯΓ͓͍҆ ݄d
"84$POpH3VMFTΛ༻͍ͨࣗಈ୨Է͠ ఆظతʹ$POpH3VMFΛىಈ -BNCEBΛݺͼग़͢ *".ϩʔϧͷྻڍͱ࠷ऴ༻࣌Λऔಘ͢Δ"1*Λݺͼग़͢ *"."1*ͷ݁ՌΛ-BNCEBʹฦ͢ ४ڌඇ४ڌͷ݁ՌΛ$POpHʹઃఆ ࠷ऴ༻͔࣌Βʓʓؒܦա͍ͯ͠Δ͔ΛνΣοΫ͢ΔΧελϜϧʔϧ https://aws.amazon.com/jp/blogs/security/continuously-monitor-unused-iam-roles-aws-config/
"84$POpH3VMFT݁Ռ
ࣗಈम෮Մೳʂ 44."VUPNBUJPOͱ࿈ܞͨ͠ඇ४ڌϦιʔεͷࣗಈम෮ wϩʔϧࣗମͷআ wϩʔϧอ࣋͢Δ͕ɺશڋ൱͢ΔϙϦγʔΛΞλον
·ͱΊ w *".ϩʔϧͷ࠷ऴར༻͕͔࣌ΔΑ͏ʹͳΓ·ͨ͠ w ະ༻*".ϩʔϧΛࣗಈ୨Էͯ͠͠ɺηΩϡϦςΟΛ୲อ ͠·͠ΐ͏
͝੩ௌ ͋Γ͕ͱ͏͍͟͝·ͨ͠