ここが好きだよAWS管理ポリシー_devio2022/i_am_iam_lover

Transcript

1.  "84
   ࣄۀຊ෦ίϯαϧςΟϯά෦
   ઍ༿޾޺ʢνόϢΩʣ ࢲͷ"84ѪΛฉ͚ʂ
   ͕͜͜޷͖ͩΑ
   "84
   *".
   ͷ"84
   ؅ཧϙϦγʔ
2. ࣗݾ঺հ  ઍ༿
   ޾޺
   νόϢΩ w"84ྺɿ೥ڧ
   w޷͖ͳ"84αʔϏεɿ"84
   *".
   w޷͖ͳ͓໘ͷछྨɿఱۡͷ͓໘ ࠓճͷεϥΠυ͸ຕ͋Γ·͢
3.  ɻ
4.  ͳΜͷ਺ࣈ͔Θ͔ΔͰ͠ΐ͏͔ʁ 
5.  ͳΜͷ਺ࣈ͔Θ͔ΔͰ͠ΐ͏͔ʁ  Կ͔Λ߹ܭͨ͠਺Ͱ͢
6.  ݴ͑Δ͔ͳʁ  ϙ˓Ϟϯͷछྨ ˞8JLJQFEJBΑΓɻୈੈ୅͸আ͘ɻ IUUQTKBXJLJQFEJBPSHXJLJશࠃϙέϞϯਤؑॱͷϙέϞϯҰཡ
7.  ϙ˓ϞϯΑΓଟ͍"84؅ཧϙϦγʔ   "84؅ཧ
   ϙϦγʔͷ਺ ˞
    +5$ ࣌఺
   ͰΞΫςΟϒͳ΋ͷ ϙ˓Ϟϯͷछྨ ˞8JLJQFEJBΑΓɻୈੈ୅͸আ͘ɻ IUUQTKBXJLJQFEJBPSHXJLJશࠃϙέϞϯਤؑॱͷϙέϞϯҰཡ
8. ͕͜͜޷͖ͩΑ
   "84
   ؅ཧϙϦγʔ  wࣗಈͰ࡞੒ɾߋ৽͞ΕΔ
   wͨ͘͞Μ͋Δ͠ɺͨ·ʹ͍ͳ͘ͳΔ
   w໊শ΍આ໌ʹϑϦʔμϜ͞Λײ͡Δ ޷͖ͩͳ͊
9.  "84
   ؅ཧϙϦγʔͱ͸
10. "84
    ؅ཧϙϦγʔͱ͸  "84
    ͕
    ؅ཧ͢ΔϙϦγʔ ͷ͜ͱͰ͢
11. "84
    ؅ཧϙϦγʔͱ͸  "84
    ͕
    ؅ཧ͢ΔϙϦγʔ ͷ͜ͱͰ͢ ΠϯϥΠϯͰͳ͍ ΧελϚʔ؅ཧͰͳ͍
12. ϙϦγʔΛΠϯϥΠϯ͔؅ཧ͔ͷ੾ΓޱͰݟ͍ͯ͘  ϙϦγʔ ΠϯϥΠϯϙϦγʔ ؅ཧϙϦγʔ όʔδϣϯ؅ཧɺελϯυΞϩϯɺ
    ෳ਺Ϧιʔε΁ͷΞλον͕Մೳ *".Ϧιʔε΁ͷຒΊࠐΈ ೥݄ʹొ৔
13.  ϙϦγʔ ΠϯϥΠϯϙϦγʔ ؅ཧϙϦγʔ ΧελϚʔ
    ؅ཧϙϦγʔ "84
    ؅ཧϙϦγʔ όʔδϣϯ؅ཧɺελϯυΞϩϯɺ
    ෳ਺Ϧιʔε΁ͷΞλον͕Մೳ *".Ϧιʔε΁ͷຒΊࠐΈ "84ʹΑΓ؅ཧ͞ΕΔ ΧελϚʔ͕؅ཧ ࠓճऔΓ্͛Δͷ͸͜Ε ϙϦγʔΛΠϯϥΠϯ͔؅ཧ͔ͷ੾ΓޱͰݟ͍ͯ͘
14.  ϙϦγʔ ΠϯϥΠϯϙϦγʔ ؅ཧϙϦγʔ ΧελϚʔ
    ؅ཧϙϦγʔ όʔδϣϯ؅ཧɺελϯυΞϩϯɺ
    ෳ਺Ϧιʔε΁ͷΞλον͕Մೳ *".Ϧιʔε΁ͷຒΊࠐΈ "84ʹΑΓ؅ཧ͞ΕΔ ৬຿ػೳ༻ αʔϏε
    ϩʔϧ༻ αʔϏεϦϯΫ ϩʔϧ 4-3 ༻ ্هҎ֎ ΧελϚʔ͕؅ཧ ϙϦγʔͷύε͔Β൑ผ ϙϦγʔΛΠϯϥΠϯ͔؅ཧ͔ͷ੾ΓޱͰݟ͍ͯ͘ "84
    ؅ཧϙϦγʔ
15. ͨͷ͍͠ʂ  ϙϦγʔ ΠϯϥΠϯϙϦγʔ ؅ཧϙϦγʔ ΧελϚʔ
    ؅ཧϙϦγʔ ৬຿ػೳ༻ αʔϏε
    ϩʔϧ༻ αʔϏεϦϯΫ ϩʔϧ 4-3 ༻ ্هҎ֎ ͨͷ͍͠ʂ "84
    ؅ཧϙϦγʔ ৽αʔϏεɺ৽ػೳͷൃදʹઌߦͯ͠
    ࡞੒ɾߋ৽͞Ε͍ͯΔ͜ͱ͕ଟ͍
16.  ਺ࣈͰݟΔ
    "84
    ؅ཧϙϦγʔ
17.  ࠶ܝ   "84؅ཧ
    ϙϦγʔͷ਺ ϙ˓Ϟϯͷछྨ ˞8JLJQFEJBΑΓɻୈੈ୅͸আ͘ɻ IUUQTKBXJLJQFEJBPSHXJLJશࠃϙέϞϯਤؑॱͷϙέϞϯҰཡ ˞
     +5$ ࣌఺
    ͰΞΫςΟϒͳ΋ͷ
18.  Ͳͷ͘Β͍ͷϖʔεͰ
    ૿͍͑ͯΔͷ͔ʁ
19. ೥͝ͱʹݟΔ"84؅ཧϙϦγʔͷ૿Ճ  ΄΅ຖ೥௒
    ૿͑ͯΔ
20.  Ͳͷ݄͕͍ͪ͹Μ
    ૿͍͑ͯΔͷ͔ʁ
21. ݄͝ͱʹݟΔ"84؅ཧϙϦγʔͷ૿Ճ  ݄΋ଟ͍ͷʁ
22. ೥ͱ݄͝ͱʹݟΔ"84؅ཧϙϦγʔͷ૿Ճ  ೥݄
    ͕ଟ͍͚ͩͩͬͨ
23.  ͜Ε·Ͱͷ૿Ճ܏޲Λ
    ݄͝ͱʹݟΔ
24. ΍ͬͺΓ݄ͱ݄͕ͭΑ͍ 
25. ΍ͬͺΓ݄ͱ݄͕ͭΑ͍  ೥຤͸
    "84؅ཧϙϦγʔͷ०
26.  ݮΔ͜ͱ΋͋ΔΑɺ
    "84
    ؅ཧϙϦγʔ
27. ඇਪ঑ͷ
    "84
    ؅ཧϙϦγʔ  wඇਪ঑ʢഇࢭɾ%FQSFDBUFEʣʹͳΔͱʜʜ
    wΞλονࡁΈͷ৔߹
    wΞλον͸ܧଓ͞ΕΔ
    wϙϦγʔͷޮྗ΋ܧଓ͞ΕΔ
    wΞλον͞Εͯͳ͍৔߹
    w৽نͷΞλον͕Ͱ͖ͳ͍ʢ*T"UUBDIBCMF
    
    GBMTFʣ
    wදࣔ͞Εͳ͘ͳΔ
28. ΋͍ͬͨͳͯ͘ϦϦʔεͰ͖ͳ͍  "NB[PO$POOFDU'VMM"DDFTT "NB[PO$POOFDU'VMM"DDFTT "NB[PO$POOFDU@'VMM"DDFTT %FQSFDBUFEʢഇࢭࡁΈʣ ৽͍͠ϙϦγʔ
29. কདྷతʹඇਪ঑ʹͳΓͦ͏ͳϙϦγʔ  w"NB[PO%ZOBNP%#'VMM"DDFTTXJUI%BUB1JQFMJOF
    w"NB[PO&$3PMFGPS44.
    w"NB[PO&MBTUJD.BQ3FEVDF'VMM"DDFTT
    w"NB[PO&MBTUJD.BQ3FEVDF3PMF
    w"84%BUB1JQFMJOF3PMF ʮઆ໌ʯʹ
    EFQSFDBUJPO
    ΋͘͠͸
    EFQSFDBUFE
    Λ
    ؚΉ΋ͷΛ୳͠·ͨ͠
30.  "84
    ؅ཧϙϦγʔ
    ͷѪͰํ
31.  "84
    $-*
    ͱ
    KR
    Ͱ
    $47
    ग़ྗͯ͠
    εϓϨουγʔτͰѪͰ·͠ΐ͏
32. BXT
    JBN
    MJTUQPMJDJFT
     aws iam list-policies\ --scope AWS\ --max-items 1000\ | jq -r ' ["ϙϦγʔ໊","ύε","σϑΥϧτόʔδϣϯ","࡞੒೔࣌","ߋ৽೔࣌","ΞλονՄ൱"], (.Policies[] | [.PolicyName,.Path,.DefaultVersionId,.CreateDate,.UpdateDate,.IsAttachable]) | @csv' | pbcopy είʔϓͱͯ͠ʮ"84ʯΛࢦఆ͠ɺ
    KR
    ͰඞཁͳՕॴͷΈϑΟϧλϦϯά
    
    $47
    Խ͠ɺ
    ΫϦοϓϘʔυʹίϐʔʢ.BDͷ৔߹ʣ Ұ౓ͷ࣮ߦͰશྔΛ
    औಘͰ͖ͳ͘ͳΔ೔΋ۙͦ͏
33. ͜͏ͯ͠ɺ 
34. ͜͏ͯ͠ɺ͜͏ͯ͠ɺ 
35. ͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ͯ͠ɺ 
36. ͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ 
37. ͜͏ͯ͠ɺ 
38. ͜͏ͯ͠ɺ͜͏ͯ͠ɺ 
39. ͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ͯ͠ɺ 
40. ͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ͯ͠ɺ͜͏ 
41. ৚݅ͰϑΟϧλ ;ˠ"Ͱฒ΂ $06/5*'4 ͋ͱ͸͍͔Α͏ʹ΋ʂ  -&/
42. ʮઆ໌ʯ΋ཉ͚͠Ε͹
    BXT
    JBN
    HFUQPMJDZ  aws iam list-policies --max-items 1000 --scope AWS | jq -r '.Policies[].Arn' \ | while read policy; do aws iam get-policy --policy-arn $policy \ | jq -r '.Policy | [.PolicyName,.Description] | @csv' >> policies.csv done MJTUQPMJDJFTͷ݁ՌΛͻͱͭͣͭ৯Θͤͯ
    HFUQPMJDZͰϙϦγʔ໊ɺઆ໌Λग़ྗ
    ͋ͱ͸7-00,61ؔ਺ͰؤுΔ ෼͘Β͍͔͔ͬͨ
    ؾ͕͠·͢
43.  "84
    ؅ཧϙϦγʔ
    ͳΜͰ΋ϥϯΩϯά ˞
     +5$ ࣌఺
44.  ϙϦγʔ໊ͷ௕͞
45. ϙϦγʔ໊ͷ௕͞ͷ্ݶ͸  ͍ͪ͹Μ௕͍ จࣈ "NB[PO4BHF.BLFS4FSWJDF$BUBMPH1SPEVDUT$MPVEGPSNBUJPO4FSWJDF3PMF1PMJDZ ͍ͪ͹Μ୹͍ จࣈ #JMMJOH ௕͍Αʂ ୹͍Αʂ ฏۉ஋ɿจࣈ
    தԝ஋ɿจࣈ
46.  આ໌ͷ௕͞
47. આ໌ͷ௕͞ͷ্ݶ͸  ͍ͪ͹Μ௕͍ จࣈ 5IJT
    QPMJDZ
    JT
    BUUBDIFE
    UP
    UIF
    &MBTUJD
    %JTBTUFS
    3FDPWFSZ
    3FQMJDBUJPO
    TFSWFST
    JOTUBODF
    SPMF
    5IJT
    QPMJDZ
    BMMPXT
    UIF
    &MBTUJD
    %JTBTUFS
    3FDPWFSZ
    %34
    3FQMJDBUJPO
    4FSWFST
    XIJDI
    BSF
    &$
    JOTUBODFT
    MBVODIFE
    CZ
    &MBTUJD
    %JTBTUFS
    3FDPWFSZ
    
    UP
    DPNNVOJDBUF
    XJUI
    UIF
    %34
    TFSWJDF
    BOE
    UP
    DSFBUF
    &#4
    TOBQTIPUT
    JO
    ZPVS
    "84
    BDDPVOU
    "O
    *".
    SPMF
    XJUI
    UIJT
    QPMJDZ
    JT
    BUUBDIFE
    BT
    BO
    &$
    *OTUBODF
    1SP fi MF
    CZ
    &MBTUJD
    %JTBTUFS
    3FDPWFSZ
    UP
    UIF
    %34
    3FQMJDBUJPO
    4FSWFST
    XIJDI
    BSF
    BVUPNBUJDBMMZ
    MBVODIFE
    BOE
    UFSNJOBUFE
    CZ
    %34
    BT
    OFFEFE
    %34
    3FQMJDBUJPO
    4FSWFST
    BSF
    VTFE
    UP
    GBDJMJUBUF
    EBUB
    SFQMJDBUJPO
    GSPN
    ZPVS
    FYUFSOBM
    TFSWFST
    UP
    "84
    BT
    QBSU
    PG
    UIF
    SFDPWFSZ
    QSPDFTT
    NBOBHFE
    CZ
    %34
    8F
    EP
    OPU
    SFDPNNFOE
    UIBU
    ZPV
    BUUBDI
    UIJT
    QPMJDZ
    UP
    ZPVS
    *".
    VTFST
    PS
    SPMFT ͍ͪ͹Μ୹͍ จࣈ %FOZ
    BMM
    BDDFTT ௕͍Αʂ ඒ͢͠͞Βײ͡Δ ฏۉ஋ɿจࣈ
    தԝ஋ɿจࣈ "84&MBTUJD%JTBTUFS3FDPWFSZ3FQMJDBUJPO4FSWFS1PMJDZ "84%FOZ"MM
48.  όʔδϣϯ਺
49. ͪͳΈʹ7JFX0OMZ"DDFTT͸όʔδϣϯ਺ͰҐ  3FBE0OMZ"DDFTT
    
    "84$PO fi H3PMF
    
    4FDVSJUZ"VEJU
    
    "84$PO fi H4FSWJDF3PMF1PMJDZ
    
    '.44FSWJDF3PMF1PMJDZ
    
    "844VQQPSU4FSWJDF3PMF1PMJDZ
    
    "NB[PO4BHF.BLFS'VMM"DDFTT
    
    $MPVEXBUDI"QQMJDBUJPO*OTJHIUT4FSWJDF-JOLFE3PMF1PMJDZ
    
    "NB[PO&$4@'VMM"DDFTT
    
    "844FSWJDF3PMF'PS*NBHF#VJMEFS
     όʔδϣϯ਺501 ɹ
    ɹ
    ɹ
    ɹ
    ɹ
    ɹ
    ɹ
    ɹ
    ɹ
     ͓ੈ࿩ʹͳͬͯ·͢
50.  ͕͜͜޷͖ͩΑ
    "84
    ؅ཧϙϦγʔ
51.  ϙϦγʔ໊ͱ͔આ໌ʹ
    ͳΜ͔͜͏ʜʜ
    ϑϦʔμϜ͞Λײ͡Δ
52. ͔ͦ͜͜͠ʹજΉѪ͠͞ϙΠϯτ  wʙ3FBE0OMZ"DDFTT
    ͩͬͨΓ
    ʙ3FBE0OMZ
    ͩͬͨΓ
    w3FBE0OMZ
    ͡Όͳͯ͘
    3FBEPOMZ
    ΋͋Δ
    wʮ"84ʯ΍ʮ"NB[POʯͷ઀಄͍ࣙͭͨΓ͔ͭͳ͔ͬͨΓ͢Δ
    wʙ'VMM"DDFTT
    
    ʙ3FBE0OMZ"DDFTT
    ͷલʹΞϯμʔείΞ͋ͬͨΓͳ͔ͬͨΓ
    wʙ4FSWJDF3PMF
    ͩͬͨΓ
    ʙ4FSWJDF3PMF1PMJDZ
    ͩͬͨΓ
    wαʔϏε໊ུ͕শͩͬͨΓϑϧ໊শͩͬͨΓ
    wΞϯμʔείΞͦ͜ʹڬΉΜͩʜʜͱͳͬͨΓ "NB[PO$POOFDU'VMM"DDFTT
    "NB[PO$POOFDU
    @
    'VMM"DDFTT "84$PO fi H3PMF
    "84
    @
    $PO fi H3PMF "84$MPVE5SBJM3FBE0OMZ"DDFTT
    "84$MPVE5SBJM
    @
    3FBE0OMZ"DDFTT ϙϦγʔͷ໋໊نଇ·ΘΓ
53. ͔ͦ͜͜͠ʹજΉѪ͠͞ϙΠϯτ  w"NB[PO$IJNF4%,
    w"84&MBTUJD#FBOTUBML&OIBODFE)FBMUI
    w"NB[PO'SFF350405"6QEBUF
    w"MFYB'PS#VTJOFTT%FWJDF4FUVQ
    w"84$MPVE'SPOU-PHHFS
    w"84*P53VMF"DUJPOT ͪΐͬͱݟͩͱϙϦγʔ໊ͱΘ͔Βͳ͍ݸੑతͳ໊લͨͪ w"84-BNCEB*OWPDBUJPO%ZOBNP%#
    w*".6TFS44),FZT
    w"NB[PO44.1BUDI"TTPDJBUJPO
    w"840QT8PSLT3FHJTUFS$-*@&$
    w*743FDPSE5P4
    w&$*OTUBODF$POOFDU
54. ͔ͦ͜͜͠ʹજΉѪ͠͞ϙΠϯτ  w຤ඌͷʮʯ͕͍ͭͨΓ͔ͭͳ͔ͬͨΓ
    wͪͳΈʹʮʯ͕෇͘ͷ͸
    
    ݸத
    
    ݸ
    w5IJT
    QPMJDZ
    ͔Β࢝·ͬͨΓ
    5IJT
    *".
    QPMJDZ
    ͔Β࢝·ͬͨΓ
    w͍͖ͳΓಈࢺ͔Β࢝·Δύλʔϯ΋ଟ͍
    wSFBE
    POMZ
    ͩͬͨΓ
    SFBEPOMZ
    ͩͬͨΓ
    w%0
    /05
    64&
    ͬͯॻ͍ͯ͋ͬͨΓ
    wจࣈॻ͍ͯ͋ͬͨΓจࣈͰऴΘͬͨΓ ϙϦγʔͷઆ໌ͷதʹ΋
55.  ͢΂͕ͯѪ͓͍͠ͳʜʜ
56.  ͩͬͯͦ͜ʹ͸ ྺ࢙ νʔϜͷଟ͞ ײ͡ΒΕΔ͔Β ͱ Λ
57. "84ͱ͍͏αʔϏεͷཪʹ͍Δ਺ଟͷਓʑʜʜ 
58.  ·ͱΊ
59. ͕͜͜޷͖ͩΑ"84؅ཧϙϦγʔ  wͦ͜ʹ͸ະདྷɺͦͯ͠ྺ࢙ɺͭ·Γ
    "84ͷ͢΂͕ͯ ͋Δ
    wόϦΤʔγϣϯ๛͔ɺͦΕͰ͍ͯফ͑Δ͔΋͠Εͳ͍ ၪ͞
    wਪ͠ϙϦγʔΛݟ͚ͭΑ͏ʂ
60. Ͳ͕ͬͪઌʹ ʹ౸ୡ͢Δ͔ͳʁ