AWS Webinar ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. •...

Transcript of AWS Webinar ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. •...

AWS Webinar

https://amzn.to/JPWebinar https://amzn.to/JPArchive

https://amzn.to/JPWebinar

https://amzn.to/JPArchive

•

①吹き出しをクリック②質問を入力③ Sendをクリック

Twitter

#awsblackbelt

2

•

3

4Photographed at Okinawa Oodomari Beach

•

5

6

“HTTP pages will

be marked as affirmatively

"Not Secure" using red

color and the non-secure

icon in the URL bar if the

user interacts with any

input field.”

HTTP

URLTakes effect: October 2018 (Chrome 70)

Announcement: Evolving Chrome's security indicators (May 17, 2018)

https://www.chromium.org/Home/chromium-security/marking-http-as-non-secure

7

https://blog.chromium.org/2018/05/evolving-chromes-security-indicators.html

•

8

SSL/TLS v2.0, IPA https://www.ipa.go.jp/security/ipg/documents/ipa-cryptrec-gl-3001-2.0.pdf

14

•

15

•

16

•

17

•

18

証明書署名リクエスト（CSR）

CA署名証明書

ルート CA

中間 CA

証明書

ルート CA

証明書

中間 CA

CA

CA署名証明書

•

19

20

21

•

–

•

–

•

–

22

23

24

•

Certificate manager

25

•

26

•

27

28

AWS Support

https://aws.amazon.com/jp/contact-us/

29

•

30

31

https://www.amazontrust.com/repository/

•

https://www.amazontrust.com/repository/

•

32

オハイオバージニア北部北カリフォルニアオレゴンムンバイ大阪ローカル

ソウルシンガポールシドニー東京カナダフランクフルト

アイルランドロンドンパリサンパウロGovCloud(US−EAST)GovCloud(US)

(2018年12月19日現在）

•

33

•

34

•

ACM による証明書やキーの更新や古い証明書の差し替えは、事前の通知なしに行われる可能性あり

35

•

36

https://docs.aws.amazon.com/ja_jp/acm/latest/userguide/troubleshooting-renewal.html

37

https://docs.aws.amazon.com/ja_jp/acm/latest/userguide/import-

certificate.html

※

https://docs.aws.amazon.com/ja_jp/acm/latest/userguide/managed-renewal.html

38

•

AWS

TLS

ALB

40

•

41

42

*を指定することで同じドメインの複数サイトの保護が可能

•

43

44

•

45

•

47

Amazon Certificates

<no-reply@certificates.amazon.com>

48

49

•

50

51

ACMdemoACMdemo

52

53

•

54

•

55

56

監査レポート

出力

IAMを利用し

たアクセスコントロール

証明書

失効リスト

（CRL）

ハードウェア

セキュリティ

モジュール

57

組織リソース

オンプレミスサーバー

AWSサービス

デバイス

Amazon EC2

ACM統合サービス（CloudFront、ELB、API Gatewa）

58

ACM

Private CA

Instances

AWS

CA署名証明書

ルート CA

ACM

Private CA

CA

中間 CA

証明書

ルート CA

証明書

中間 CA

59

•

60

Amazon

パブリックCA

TLS

AWS

TLS

AWS

Certificate

Manager

67

プライベート証明書

カスタム有効期限

カスタムリソースネーム

鍵アルゴリズム署名アルゴリズム

RSA 2048 SHA256 with RSA

RSA 4096 SHA384 with RSA

SHA512 with RSA

ECDSA P256 SHA256 with ECDSA

ECDSA P384 SHA384 with ECDSA

SHA512 with ECDSA

68

69

https://aws.amazon.com/jp/blogs/compute/maintaining-transport-layer-security-all-the-way-to-your-container-part-2-using-aws-certificate-manager-private-

certificate-authority/

•

71

Ruby

iOS

Python (boto)

Android

Node.js

.NET

PHP

JavaScriptJava

Xamarin

AWS

SDKs

72

CreateCertificateAuthority

IssueCertificate

GetCertificate

RevokeCertificate

UpdateCertificateAuthority

DeleteCertificateAuthority

ListCertificateAuthorities

DescribeCertificateAuthority

GetCertificateAuthorityCsr

CreateCertificateAuthorityAuditReport

DescribeCertificateAuthorityAuditReport

ImportCertificateAuthorityCertificate

GetCertificateAuthorityCertificate

TagCertificateAuthority

UntagCertificateAuthority

ListTags

73

74

75

Private Certificate Authorities CA 10

Private CA 50,000

78

•

1 , 1

0–1,000 $0.75

1,000–10,000 $0.35

10,000+ $0.001

•

• 東京

• カナダ

•

80

•

82

83

•

84

https://aws.amazon.com/jp/certificate-manager/

https://aws.amazon.com/jp/certificate-manager/private-certificate-authority/

https://docs.aws.amazon.com/ja_jp/acm/

https://aws.amazon.com/jp/certificate-manager/pricing/

https://aws.amazon.com/jp/certificate-manager/faqs/

85

https://aws.amazon.com/jp/blogs/news/

•

AWS Webinar

https://amzn.to/JPWebinar https://amzn.to/JPArchive

https://amzn.to/JPWebinar

https://amzn.to/JPArchive

AWS Webinar ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. •...

Documents

Transcript of AWS Webinar ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. •...

L’OpenSource enEntrepriseavec AWS...SUMMIT © 2019, Amazon Web Services, Inc. or its affiliates. All rights reserved. L’OpenSource enEntrepriseavec AWS Philippe Desmaison Senior

AWS Black Belt Online Seminar Amazon Virtual Private … · © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. AWS Black(White) Belt Online Seminar とは

AWS Support ご紹介 2018 - 読み取り専用awsmedia.s3.amazonaws.com/jp/documentation/AWS_Support... · © 2017, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

AWS · © 2018, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS

AWSマイスターシリーズ AWSSDKforPHP& AWSSDKforRuby& … · © 2013 Amazon.com, Inc. and its affiliates. All rights reserved. May not be copied, modified or distributed in

Amazon SageMaker · 2020. 10. 17. · © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • SageMaker • SageMaker • • • SageMaker

Cisco Small Business: решения для небольших …...Presentation_ID © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10 Small Business:

AWS Black Belt Online Seminar Amazon QuickSight€¦ · © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. 1 AWS Black Belt Online Seminar Amazon QuickSight

1 Copyright © 2012, Oracle and/or its affiliates. All ...€¦ · 2 Copyright © 2012, Oracle and/or its affiliates. All rights reserved. Oracle Database Optimizer: ... Inside the

Oracle GoldenGate 11gR2...Oracle GoldenGate 11gR2 インストール・セットアップガイド ＜Windows 編＞ Copyright© 2012, Oracle and/or its affiliates. All rights reserved.

AWS 混合云实践© 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Peter@eLong 09/08/2016 AWS 混合云实践 OTA 电商弹性部署 · 2016-9-10

C97-717209-00 © 2012 Cisco and/or its affiliates. All rights reserved. 1.

AWS 常见安全参考架构... · © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS 常见安全参考架构 韩旭明，AWS 资深合作伙伴解决方案架构师

AWS 環境におけるセキュリティ インシデントの調査・対応⽅法 · © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS 環境におけるセキュリティ

まずは作ってみる！ プロトタイプ開発に役立つ AWS の始め方 · © 2020, Amazon Web Services, Inc. or its Affiliates. All rights reserved. 自己紹介 岡本

はじめてみよう！クラウドコンピューティングの A to Z ～ Getting Started with AWS ... · © 2017 Amazon Web Services, Inc. or its affiliates. All rights reserved.

AWS 上的容器服务概览...AWS© 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved. Amazon Confidential中国（宁夏）区域由西云数据运营 AWS 中国（北京

Oracle GoldenGate 11gR2 GoldenGate 11gR2 インストール・セットアップガイド ＜Linux 編＞ Copyright© 2012, Oracle and/or its affiliates. All rights reserved. Page

1 Copyright © 2012, Oracle and/or its affiliates. All rights ... Copyright © 2012, Oracle and/or its affiliates. All rights reserved. Insert Information Protection Policy Classification

@ kensh - Amazon Web Services, Inc.In Partnership with © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. 20-0 @_kensh

Oracle GoldenGate 11gR2...Oracle GoldenGate 11gR2 インストール・セットアップガイド＜Windows 編＞ Copyright© 2012, Oracle and/or its affiliates. All rights reserved.

AWS 常见安全参考架构... · © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS 常见安全参考架构韩旭明，AWS 资深合作伙伴解决方案架构师

AWS 環境におけるセキュリティインシデントの調査・対応⽅法 · © 2020, Amazon Web Services, Inc. or its affiliates. All rights reserved. AWS 環境におけるセキュリティ

まずは作ってみる！プロトタイプ開発に役立つ AWS の始め方 · © 2020, Amazon Web Services, Inc. or its Affiliates. All rights reserved. 自己紹介岡本

Oracle GoldenGate 11gR2 GoldenGate 11gR2 インストール・セットアップガイド＜Linux 編＞ Copyright© 2012, Oracle and/or its affiliates. All rights reserved. Page