島根大学 病院ニュース - shimane-u.ac.jp · 尿路結石に対する体外衝撃波結石破砕(eswl: 体外衝撃波結石破砕術は体外で発生させた衝撃波を一
AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜
-
Upload
mamoru-ohashi -
Category
Technology
-
view
933 -
download
1
Transcript of AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜
![Page 1: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/1.jpg)
Copyright © 2016 KDDI Corporation. All Rights Reserved
AWS re:Invent
の衝撃
Large Scale
Violence
Culture of Security Shock
![Page 2: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/2.jpg)
自己紹介
Copyright © 2016 KDDI Corporation. All Rights Reserved
2
大橋 衛 ( オオハシマモル )KDDI 株式会社 技術統括本部 PF 開発本部アジャイル開発センター フレームワーク G
AWS 構築支援 / セキュリティ管理統制チームチームリーダー
アプリエンジニア 12 年インフラエンジニア 4 年クラウドエンジニア 4 年 (=AWS 歴 )
NW-JAWS コアメンバー好きな AWS サービス: VPC/IAM/SNS/Lambda
趣味:スノーボード、クルマ、読書、 DIY
絶賛本名プレイ中
@mamohacy
http://blog.mamohacy.com/
![Page 3: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/3.jpg)
3AWS Summit Tokyo 2016 に登壇しました
Copyright © 2016 KDDI Corporation. All Rights Reserved
http://cloudblog.kddi.com/iaaspaas/4279/
![Page 4: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/4.jpg)
4KDDI の技術の裏側全部見せます!に登壇しました
Copyright © 2016 KDDI Corporation. All Rights Reserved
https://eventdots.jp/column/14
![Page 5: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/5.jpg)
5アジェンダ
Copyright © 2016 KDDI Corporation. All Rights Reserved
AWS re:Invent について Las Vegas までの工程 re:Invent の衝撃①:暴力的なスケール re:Invent の衝撃②:セキュリティ文化の違
い AWS re:Invent に参加する価値とは?
![Page 6: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/6.jpg)
AWS re:Invent 2016
@Las VegasCopyright © 2016 KDDI Corporation. All Rights Reserved
![Page 7: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/7.jpg)
![Page 8: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/8.jpg)
8AWS re:Invent について
Copyright © 2016 KDDI Corporation. All Rights Reserved
• 単独企業としては世界最大のIT カンファレンス• 2016/11/29( 火 ) 〜 12/02( 金 ) 開
催• 会場は3ホテルを横断
( ベネチアン / アンコール / ミラージュ )• 450 超のセッション• 今年の参加者は 32000 人超 !
(AWS Summit Tokyo 2016 は 10823 人 )
" 桁違いの規模 "
![Page 9: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/9.jpg)
9Las Vegas までの道程
Copyright © 2016 KDDI Corporation. All Rights Reserved
✈ 8 時間 40分
✈ 2 時間 30分
🔃 2 時間 45分
計 14 時間の長丁場!
NRT
YVR
LAS
![Page 10: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/10.jpg)
AWS re:Invent の衝撃①
”暴力的なスケール”Large Scale Violence
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 11: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/11.jpg)
Large Scale Violence 1.夜景
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 12: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/12.jpg)
![Page 13: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/13.jpg)
![Page 14: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/14.jpg)
Large Scale Violence 2.ホテル
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 15: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/15.jpg)
![Page 16: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/16.jpg)
![Page 17: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/17.jpg)
Large Scale Violence 3.食事
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 18: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/18.jpg)
18
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 19: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/19.jpg)
19
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 20: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/20.jpg)
Large Scale Violence 4.セッション
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 21: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/21.jpg)
21
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 22: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/22.jpg)
![Page 23: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/23.jpg)
Large Scale Violence 5.パーティ
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 24: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/24.jpg)
![Page 25: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/25.jpg)
![Page 26: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/26.jpg)
26Large Scale Violence
Copyright © 2016 KDDI Corporation. All Rights Reserved
•ラスベガスそのもののスケール感が超クレイジー• 上からの夜景もホテル群のライトアップも So Big!• 各ホテルの規模ときっちり差別化されたテーマ• とりあえず食事は味も費用も暴力的
•動員数 / 会場 / 開催規模も笑えるほどデカい• ホテル内もでかいのにホテル間の移動は 20 分もかかる• セッションは予約開始 1 時間くらいで満席• 当日入場に並んでも入れないとかザラ• 金の掛け方が日本のソレとは桁2つは違う
![Page 27: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/27.jpg)
AWS re:Invent の衝撃②
”セキュリティ文化の違い”Culture of Security Shock
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 28: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/28.jpg)
28
Copyright © 2016 KDDI Corporation. All Rights Reserved
AWS re:Invent 2016 参加テーマ
Security & Compliance
![Page 29: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/29.jpg)
29参加セッション一覧 (keynote 除く )
Copyright © 2016 KDDI Corporation. All Rights Reserved
EBC ( 個別セッション ) AWS Security & Compliance : Config/Inspector/SSM Amazon Recognition : Usecase review & feature requirement Trendmicro : Security Feature AWS IAM : Multi Account ManagementBreak out sessions ARC205 -- Born in the Cloud; Built Like a Startup ARC301 -- Architecting Next Generation SaaS Applications on AWS SAC311 -- Evolving an Enterprise-Level Compliance Framework with Amazon CloudWatch Events and AWS Lambda SAC315 -- Security Ops SAC316 -- Security Automation: Spend Less Time Securing Your Applications SAC319 -- Architecting Security and Governance Across a Multi-Account Strategy SAC322-R - [REPEAT] NEW LAUNCH! AWS Shield—A Managed DDoS Protection Service SAC401 -- 5 Security Automation Improvements You Can Make by Using Amazon CloudWatch Events and AWS Config Rules SAC402 -- The AWS Hero’s Journey to Achieving Autonomous, Self-Healing Security SEC301 -- Audit Your AWS Account Against Industry Best Practices: The CIS AWS Benchmark SEC307 -- Microservices, Macro Security Needs: How Nike Uses a Multi-Layer, End-to-End Security Approach to Protect
Microservice-Based Solutions at Scale SEC312 -- re:Source Mini Con for Security Services State of the Union DEV402-R - [REPEAT] The Effective AWS CLI User
アーキテクチャ: 2 セキュリティ&コンプライアンス: 8
セキュリティサービス: 4 DevOps ツール: 1 AI : 1
![Page 30: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/30.jpg)
30( 参考 ) 情報セキュリティ対策の4機能
Copyright © 2016 KDDI Corporation. All Rights Reserved
回復影響部位の復旧
検知インシデント情報の集取/保全
予防物理的・組織的な脆弱性対策の実施
抑止インシデントの発生自体を未然に防ぐ
![Page 31: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/31.jpg)
31米国と日本のセキュリティ文化の違い
Copyright © 2016 KDDI Corporation. All Rights Reserved
回復
検知
予防
抑止
回復
検知
予防
抑止
![Page 32: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/32.jpg)
32Culture of Security Shock
Copyright © 2016 KDDI Corporation. All Rights Reserved
=性善説• " 抑止 " " 予防 " を徹底• " 検知 " は最低限必要なもののみ• " 回復 " は手順書&人力が基本
=性悪説• " 抑止 " " 予防 " はほぼ何もしない• " 検知 " は徹底的に取る• " 回復 " は可能な限り自動化
開発者から " 自由を奪う " 開発者の " 自由を妨げない "
クラウド (AWS) は米国発祥のサービスどちらの文化に合わせて設計されているかは明白
![Page 33: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/33.jpg)
33当センターのセキュリティ管理統制範囲 (現在 )
Copyright © 2016 KDDI Corporation. All Rights Reserved
抑止 予防 検知 回復
アプリケーション × × × ×
ミドルウェア × × × ×
OS × × ◯ ×
AWS リソース Config × × ◎ ×
権限管理 ◎ ◎ ◎ ◎
アカウント管理 ◎ ◎ ◎ ◎
強い事前制約を設け集中統制を行う=「日本式」がベース
![Page 34: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/34.jpg)
34当センターのセキュリティ管理統制範囲 (将来像 )
Copyright © 2016 KDDI Corporation. All Rights Reserved
抑止 予防 検知 回復
アプリケーション × × ×→◎ ×
ミドルウェア × × ×→◎ ×
OS × × ◯→◎ ×→◯
AWS リソース Config × ×→◯ ◎ ×→◎
権限管理 ◎→◯ ◎ ◎ ◎
アカウント管理 ◎ ◎ ◎ ◎
事前制約を緩め検知と回復自動化を強化=「米国式」を目指す
![Page 35: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/35.jpg)
AWS re:Invent の衝撃 まとめ
AWS re:Invent に参加する価値とは?
Copyright © 2016 KDDI Corporation. All Rights Reserved
![Page 36: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/36.jpg)
36
Copyright © 2016 KDDI Corporation. All Rights Reserved
AWS re:Invent に参加する価値
体験 対話+
![Page 37: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/37.jpg)
37AWS re:Invent に参加する価値
Copyright © 2016 KDDI Corporation. All Rights Reserved
圧倒的な規模感と焦げ付きそうなユーザーの熱量は
現地に行かなければ絶対に体験できない• セッション会場の大きさや人の入りが分からない• スライドにも動画にも表現されない会場の反応• 現場の空気、匂い、温度、音• あの場所に来たユーザーの情熱とグローバル感• 距離感が狂ってしまうほど巨大な会場の規模 etc....
目 /鼻 /耳 /肌でこれらを体験し、口 /耳 /身振りを使って生身の人間と対話し新たな人脈を得ることこそ、ラスベガスまで行きAWS re:Invent に参加する価値そのもの
![Page 38: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/38.jpg)
38
re:Invent の詳細レポートは私のブログも載せてます!Copyright © 2016 KDDI Corporation. All Rights
Reserved
![Page 39: AWS re:Inventの衝撃 〜Large Scale Violence & Culture of Security Shock〜](https://reader033.fdocument.pub/reader033/viewer/2022051709/587064681a28ab48378b4a33/html5/thumbnails/39.jpg)
ご清聴有り難うございました!Thank you for listening!
See you @ AWS re:Invent 2017