AWS Webinar ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. •...

80
© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. AWS Webinar https://amzn.to/JPWebinar https://amzn.to/JPArchive

Transcript of AWS Webinar ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. •...

Page 1: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

AWS Webinar

https://amzn.to/JPWebinar https://amzn.to/JPArchive

Page 2: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

①吹き出しをクリック②質問を入力③ Sendをクリック

Twitter

#awsblackbelt

2

Page 3: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

3

Page 4: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

4Photographed at Okinawa Oodomari Beach

Page 5: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

5

Page 6: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

6

Page 7: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

“HTTP pages will

be marked as affirmatively

"Not Secure" using red

color and the non-secure

icon in the URL bar if the

user interacts with any

input field.”

HTTP

URLTakes effect: October 2018 (Chrome 70)

Announcement: Evolving Chrome's security indicators (May 17, 2018)

https://www.chromium.org/Home/chromium-security/marking-http-as-non-secure

7

Page 8: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

8

Page 9: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Page 10: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Page 11: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Page 12: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Page 13: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

SSL/TLS v2.0, IPA https://www.ipa.go.jp/security/ipg/documents/ipa-cryptrec-gl-3001-2.0.pdf

Page 14: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

14

Page 15: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

15

Page 16: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

16

Page 17: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

17

Page 18: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

18

証明書署名リクエスト(CSR)

CA署名証明書

ルート CA

中間 CA

証明書

ルート CA

証明書

中間 CA

CA

証明書署名リクエスト(CSR)

CA署名証明書

Page 19: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

19

Page 20: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

20

Page 21: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

21

Page 22: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

22

Page 23: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

23

Page 24: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

24

Page 25: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Certificate manager

25

Page 26: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

26

Page 27: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

27

Page 28: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

28

Page 29: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

AWS Support

https://aws.amazon.com/jp/contact-us/

29

Page 30: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

30

Page 31: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

31

https://www.amazontrust.com/repository/

Page 32: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

32

Page 33: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

オハイオバージニア北部北カリフォルニアオレゴンムンバイ大阪ローカル

ソウルシンガポールシドニー東京カナダフランクフルト

アイルランドロンドンパリサンパウロGovCloud(US−EAST)GovCloud(US)

(2018年12月19日現在)

33

Page 34: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

34

Page 35: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

ACM による証明書やキーの更新や古い証明書の差し替えは、事前の通知なしに行われる可能性あり

35

Page 36: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

36

https://docs.aws.amazon.com/ja_jp/acm/latest/userguide/troubleshooting-renewal.html

Page 37: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

37

https://docs.aws.amazon.com/ja_jp/acm/latest/userguide/import-

certificate.html

Page 38: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

38

Page 39: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

AWS

TLS

TLS

TLS

ALB

Page 40: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

40

Page 41: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

41

Page 42: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

42

*を指定することで同じドメインの複数サイトの保護が可能

Page 43: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

43

Page 44: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

44

Page 45: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

45

Page 46: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Page 47: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

47

Page 48: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Amazon Certificates

<[email protected]>

48

Page 49: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

49

Page 50: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

50

Page 51: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

51

ACMdemoACMdemo

Page 52: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

52

Page 53: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

53

Page 54: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

54

Page 55: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

55

Page 56: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

56

Page 57: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

監査レポート

出力

IAMを利用し

たアクセスコントロール

証明書

失効リスト

(CRL)

ハードウェア

セキュリティ

モジュール

57

Page 58: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

組織リソース

オンプレミスサーバー

AWSサービス

デバイス

Amazon EC2

ACM統合サービス(CloudFront、ELB、API Gatewa)

58

ACM

Private CA

Instances

AWS

Page 59: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

証明書署名リクエスト(CSR)

CA署名証明書

ルート CA

ACM

Private CA

CA

中間 CA

証明書

ルート CA

証明書

中間 CA

59

Page 60: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

60

Page 61: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Amazon

パブリックCA

TLS

AWS

TLS

TLS

AWS

Certificate

Manager

Page 62: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Page 63: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

67

Page 64: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

プライベート証明書

カスタム有効期限

カスタムリソースネーム

鍵アルゴリズム 署名アルゴリズム

RSA 2048 SHA256 with RSA

RSA 4096 SHA384 with RSA

SHA512 with RSA

ECDSA P256 SHA256 with ECDSA

ECDSA P384 SHA384 with ECDSA

SHA512 with ECDSA

68

Page 65: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

69

https://aws.amazon.com/jp/blogs/compute/maintaining-transport-layer-security-all-the-way-to-your-container-part-2-using-aws-certificate-manager-private-

certificate-authority/

Page 66: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

71

Page 67: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Ruby

iOS

Python (boto)

Android

Node.js

.NET

PHP

JavaScriptJava

Xamarin

AWS

SDKs

72

Page 68: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

CreateCertificateAuthority

IssueCertificate

GetCertificate

RevokeCertificate

UpdateCertificateAuthority

DeleteCertificateAuthority

ListCertificateAuthorities

DescribeCertificateAuthority

GetCertificateAuthorityCsr

CreateCertificateAuthorityAuditReport

DescribeCertificateAuthorityAuditReport

ImportCertificateAuthorityCertificate

GetCertificateAuthorityCertificate

TagCertificateAuthority

UntagCertificateAuthority

ListTags

73

Page 69: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

74

Page 70: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

75

Page 71: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Private Certificate Authorities CA 10

Private CA 50,000

78

Page 72: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

1 , 1

0–1,000 $0.75

1,000–10,000 $0.35

10,000+ $0.001

Page 73: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

• 東京

• カナダ

80

Page 74: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Page 75: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

82

Page 76: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

83

Page 78: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

85

Page 79: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Page 80: AWS Webinar   ......© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. • • • • 3

© 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved. © 2018, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

AWS Webinar

https://amzn.to/JPWebinar https://amzn.to/JPArchive