リクルートの利用事例から考える AWSの各サービスとセキュリティ

  • View
    249

  • Download
    4

Embed Size (px)

Text of リクルートの利用事例から考える AWSの各サービスとセキュリティ

1. AWS 2. 1 AWSNW (C) Recruit Technologies Co.,Ltd. All rights reserved. 3. 2 AWSNW (C) Recruit Technologies Co.,Ltd. All rights reserved. 4. 2011 3(C) Recruit Technologies Co.,Ltd. All rights reserved. 5. 4(C) Recruit Technologies Co.,Ltd. All rights reserved. 6. 5(C) Recruit Technologies Co.,Ltd. All rights reserved. IT 7. http://recruit-tech.co.jp/ 6 8. 7(C) Recruit Technologies Co.,Ltd. All rights reserved. 7(C) Recruit Technologies Co.,Ltd. All rights reserved. UXD/SEO R&D IT AP 9. 8 AWSNW (C) Recruit Technologies Co.,Ltd. All rights reserved. 10. 9 (C) Recruit Technologies Co.,Ltd. All rights reserved. 11. 10(C) Recruit Technologies Co.,Ltd. All rights reserved. 12. 11(C) Recruit Technologies Co.,Ltd. All rights reserved. IT 13. 12(C) Recruit Technologies Co.,Ltd. All rights reserved. 1 NW 1 109 65 2 NW 1 129 57 NW 8 526 287 4 NW 32 574 298 3 HOP E Ima/MARCO Arorua Gemin i Kassul FROLIDA 2006~20094 1400 2009 DC 800PV 14. 13(C) Recruit Technologies Co.,Ltd. All rights reserved. 15. 14(C) Recruit Technologies Co.,Ltd. All rights reserved. WEB Web 16. 15(C) Recruit Technologies Co.,Ltd. All rights reserved. 20118 2012 RDS(1) EMR(2)... VPC 20133 VPC 20143 VPC Peering 2011 20122014 2015 AWS AWS2012 17. 16(C) Recruit Technologies Co.,Ltd. All rights reserved. VPC 18. 17(C) Recruit Technologies Co.,Ltd. All rights reserved. 19. 18(C) Recruit Technologies Co.,Ltd. All rights reserved. 2013 2014 2015 20. 19 AWSNW (C) Recruit Technologies Co.,Ltd. All rights reserved. 21. 20(C) Recruit Technologies Co.,Ltd. All rights reserved. 22. 2121(C) Recruit Technologies Co.,Ltd. All rights reserved. B LDAPVPNetc CB /ID/ ID / MW 23. / OS DC () () AWS AWS AWS 22 24. 23(C) Recruit Technologies Co.,Ltd. All rights reserved. VPC NW/ACL IAM ID /ID 3 25. 24(C) Recruit Technologies Co.,Ltd. All rights reserved. AWS3 VPC IAM CloudTrail 26. 25(C) Recruit Technologies Co.,Ltd. All rights reserved. AWSVPC Direct ConnectVPNpeering NW VPC 27. 26(C) Recruit Technologies Co.,Ltd. All rights reserved. AWS LDAPSAML 28. 27(C) Recruit Technologies Co.,Ltd. All rights reserved. 29. 28(C) Recruit Technologies Co.,Ltd. All rights reserved. AWS3 VPC IAM CloudTrail 30. 29(C) Recruit Technologies Co.,Ltd. All rights reserved. IAM / IAM 31. 30(C) Recruit Technologies Co.,Ltd. All rights reserved. 201410 Directory Service 32. IAM / 31(C) Recruit Technologies Co.,Ltd. All rights reserved. AWS 33. 32(C) Recruit Technologies Co.,Ltd. All rights reserved. IAM 34. 33(C) Recruit Technologies Co.,Ltd. All rights reserved. IAM/IAM IAM 1 1 1 n 1 2Managed Policy2012 2013 2014 35. 34(C) Recruit Technologies Co.,Ltd. All rights reserved. Admin 36. 35(C) Recruit Technologies Co.,Ltd. All rights reserved. EC2- FULL EC2- Describe RDS- Describe RDS- modify 37. 36(C) Recruit Technologies Co.,Ltd. All rights reserved. Management Console SSH(OTP) A B IdP (LDAP) 2014LDAPID 38. 37(C) Recruit Technologies Co.,Ltd. All rights reserved. EC2 RDS 39. (C) Recruit Technologies Co.,Ltd. All rights reserved. 38 40. 39(C) Recruit Technologies Co.,Ltd. All rights reserved. ~1/ 41. 40(C) Recruit Technologies Co.,Ltd. All rights reserved. IAM / IAM 42. 41(C) Recruit Technologies Co.,Ltd. All rights reserved. AWS 43. 42(C) Recruit Technologies Co.,Ltd. All rights reserved. 44. 43(C) Recruit Technologies Co.,Ltd. All rights reserved. 45. 44(C) Recruit Technologies Co.,Ltd. All rights reserved. http://recruit-tech.co.jp/recruitment/ 46. 45(C) Recruit Technologies Co.,Ltd. All rights reserved. 47. 46(C) Recruit Technologies Co.,Ltd. All rights reserved.