[B! Security][GCP] clavierã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

clavier id:clavier

Securityã¨GCPã«é–¢ã™ã‚‹clavierã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚¯ãƒ©ã‚¦ãƒ‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è£½å“ã‚’è§¦ã£ã¦ã¿ãŸ
ã¿ãªã•ã‚“ã€ã“ã‚“ã«ã¡ã‚ï¼åˆæŠ•ç¨¿ã®ãƒ‰ãƒªã‚¢ã§ã™ã€‚ 2011å¹´ã«AWSã®æ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã€2016å¹´ã«GCPã®æ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ãŒé–‹è¨ã•ã‚Œã¦ã‹ã‚‰ ã‚¯ãƒ©ã‚¦ãƒ‰ç’°å¢ƒã‚’åˆ©ç”¨ã™ã‚‹æ©Ÿä¼šã‚‚å¢—ãˆãŸã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ æŸ”è»Ÿãªã‚¤ãƒ³ãƒ•ãƒ©ãƒªã‚½ãƒ¼ã‚¹ã®æ´»ç”¨ã«åŠ ãˆã¦æ§˜ã€…ãªãƒžãƒãƒ¼ã‚¸ãƒ‰ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ãŒç™ºè¡¨ã•ã‚Œã‚‹ä¸ã§ ã‚¯ãƒ©ã‚¦ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¯ã©ã†ã—ã¦ã„ã‚‹ã®ï¼Ÿã¨æ°—ã«ãªã‚‹æ–¹ã‚‚ã„ã‚‹ã¨æ€ã„ã¾ã™ã®ã§ æœ¬æ—¥ã¯ã‚¯ãƒ©ã‚¦ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è£½å“ã‚’è§¦ã£ã¦ã¿ãŸã“ã¨ã«ã¤ã„ã¦æ›¸ã„ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ ã‚¯ãƒ©ã‚¦ãƒ‰ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ã„ã£ã¦ã‚‚ã©ã†ã„ã£ãŸã‚‚ã®ãŒã‚ã‚‹ã®ï¼Ÿ ã‚¯ãƒ©ã‚¦ãƒ‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã¨ã„ã£ã¦ã‚‚å„ã‚¯ãƒ©ã‚¦ãƒ‰ãŒæä¾›ã—ã¦ã„ã‚‹è£½å“ã‚„ 3rdãƒ™ãƒ³ãƒ€ãƒ¼ãŒæä¾›ã—ã¦ã„ã‚‹è£½å“ã€é˜²å¾¡ç¯„å›²ã‚‚å¤šç¨®å¤šæ§˜ã«ã‚ã‚‹ã‹ã¨æ€ã„ã¾ã™ã€‚ ä»Šå›žã¯ã‚¯ãƒ©ã‚¦ãƒ‰ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ãŒæä¾›ã—ã¦ã„ã‚‹ GCPã®SCC(Security Command Center)ã«ã¤ã„ã¦ãƒã‚¹ãƒˆã—ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ â€»AWSã®é¡žä¼¼è£½å“ã¯Guard
clavier 2024/03/02
security

aws

GCP
ãƒªãƒ³ã‚¯
Google Cloud ã® IDaaSã€ŒIdentity Platformã€ã§ä½œã‚‹ã€ã•ã¾ã–ã¾ãªèªè¨¼ãƒ‘ã‚¿ãƒ¼ãƒ³
Identity Platform ã‚’ä½¿ã†ã¨ã€ã•ã¾ã–ã¾ãªèªè¨¼ãƒ‘ã‚¿ãƒ¼ãƒ³ãŒæ§‹ç¯‰ã§ãã‚‹ï¼ ã“ã®è¨˜äº‹ã¯2023å¹´10æœˆ6æ—¥ã«è¡Œã‚ã‚ŒãŸãƒŠãƒ¬ãƒƒã‚¸ãƒ¯ãƒ¼ã‚¯ã•ã‚“ä¸»å‚¬ã®ã‚¤ãƒ™ãƒ³ãƒˆã€ŒEncraft #7 AppDev with Google Cloudã€ã§ç™ºè¡¨ã—ãŸã‚»ãƒƒã‚·ãƒ§ãƒ³ã®è§£èª¬è¨˜äº‹ã§ã™ã€‚ç¾åœ°ã§ã”å‚åŠ ã„ãŸã ã„ãŸçš†ã•ã‚“ã€ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã§ã”è¦–è´ã„ãŸã ã„ãŸçš†ã•ã‚“ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸï¼ ç§ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã§ã¯ Identity Platform ã‚’ä½¿ã£ãŸã•ã¾ã–ã¾ãªèªè¨¼ãƒ‘ã‚¿ãƒ¼ãƒ³ã«ã¤ã„ã¦ã”ç´¹ä»‹ã—ã¾ã—ãŸã€‚ã‚»ãƒƒã‚·ãƒ§ãƒ³å¾Œã€ã„ãã¤ã‹ã®ã”è³ªå•ã‚„ã€Œã“ã‚“ãªãƒ‘ã‚¿ãƒ¼ãƒ³ã‚‚ã‚ã‚‹ã‚ˆï¼ã€ã¨ã„ã†ã‚³ãƒ¡ãƒ³ãƒˆã‚‚ã„ãŸã ãã¾ã—ãŸ(ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ï¼)ã€‚ã“ã®è¨˜äº‹ã§ã¯ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³å†…ã§ã”ç´¹ä»‹ã—ãŸå†…å®¹ã«åŠ ãˆã€åˆ¥è§£ã€ã¾ãŸã¯ç™ºå±•ç³»ã¨ã‚‚è¨€ãˆã‚‹ã„ãã¤ã‹ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ã«ã¤ã„ã¦ã‚‚ã”ç´¹ä»‹ã—ã¾ã™ã€‚ Identity Platform ã¨ã¯ ã¾ãšã¯ã“ã®è¨˜äº‹ã§ãƒ¡ã‚¤ãƒ³ã§æ‰±ã† Identity P
clavier 2023/10/13
oauth

cloud

GCP

security
ãƒªãƒ³ã‚¯
Security Command Centerã‚’ä½¿ç”¨ã—ã¦Google Cloudå†…ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¤ãƒ™ãƒ³ãƒˆã‚’æ¤œçŸ¥ã™ã‚‹ - NRIãƒãƒƒãƒˆã‚³ãƒ Blog
ã“ã‚“ã«ã¡ã¯ã€æœ€è¿‘Google Cloudã‚’é ‘å¼µã£ã¦å‹‰å¼·ã—ã¦ã„ã‚‹ä¸Šé‡Žã§ã™ã€‚ ä»Šå›žã¯Security Command CenterãŠã‚ˆã³ãã®é€šçŸ¥è¨å®šæ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ Security Command Centerã¨ã¯ï¼Ÿ Security Command Centerï¼ˆä»¥ä¸‹SCCï¼‰ã¯ã€Google Cloudã®çµ„ç¹”é…ä¸‹ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«ãŠã„ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªã‚¹ã‚¯ã®ã‚ã‚‹è¨å®šã‚„ã€è„†å¼±æ€§ï¼ˆã‚¢ãƒ—ãƒªã‚‚å«ã‚€ï¼‰ã‚’è¦‹ã¤ã‘ã¦ãã‚Œã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã§ã™ã€‚ è¦‹ã¤ã‘ãŸçµæžœã‚’è¡¨ç¤ºã™ã‚‹ãƒ€ãƒƒã‚·ãƒ¥ãƒœãƒ¼ãƒ‰æ©Ÿèƒ½ã‚‚ã‚ã‚Šã¾ã™ã€‚ ãªãŠã€SCCã¯çµ„ç¹”ã«å¯¾ã—ã¦è¨å®šã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®ãŸã‚ã€ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆå˜ä½“ã§ã¯ä½¿ç”¨ã§ãã¾ã›ã‚“ã€‚ ç„¡æ–™ã®ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ ãƒ†ã‚£ã‚¢ã¨æœ‰æ–™ã®ãƒ—ãƒ¬ãƒŸã‚¢ãƒ ãƒ†ã‚£ã‚¢ãŒã‚ã‚Šã€ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã§ã¯ä¸€éƒ¨æ©Ÿèƒ½ã®ã¿ä½¿ç”¨ã§ãã¾ã™ã€‚ æ©Ÿèƒ½ï¼ˆã‚µãƒ¼ãƒ“ã‚¹ï¼‰å æ©Ÿèƒ½æ¦‚è¦ ã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ ãƒ—ãƒ¬ãƒŸã‚¢ Security Health Analytics å…¬é–‹FWãªã©ã€Goog
clavier 2021/09/12
security

GCP
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚ãƒ£ãƒ³ãƒ—å…¨å›½å¤§ä¼š 2021 ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ B3 åˆ†æ•£ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£æ™‚ä»£ã«ãŠã‘ã‚‹Webã‚·ã‚¹ãƒ†ãƒ ã®é–‹ç™ºã¨é‹ç”¨ äº‹å‰è³‡æ–™ ã‚¯ãƒ©ã‚¦ãƒ‰ã‚·ã‚¹ãƒ†ãƒ ã‚’ã‚»ã‚ãƒ¥ã‚¢ã«é–‹ç™ºé‹ç”¨ã™ã‚‹å‹˜æ‰€
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚ãƒ£ãƒ³ãƒ—å…¨å›½å¤§ä¼š 2021 ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ B3 åˆ†æ•£ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£æ™‚ä»£ã«ãŠã‘ã‚‹Webã‚·ã‚¹ãƒ†ãƒ ã®é–‹ç™ºã¨é‹ç”¨ äº‹å‰è³‡æ–™Â ã‚¯ãƒ©ã‚¦ãƒ‰ã‚·ã‚¹ãƒ†ãƒ ã‚’ã‚»ã‚ãƒ¥ã‚¢ã«é–‹ç™ºé‹ç”¨ã™ã‚‹å‹˜æ‰€
clavier 2021/08/13
è³‡æ–™

security

aws

GCP

development
ãƒªãƒ³ã‚¯
ã‚»ã‚ãƒ¥ã‚¢ãªBigQueryã®é‹ç”¨æ–¹æ³•
JulyTechFesta2021 ç™»å£‡è³‡æ–™ https://techfesta.connpass.com/event/213069/ IAM,VPC Service Controls, Logging, æ‰¿èªæ¸ˆã¿viewãªã©BigQueryå‘¨ã‚Šã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚µãƒ¼ãƒ“ã‚¹ã¯ã„ãã¤ã‚‚ã‚ã‚Šã¾ã™ã€‚ã‚»ã‚ãƒ¥ãƒªâ€¦
clavier 2021/07/21
bigquery

è¨å®š

security

GCP

ã‚ã¨ã§èªã‚€

é‹ç”¨

slide
ãƒªãƒ³ã‚¯
GCP ã® IAM ã‚’ãŠã•ã‚‰ã„ã—ã‚ˆã†
ã“ã®è¨˜äº‹ã¯ Google Cloud Japan Customer Engineer Advent Calendar 2019 ã® 6æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ TL;DRæœ¬è¨˜äº‹ã§ã¯Google Cloud Platform (GCP) ã§ã® ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚„æ¨©é™ã‚’ç®¡ç†ã™ã‚‹ IAM ã«ã¤ã„ã¦æ•´ç†ã—ã¦ã„ãã¾ã™ã€‚ ã¯ã˜ã‚ã«ã‚¯ãƒ©ã‚¦ãƒ‰ã‚’ä½¿ã†ä¸Šã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ã‚„æ¨©é™ç®¡ç†ã¯é‡è¦ã§ã™ã‚ˆãã€‚GCP ã‚’ä½¿ã†éš›ã«ã€ã©ã®ã‚ˆã†ã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ã§ãã‚‹ã®ã‹ã€æ¨©é™ç®¡ç†ã‚„èªè¨¼ã‚’æ•´ç†ã—ã¦ã¿ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚GCP ã§ã¯æ¨©é™ç®¡ç†ã‚’ Identity and Access Managementï¼ˆ IAM ï¼‰ã¨ã„ã†ã‚‚ã®ã§ç®¡ç†ã—ã¦ã„ã¾ã™ã€‚IAMã§ã¯ã€èª°ãŒã€ã©ã®ã‚ˆã†ãªæ“ä½œã‚’ã€ä½•ã«å¯¾ã—ã¦è¡Œãˆã‚‹ã‹ã¨ã„ã†ã‚‚ã®ã‚’å®šç¾©ãƒ»ç®¡ç†ã—ã¾ã™ã€‚ã“ã‚Œã«ã‚ˆã‚Šã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®è¿½åŠ ãƒ»å‰Šé™¤ã‚„æ¨©é™ä»˜ä¸ŽãŒã‚·ãƒ³ãƒ—ãƒ«ã«ãªã‚Šã€ç®¡ç†ãŒå®¹æ˜“ã«ãªã‚Šã¾ã™ã€‚ IAMã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨æ¨©é™GCP ã§åˆ©ç”¨ã§ãã‚‹ã‚¢ã‚«ã‚¦
clavier 2019/12/07
GCP

iam

security
ãƒªãƒ³ã‚¯
[GCP] GCPã‚µãƒ¼ãƒ“ã‚¹ã‚’å‹æ‰‹ã«ã¾ã¨ã‚ã¦ã¿ãŸ(ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç·¨) - Qiita
Binary Authorization ä¿¡é ¼ã§ãã‚‹ã‚³ãƒ³ãƒ†ãƒŠã®ã¿ã‚’ Kubernetes Engine ã«ãƒ‡ãƒ—ãƒã‚¤ã€‚ Binary Authorization ã¯ã€Google Kubernetes Engineï¼ˆGKEï¼‰ã«ä¿¡é ¼ã§ãã‚‹ã‚³ãƒ³ãƒ†ãƒŠ ã‚¤ãƒ¡ãƒ¼ã‚¸ã®ã¿ãŒãƒ‡ãƒ—ãƒã‚¤ã•ã‚Œã‚‹ã“ã¨ã‚’ä¿è¨¼ã™ã‚‹ãƒ‡ãƒ—ãƒã‚¤æ™‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç®¡ç†ã‚µãƒ¼ãƒ“ã‚¹ã§ã™ã€‚Binary Authorization ã‚’ä½¿ç”¨ã™ã‚‹ã¨ã€é–‹ç™ºãƒ—ãƒã‚»ã‚¹æ™‚ã«ã€ä¿¡é ¼ã§ãã‚‹æ©Ÿé–¢ã«ã‚ˆã‚‹ã‚¤ãƒ¡ãƒ¼ã‚¸ã¸ã®ç½²åã‚’å¿…é ˆã«ã—ã¦ã€ãƒ‡ãƒ—ãƒã‚¤æ™‚ã«ãã®ç½²åã‚’æ¤œè¨¼ã™ã‚‹éŽç¨‹ã‚’å°Žå…¥ã§ãã¾ã™ã€‚æ¤œè¨¼ãƒ—ãƒã‚»ã‚¹ã‚’é©ç”¨ã™ã‚‹ã“ã¨ã§ã€é©åˆ‡ã§ã‚ã‚‹ã¨èªã‚ã‚‰ã‚ŒãŸã‚¤ãƒ¡ãƒ¼ã‚¸ã®ã¿ãŒãƒ“ãƒ«ãƒ‰ã¨ãƒªãƒªãƒ¼ã‚¹ã®ãƒ—ãƒã‚»ã‚¹ã«çµ±åˆã•ã‚Œã‚‹ãŸã‚ã€ã‚³ãƒ³ãƒ†ãƒŠã®ç’°å¢ƒã‚’ã‚ˆã‚ŠåŽ³å¯†ã«åˆ¶å¾¡ã§ãã¾ã™ã€‚ <æ©Ÿèƒ½> ãƒãƒªã‚·ãƒ¼ã®ä½œæˆ ãƒãƒªã‚·ãƒ¼ã®æ¤œè¨¼ã¨é©ç”¨ Cloud Security Command Center ã®çµ±åˆ ç›£æŸ»ãƒã‚° Cloud KMS
clavier 2019/09/14
ã‚ã¨ã§èªã‚€

GCP

security
ãƒªãƒ³ã‚¯
1