[B! Authorization] kutakutatriangleã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kutakutatriangle id:kutakutatriangle

Authorizationã«é–¢ã™ã‚‹kutakutatriangleã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (26)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Oktaã§PasskeyãŒåˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ãŸã®ã§ã„ã‚ã„ã‚ç¢ºèªã—ã¦ã¿ãŸ
ã“ã‚“ã«ã¡ã¯ï¼IDãƒãƒ¼ãƒ ã®ãŸã¤ã¿ã‚“ã§ã™ã€‚ ä»Šå¹´ã®ã€Œä¸–ç•Œãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒ‡ãƒ¼ã€ã§ã‚ã‚‹5æœˆ5æ—¥ã«Appleã€Googleã€MicrosoftãŒå…±åŒã§ç™ºè¡¨ã—ãŸPasskeyã®å–ã‚Šçµ„ã¿ãŒè©±é¡Œã«ãªã£ãŸã“ã¨ã‚’è¦šãˆã¦ã„ã‚‹äººã‚‚å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ ã“ã®PasskeyãŒiOS16ã§åˆ©ç”¨å¯èƒ½ã¨ãªã£ãŸã®ã§æ—©é€ŸOktaã§ã©ã®ã‚ˆã†ãªæŒ™å‹•ã¨ãªã‚‹ã‹ã‚’è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ Passkeyã¨ã¯ ã¯ã˜ã‚ã«ã–ã£ãã‚Šã¨ã—ãŸPasskeyã®æ¦‚è¦ã«ã¤ã„ã¦è§¦ã‚Œã¦ãŠãã¾ã™ã€‚ ç°¡æ˜“ãªè¡¨ç¾ã‚’ã™ã‚‹ã¨ã€Passkeyã¯FIDO Allianceã«ã‚ˆã‚‹FIDO (WebAuthn )ã¨ã„ã†æ¨™æº–è¦æ ¼ã§ä½œæˆã—ãŸã‚ãƒ¼ã‚’ãƒžãƒ«ãƒãƒ‡ãƒã‚¤ã‚¹ã§åˆ©ç”¨ã§ãã‚‹ã‚ˆã†å¿œç”¨ã—ãŸã‚‚ã®ã ã¨è¨€ãˆã¾ã™ã€‚ ã“ã‚Œã¾ã§FIDOã¯ä»¥ä¸‹ã®ã‚ˆã†ãªèª²é¡ŒãŒã‚ã‚Šã€ã‚ã¾ã‚Šä¸€èˆ¬çš„ãªèªè¨¼è¦ç´ ã¨ã¯è¨€ãˆã¾ã›ã‚“ã§ã—ãŸã€‚ Yubikeyã«ä»£è¡¨ã•ã‚Œã‚‹ã‚ˆã†ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ãƒ¼ã‚’å°Žå…¥ã™ã‚‹ãƒãƒ¼ãƒ‰ãƒ« Apple Face ID/T
kutakutatriangle 2022/09/24
Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
Twilio breach let hackers gain access to Authy 2FA accounts
Twilioâ€™s investigation into the attack on August 4 reveals that hackers gained access to some AuthyÂ user accounts and registered unauthorized devices. Authy is a two-factor authentication (2FA) service from Twilio that allows users to secure their online accounts where the feature is supported by identifying a second time via a dedicated app after typing in the login credentials. When logging into
kutakutatriangle 2022/08/27
Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
ãƒ‰ã‚³ãƒ¢ãƒ¡ãƒ¼ãƒ«ã«é€ä¿¡ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼æŠ€è¡“ã€ŒDMARCã€ã€ŒDKIMã€ã‚’å°Žå…¥ã€è©æ¬ºãƒ¡ãƒ¼ãƒ«ä½Žæ¸›ã¸
kutakutatriangle 2022/08/23
Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
SaaS ã«ãŠã‘ã‚‹ãƒ†ãƒŠãƒ³ãƒˆãƒªã‚½ãƒ¼ã‚¹ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚’ JWT ã‚’ç”¨ã„ã¦å®Ÿç¾ã™ã‚‹ | Amazon Web Services
Amazon Web Services ãƒ–ãƒã‚° SaaS ã«ãŠã‘ã‚‹ãƒ†ãƒŠãƒ³ãƒˆãƒªã‚½ãƒ¼ã‚¹ã¸ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚’ JWT ã‚’ç”¨ã„ã¦å®Ÿç¾ã™ã‚‹ ã¿ãªã•ã‚“ã“ã‚“ã«ã¡ã¯ã€‚ã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒˆã®ç¦æœ¬ã§ã™ã€‚ æœ¬æŠ•ç¨¿ã®ãƒ†ãƒ¼ãƒžã¯ Software as a Serviceï¼ˆSaaSï¼‰ã«ãŠã‘ã‚‹ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã§ã™ã€‚ SaaS ã§ã¯ãƒ†ãƒŠãƒ³ãƒˆã”ã¨ã«ã‚µãƒ¼ãƒãƒ¼ãªã©ã®ãƒªã‚½ãƒ¼ã‚¹ãŒåˆ†é›¢ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ãã®ãŸã‚ã€å„ãƒ†ãƒŠãƒ³ãƒˆã«å±žã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é©åˆ‡ãªãƒªã‚½ãƒ¼ã‚¹ã¸ã¨ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ å…·ä½“çš„ãªãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã®è©±ã«å…¥ã‚‹å‰ã«ã€SaaS ã®ãƒ†ãƒŠãƒ³ãƒˆåˆ†é›¢ãƒ¢ãƒ‡ãƒ«ã«ã¤ã„ã¦èª¬æ˜Žã‚’ã—ã¾ã™ã€‚SaaS ã§ã¯ã€ãƒ†ãƒŠãƒ³ãƒˆã®åˆ†é›¢ãƒ¢ãƒ‡ãƒ«ã¨ã—ã¦ã‚µã‚¤ãƒã€ãƒ—ãƒ¼ãƒ«ã€ãƒ–ãƒªãƒƒã‚¸ãƒ¢ãƒ‡ãƒ«ãŒå˜åœ¨ã—ã¾ã™ã€‚ã¾ãŸã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã‚µãƒ–ã‚¹ã‚¯ãƒ©ã‚¤ãƒ–ã—ã¦ã„ã‚‹åˆ©ç”¨ãƒ—ãƒ©ãƒ³ (ãƒ†ã‚£ã‚¢) ã«ã‚ˆã£ã¦ã€ãƒªã‚½ãƒ¼ã‚¹ã®åˆ†é›¢å½¢æ…‹ãŒå¤‰ã‚ã‚‹ã‚ˆã†ãªã€éšŽå±¤ãƒ™ãƒ¼ã‚¹ã®åˆ†é›¢ã‚‚ã‚ã‚Šã¾ã™ã€‚ ã‚µã‚¤
kutakutatriangle 2022/08/20
Authentication

Authorization

Network

X as a Service

techfeed
ãƒªãƒ³ã‚¯
AWS SSO ã‚’ç”¨ã„ãŸ Amazon EKS ã¸ã®è¿…é€Ÿãªã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ | Amazon Web Services
Amazon Web Services ãƒ–ãƒã‚° AWS SSO ã‚’ç”¨ã„ãŸ Amazon EKS ã¸ã®è¿…é€Ÿãªã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ è¨³æ³¨ï¼š2022å¹´7æœˆã«ã€AWS Single Sign-On ã¯ AWS IAM Identity Center ã«å¤‰æ›´ã•ã‚Œã¾ã—ãŸã€‚ ã“ã®è¨˜äº‹ã¯ A quick path to Amazon EKS single sign-on using AWS SSO (è¨˜äº‹å…¬é–‹æ—¥: 2022 å¹´ 6 æœˆ 14 æ—¥) ã‚’ç¿»è¨³ã—ãŸã‚‚ã®ã§ã™ã€‚ Software as a Service (SaaS) ã¨ã‚¯ãƒ©ã‚¦ãƒ‰ã®å°Žå…¥ãŒæ€¥é€Ÿã«é€²ã‚€ä¸ã€ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã¯æ–°ã—ã„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å¢ƒç•Œã«ãªã£ã¦ã„ã¾ã™ã€‚AWS Identity and Access Management (IAM) ã¨ Kubernetes role-based access control (RBAC) ã¯ã€å¼·åŠ›ãªæœ€å°æ¨©é™ã®ã‚»
kutakutatriangle 2022/08/02
Amazon Web Services

Authentication

Authorization

Kubernetes

techfeed
ãƒªãƒ³ã‚¯
Office 365ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’å¤šè¦ç´ èªè¨¼ã™ã‚‰å›žé¿ã—ã¦ä¹—ã£å–ã‚‹AiTMãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°æ”»æ’ƒãŒ1ä¸‡ä»¥ä¸Šã®çµ„ç¹”ã‚’æ¨™çš„ã«ã—ã¦ã„ãŸã¨MicrosoftãŒå…¬è¡¨
Microsoftã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶ãƒãƒ¼ãƒ ãŒã€HTTPSãƒ—ãƒã‚ã‚·æŠ€è¡“ã‚’ä½¿ã£ã¦Office 365ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä¹—ã£å–ã‚‹å¤§è¦æ¨¡ãªãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°æ”»æ’ƒã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ã§ã‚ã‚‹ã€ŒAdversary-in-the-Middle(AiTM)ã€ãŒç¢ºèªã§ããŸã¨ç™ºè¡¨ã—ã¾ã—ãŸã€‚ã“ã®æ”»æ’ƒã¯å¤šè¦ç´ èªè¨¼ã‚’å›žé¿ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã€2021å¹´9æœˆä»¥æ¥1ä¸‡ä»¥ä¸Šã®çµ„ç¹”ãŒæ¨™çš„ã«ãªã£ã¦ã„ã‚‹ã¨ã®ã“ã¨ã§ã™ã€‚ From cookie theft to BEC: Attackers use AiTM phishing sites as entry point to further financial fraud - Microsoft Security Blog https://www.microsoft.com/security/blog/2022/07/12/from-cookie-theft-to-bec-attackers-use-ait
kutakutatriangle 2022/07/13
Authentication

Authorization

CyberAttack

Windows

techfeed
ãƒªãƒ³ã‚¯
Cloudflare Workers ã§ã‚‚ Firebase Authentication ã‚’ä½¿ãˆã‚‹ãžï¼ï¼
Cloudflare Workers ã§ã¯ KV ã ã£ãŸã‚Š Durable Objects ã‚„ R2 ãªã©ã¨ã„ã£ãŸå¤–éƒ¨ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã¸ã‚¢ã‚¯ã‚»ã‚¹ã‚’ã—ã¦ä½•ã‹ã—ã‚‰æ“ä½œã™ã‚‹ã‚ˆã†ãªãƒ—ãƒã‚°ãƒ©ãƒ ã‚’å‹•ã‹ã™ã“ã¨ãŒã§ãã¾ã™ã€‚ã—ã‹ã—ã€èª°ã§ã‚‚ãã®æ“ä½œãŒã§ãã¦ã—ã¾ã†ã¨ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é¢ã‚„ä½¿ç”¨æ–™ã®é¢ã§å•é¡ŒãŒç™ºç”Ÿã—ã¾ã™ã€‚ interface Env { ANYBUCKET: R2Bucket } // èª°ã§ã‚‚ãƒ•ã‚¡ã‚¤ãƒ«ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã§ãã¡ã‚ƒã† Worker :pien: export default { async fetch(request: Request, env: Env) { const formdata = await request.formData() const imagedata = formdata.get("imagedata") if (imagedata === null) { throw new Er
kutakutatriangle 2022/07/09
X as a Service

Security

Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
ã€AWS SSOã€‘AzureAD+AWSSSOã§ã€å¼Šç¤¾ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ãŠã‘ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ã‚’AzureADã«é›†ç´„ã—ã¤ã¤ã€ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’ã‚¢ã‚«ã‚¦ãƒ³ãƒˆç®¡ç†è€…å´ã§ç®¡ç†ã§ãã‚‹ã‚ˆã†ã«ã—ã¦ã¿ãŸ - Qiita
ã€AWS SSOã€‘AzureAD+AWSSSOã§ã€å¼Šç¤¾ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ãŠã‘ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ã‚’AzureADã«é›†ç´„ã—ã¤ã¤ã€ã‚¢ã‚¯ã‚»ã‚¹æ¨©é™ã‚’ã‚¢ã‚«ã‚¦ãƒ³ãƒˆç®¡ç†è€…å´ã§ç®¡ç†ã§ãã‚‹ã‚ˆã†ã«ã—ã¦ã¿ãŸAWSSSOAzureADãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†AWSSSO ã†ã‡ã£ã—ã‚ƒã£ã—ã‚ƒãƒ¼ã™ã€‚ ã‚¯ãƒ©ã‚¦ãƒ‰ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ãƒãƒ¼ãƒ ã®é½‹è—¤ã§ã™ã€‚ AWSã‚’ã”åˆ©ç”¨ã®æ–¹ã®ä¸ã§ã€ãƒžãƒ«ãƒã‚¢ã‚«ã‚¦ãƒ³ãƒˆé‹ç”¨ã•ã‚Œã¦ã„ã‚‹æ–¹ã£ã¦ã©ã‚Œãã‚‰ã„ã„ã‚‰ã£ã—ã‚ƒã‚‹ã§ã—ã‚‡ã†ã‹ã€‚ ã‚¢ã‚«ã‚¦ãƒ³ãƒˆä¸€ã¤ãªã‚‰ã¾ã ã—ã‚‚ã€ã„ãã¤ã‚‚AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆãŒã‚ã£ã¦å€‹åˆ¥ã«IAMãƒ¦ãƒ¼ã‚¶ãƒ¼ç™ºè¡Œã¨ã‹ã—ã¦ã‚‹ã¨é€€è·è€…ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®å‰Šé™¤å¿˜ã‚Œã¨ã‹ã‚ã£ãŸã‚Šã€è‰²ã€…é¢å€’ã§ã™ã‚ˆãã€‚ ãˆï¼Ÿã‚ã‹ã‚‰ãªã„ã£ã¦ï¼Ÿ ã»ã‚“ã˜ã‚ƒãã€ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã®ã„ã‚ã‚“ãªã¨ã“ã‚ã«åŒã˜ã‚ˆã†ãªå‡¦ç†ã‚’ã‚³ãƒ”ãƒšã—ãŸã›ã„ã§ã€ä¿®æ£åŠ ãˆã‚‹ã¨ãã«å…¨éƒ¨æ‰‹ä½œæ¥ã§ç›´ã•ãªã„ã¨ã„ã‘ãªã„ã‚ã‚“ã©ãã•ã•ã‚’æ€ã„å‡ºã—ã¦ãã ã•ã„ã€‚ ã‚ã‚“ã©ã„ã§ã—ã‚‡ï¼Ÿ åŒã˜ã‚ˆã†ãªå‡¦ç†ã¯ä¸€ã‹æ‰€ã«ã¾ã¨ã‚ã¦ä½¿ã„ã¾ã‚ã›ã‚‹ã»ã†ãŒ
kutakutatriangle 2022/07/08
Amazon Web Services

Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
AWSãŒã€ŒIAM Roles Anywhereã€ç™ºè¡¨ã€‚ä¸€æ™‚çš„ã«AWSã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©ã‚’AWSã®å¤–å´ã«ã‚ã‚‹ãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒ‰ã«ä»˜ä¸Ž
AWSãŒã€ŒIAM Roles Anywhereã€ç™ºè¡¨ã€‚ä¸€æ™‚çš„ã«AWSã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©ã‚’AWSã®å¤–å´ã«ã‚ã‚‹ãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒ‰ã«ä»˜ä¸Ž Amazon Web Servicesï¼ˆAWSï¼‰ã¯ã€AWSã®å¤–å´ã«ã‚ã‚‹ãƒ¯ãƒ¼ã‚¯ãƒãƒ¼ãƒ‰ã«å¯¾ã—ã¦ä¸€æ™‚çš„ã«AWSãƒªã‚½ãƒ¼ã‚¹ã¸ã®ã‚¢ã‚¯ã‚»ã‚¹æ¨©ã‚’ä»˜ä¸Žã§ãã‚‹ã€ŒIAM Roles Anywhereã€ã‚’ç™ºè¡¨ã—ã¾ã—ãŸã€‚ : Need to give workloads outside of AWS temporary access to AWS resources? Announcing IAM Roles Anywhere, allowing you to provide temporary AWS credentials to workloads outside AWS using the same IAM roles & policies you configured for your
kutakutatriangle 2022/07/08
Amazon Web Services

Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
Azure AD Verifiable Credentialsã‚’æ´»ç”¨ã—ãŸåˆ†æ•£åž‹IDï¼ˆDIDï¼‰ã¨ã¯ï¼Ÿæ…¶æ‡‰å¤§ã§ã‚‚å°Žå…¥
Azure AD Verifiable Credentialsã‚’æ´»ç”¨ã—ãŸåˆ†æ•£åž‹IDï¼ˆDIDï¼‰ã¨ã¯ï¼Ÿæ…¶æ‡‰å¤§ã§ã‚‚å°Žå…¥ 2021.05.28 æ´»ç”¨äº‹ä¾‹ Azure, DID ã¯ã˜ã‚ã« ä¸€èˆ¬çš„ã«ã€ç§ãŸã¡ã®ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆåå‰ã‚„ä½æ‰€ã¨ã„ã£ãŸå±žæ€§ã®é›†åˆï¼‰ã‚„å€‹äººã‚’ç‰¹å®šã™ã‚‹ãŸã‚ã®è˜åˆ¥åï¼ˆIdentifierï¼‰ã¯ã€ä¼šç¤¾ã‚„è¡Œæ”¿ãªã©ç‰¹å®šã®æ©Ÿé–¢ã«ã‚ˆã£ã¦ç™ºè¡Œã•ã‚Œã€é›†ä¸çš„ã«ç®¡ç†ã•ã‚Œã¦ã„ã¾ã™ã€‚ãƒ‡ã‚¸ã‚¿ãƒ«åŒ–ãŒé€²ã‚€ã«ã¤ã‚Œã¦æ§˜ã€…ãªã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã€IDãƒ‡ãƒ¼ã‚¿ã‚‚å¢—ãˆã¾ã—ãŸï¼ˆä¾‹ãˆã°Twitterã¨Facebookã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹äººã¯IDã‚’ãµãŸã¤æŒã£ã¦ã„ã¾ã™ï¼‰ã€‚ IDã®ç®¡ç†ãŒç‰¹å®šçµ„ç¹”ã«ä¾å˜ã—ã¦ã„ã‚‹ãŸã‚ã€å¤§è¦æ¨¡ãªæƒ…å ±æ¼æ´©ãƒ»ä¸æ£åˆ©ç”¨ã®ãƒªã‚¹ã‚¯ãŒã‚ã‚Šã€å®Ÿéš›ã«æ§˜ã€…ãªä¼šç¤¾ã‚„å…¬çš„æ©Ÿé–¢ã‹ã‚‰ä¸€åº¦ã«å¤šãã®å€‹äººæƒ…å ±ãŒæ¼æ´©ã™ã‚‹äº‹ä»¶ãŒãŸã³ãŸã³å ±ã˜ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã†ã—ãŸã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã‚„è˜åˆ¥åã®ç®¡ç†æ‰‹æ³•ã¨ã—ã¦ã€åˆ†æ•£åž‹ãƒ¢ãƒ‡ãƒ«ãŒææ¡ˆã•ã‚Œã¦ãŠã‚Šã€åˆ†æ•£
kutakutatriangle 2022/07/07
Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
AWS IAMãƒªã‚½ãƒ¼ã‚¹ ãƒ‘ã‚¹ã®ã‚¹ã‚¹ãƒ¡ | DevelopersIO
ã“ã‚“ã«ã¡ã¯ã€‚ã‚µãƒ¼ãƒ“ã‚¹ã‚°ãƒ«ãƒ¼ãƒ—ã®æ¦ç”°ã§ã™ã€‚ ä»Šå›žã¯ä½¿ã„ã©ã“ã‚ãŒã‚¤ãƒžã‚¤ãƒã¤ã‹ã‚ãªã„ï¼ˆâ€»å€‹äººã®æ„Ÿæƒ³ã§ã™ï¼‰IAMãƒªã‚½ãƒ¼ã‚¹ã®ã€Œãƒ‘ã‚¹ã€ã«ã¤ã„ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ IAMãŒãªã‚“ãªã®ã‹ã€ã¨ã„ã†ã®ã¯å¤ç›®ã®ã‚¨ãƒ³ãƒˆãƒªãªã©ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ æ™®æ®µã‹ã‚‰AWSã‚’ä½¿ã£ã¦ã„ã‚‹æ–¹ã§ã‚‚IAMã®ã€Œãƒ‘ã‚¹ã€ã‚’æ„è˜ã—ã¦ã„ã‚‹äººã¯ã€ã‚ã¾ã‚Šå¤šããªã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ã¨ã„ã†ã®ã‚‚ã€åˆ¥ã«æ„è˜ã—ãªãã¦ã‚‚AWSã¯ä½¿ãˆã¾ã™ã—ã€ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆã‚³ãƒ³ã‚½ãƒ¼ãƒ«ã‹ã‚‰IAMãƒãƒ¼ãƒ«ãªã©ã‚’ä½œæˆã™ã‚‹éš›ã«ã¯è¨å®šæ¬„ãŒãªã‹ã£ãŸã‚Šã—ã¾ã™ã€‚ã¶ã£ã¡ã‚ƒã‘å½±ãŒè–„ã„ã§ã™ã€‚ IAMã®ã€Œãƒ‘ã‚¹ã€ã‚’è¨å®šã™ã‚‹å ´åˆã¯ã€AWS CLIã‚„SDKã‚’ä½¿ç”¨ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ä¾‹ã¨ã—ã¦ã€CLIã§IAMãƒãƒ¼ãƒ«ã‚’ä½œæˆã™ã‚‹ã®ã§ã‚ã‚Œã°æ¬¡ã®ã‚ˆã†ã«ä½œæˆã§ãã¾ã™ã€‚ $ aws iam create-role --path '/cm-role/' --role-name cm-example --assume-role-poli
kutakutatriangle 2022/05/24
Amazon Web Services

Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
Two-Factor Authentication for All Otter Plans | Otter.ai
We realize your conversations may contain some of your most sensitive and confidential information and thatâ€™s why we are committed to keeping your information private and secure. Starting today, two-factor authentication is now available for all Otter plans (Basic, Pro, Business, and Enterprise) at no additional cost. What is two-factor authentication? Two-factor authentication is an added layer o
kutakutatriangle 2022/05/24
Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
Cliam - Multi Cloud IAM Permissions Enumeration Tool
Description Cliam is a simple cloud permissions identifier. There are two main components to the CLI. Most of the enumerated permissions are list, describe or get permissions. Only permissions that does not require a specific resource are tested. enumerate which can be used to enumerate specific permissions (recommended) Some service providers have service groups that can check for permissions for
kutakutatriangle 2022/05/05
Google Cloud Platform

Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
GitHub Will Require All Code Contributors To Use 2FA - Slashdot
kutakutatriangle 2022/05/05
GitHub

Git

Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
Firebase Authentication 7ã¤ã®è½ã¨ã—ç©´ - è„†å¼±æ€§ã‚’ç”Ÿã‚€IDaaSã®ä¸é©åˆ‡ãªåˆ©ç”¨ - Flatt Security Blog
ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€æ ªå¼ä¼šç¤¾ Flatt Security ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ã´ã–ãã‚ƒã£ã¨ (@pizzacat83) ã§ã™ã€‚ èªè¨¼æ©Ÿæ§‹ã‚’è‡ªä½œã›ãšã«å°Žå…¥ã§ãã‚‹ Firebase Authentication ã¯æ§˜ã€…ãªã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã«ã¦åˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã™ãŒã€ãã®ç‰¹æ€§ã‚’ååˆ†ã«ç†è§£ã›ãšã«å°Žå…¥ã™ã‚‹ã¨ã€å®Ÿã¯ä¸å…·åˆã‚„è„†å¼±æ€§ãŒç”Ÿã˜ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ãã“ã§æœ¬ç¨¿ã§ã¯ Firebase Authentication ã‚’åˆ©ç”¨ã™ã‚‹ã†ãˆã§ã€æ³¨æ„ã—ãªã‘ã‚Œã°ä¸å…·åˆã‚„è„†å¼±æ€§ã«ç¹‹ãŒã‚Šã†ã‚‹ 7 å€‹ã®ã€Œè½ã¨ã—ç©´ã€ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚ ã¯ã˜ã‚ã« IDaaS ã®åˆ©ç‚¹ã¨æ¬ ç‚¹ è½ã¨ã—ç©´ 1. è‡ªå·±ã‚µã‚¤ãƒ³ã‚¢ãƒƒãƒ— ãƒªã‚¹ã‚¯ å¯¾ç– è½ã¨ã—ç©´ 2. ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒè‡ªèº«ã‚’å‰Šé™¤ã§ãã‚‹ å¯¾ç– è½ã¨ã—ç©´ 3. ä»–äººã®ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’ç”¨ã„ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ² ãƒªã‚¹ã‚¯ ãƒªã‚¹ã‚¯ 3-1. ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹èª¤å…¥åŠ›ã«ã‚ˆã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ä¹—ã£å–ã‚Š ãƒªã‚¹ã‚¯ 3-2. ä»–äººã«ãƒ¡ãƒ¼
kutakutatriangle 2022/04/19
X as a Service

Security

Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
KrbRelay - Framework For Kerberos Relaying
kutakutatriangle 2022/04/19
Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
Microsoft and Okta are investigating potential attacks by the Lapsus$ hacking group
Microsoft and identity authentication company Okta are both investigating potential attacks that may have been carried out by the South American hacking group Lapsus$. The collective claims to have stolen source code for Bing, Cortana and internal Microsoft projects from a server. Lapsus$ released a torrent on Monday that's said to contain 37GB of source code for around 250 projects, according to
kutakutatriangle 2022/03/23
Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
Okta security breach may affect Mac & iPhone enterprise users - 9to5Mac
kutakutatriangle 2022/03/23
Authentication

Authorization

Mac

Security

techfeed
ãƒªãƒ³ã‚¯
Authentication firm Okta says it has found no evidence of new attack after hackers claim breach
Okta is an authentication and identity management software company that is used by more than 15,000 organizations. Hacking group Lapsus$ posted screenshots on its Telegram channel claiming it had access to a number of Okta systems.The company said it had "detected an attempt to compromise the account of a third party customer support engineer working for one of our subprocessors" in January, but h
kutakutatriangle 2022/03/23
Authentication

Authorization

Security

techfeed
ãƒªãƒ³ã‚¯
IAM Vulnerable - Use Terraform To Create Your Own Vulnerable By Design AWS IAM Privilege Escalation Playground
kutakutatriangle 2021/12/05
Authentication

Authorization

techfeed
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸