boto3ã¨1Passwordを使ã£ã¦ã€AWSã®MFAèªè¨¼ã¨ã‚¹ã‚¤ãƒƒãƒãƒãƒ¼ãƒ«ã‚’自動化ã—ã¦ã¿ãŸï¼ | DevelopersIOã“ã‚“ã«ã¡ã¯ï¼ä»Šå›žã¯ã€AWSã®MFA（Multi-Factor Authentication）èªè¨¼ã‚’使ã„ã€IAMãƒãƒ¼ãƒ«ã«ã‚¹ã‚¤ãƒƒãƒã—ãªãŒã‚‰S3ãƒã‚±ãƒƒãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹Pythonスクリプトを紹介ã—ã¾ã™ã€‚ã“ã®ã‚¹ã‚¯ãƒªãƒ—トã¯ã€AWSã®ã‚»ã‚ュリティベストプラクティスã«å¾“ã„ã€MFAを使用ã—ã¦ä¸€æ™‚çš„ãªã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’å–å¾—ã—ã€S3ãƒã‚±ãƒƒãƒˆã®ãƒªã‚¹ãƒˆã‚’å–å¾—ã™ã‚‹æ–¹æ³•ã‚’示ã—ã¦ã„ã¾ã™ã€‚ ã•ã‚‰ã«ã€1Passwordを活用ã—ã¦ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ パスワード（OTP）を自動的ã«å–å¾—ã™ã‚‹ä»•çµ„ã¿ã‚‚組ã¿è¾¼ã‚“ã§ã„ã‚‹ãŸã‚ã€éžå¸¸ã«ä¾¿åˆ©ã§å®‰å…¨ãªã‚¢ã‚¯ã‚»ã‚¹ãŒå¯èƒ½ã§ã™ã€‚AWSã®ã‚»ã‚ュリティを強化ã—ãŸã„方やã€MFAèªè¨¼ã‚’自動化ã—ãŸã„æ–¹ã«å½¹ç«‹ã¤å†…容ã«ãªã£ã¦ã„ã¾ã™ã€‚ 背景 AWSã§ã¯ã€ã‚»ã‚ュリティを強化ã™ã‚‹ãŸã‚ã«MFAを使用ã™ã‚‹ã“ã¨ãŒæŽ¨å¥¨ã•ã‚Œã¦ã„ã¾ã™ã€‚MFAを使用ã™ã‚‹ã¨ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯é€šå¸¸ã®èªè¨¼æƒ…å ±ï¼ˆã‚¢ã‚¯ã‚»ã‚¹ã‚ーやシークレットã‚ー）ã«åŠ ãˆã¦ã€ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ パスワード（OT
AWS::IAM::Role - AWS CloudFormation
https://policysim.aws.amazon.com/home/index.jsp?
Testing IAM policies with the IAM policy simulator - AWS Identity and Access Management
IAM database authentication for MariaDB, MySQL, and PostgreSQL - Amazon Relational Database Service
AWS CLIã‹ã‚‰CloudFormation ã§ãƒ¦ãƒ¼ã‚¶ã¨ãƒãƒ¼ãƒ«ã‚’作æˆã—ã¦ã€æµã‚Œã‚‹ã‚ˆã†ã«ã‚¹ã‚¤ãƒƒãƒãƒãƒ¼ãƒ«ã®ç¢ºèªã‚’ã—ã¦ã¿ãŸ | DevelopersIO
最低é™ã®ã‚¬ãƒ¼ãƒ‰ãƒ¬ãƒ¼ãƒ«ã‚’考慮ã—ãŸã‚·ãƒ³ãƒ—ル㪠IAM è¨è¨ˆã‚’ CloudFormation ã§ãƒ‡ãƒ—ãƒã‚¤ã™ã‚‹ | DevelopersIO
å‚照専用ã®æ¨©é™ã‚’æŒã¤IAMユーザã®ä½œæˆ | DevelopersIO
IAM Policy ViewOnlyAccessã¨ReadOnlyAccessã®é•ã„ | DevelopersIO
Grant a user permissions to switch roles - AWS Identity and Access Management
Switch from a user to an IAM role (console) - AWS Identity and Access Management
AWS IAMポリシーをç†è§£ã™ã‚‹ | DevelopersIO
Macã‹ã‚‰AWSã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ™‚ã¯AssumeRoleã™ã‚‹ã“ã¨ã«ã—㟠- Qiita
åˆã‚ã¦ã®AssumeRole | DevelopersIO
Amazon EC2 ã® IAM ãƒãƒ¼ãƒ« - Amazon Elastic Compute Cloud
{{#tags}}- {{label}}
{{/tags}}