SSRF対ç–ã¨ã—ã¦Amazonã‹ã‚‰ç™ºè¡¨ã•ã‚ŒãŸIMDSv2ã®åŠ¹æžœã¨é™ç•Œã‚µãƒžãƒª Capital Oneã‹ã‚‰ã®SSRF攻撃ã«ã‚ˆã‚‹å¤§è¦æ¨¡ãªæƒ…å ±æ¼ãˆã„ç‰ã‚’ã†ã‘ã¦ã€Amazonã¯ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã«å¯¾ã™ã‚‹ä¿è·ç–ã¨ã—ã¦Instance Metadata Service (IMDSv2) を発表ã—ãŸã€‚本稿ã§ã¯ã€IMDSv2ãŒç”Ÿã¾ã‚ŒãŸèƒŒæ™¯ã€ä½¿ã„æ–¹ã€åŠ¹æžœã€é™ç•Œã‚’説明ã—ãŸä¸Šã§ã€SSRF対ç–ã«ãŠã‘ã‚‹IMDSv2ã®ä½ç½®ã¥ã‘ã«ã¤ã„ã¦èª¬æ˜Žã™ã‚‹ã€‚ SSRFã¨ã¯ SSRFã¯ã€ä¸‹å›³ã®ã‚ˆã†ã«ã€Œå¤–部ã‹ã‚‰ç›´æŽ¥ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„エンドãƒã‚¤ãƒ³ãƒˆã€ã«å¯¾ã—ã¦ã€å…¬é–‹ã‚µãƒ¼ãƒãƒ¼ãªã©ã‚’è¸ã¿å°ã¨ã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ”»æ’ƒæ–¹æ³•ã§ã™ã€‚SSRF(Server Side Request Forgery)ã®è©³ç´°ã«ã¤ã„ã¦ã¯éŽåŽ»è¨˜äº‹ã€ŒSSRF(Server Side Request Forgery)徹底入門ã€ã‚’å‚ç…§ãã ã•ã„。 最終的ãªæ”»æ’ƒç›®æ¨™ã¯å¤šæ§˜ã§ã™ãŒã€è¿‘å¹´å•é¡Œã«ãªã£ã¦ã„ã‚‹ã®ãŒã€ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“スã®ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ãƒ»ãƒ¡ã‚¿ãƒ‡ãƒ¼ã‚¿ã‚’å–å¾—ã™ã‚‹
EC2 インスタンスメタデータサービスã®æ‹¡å¼µã«ã‚ˆã‚Šã€ã‚ªãƒ¼ãƒ—ンãªãƒ•ã‚¡ã‚¤ã‚¢ã‚¦ã‚©ãƒ¼ãƒ«ã€ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã€SSRFã®è„†å¼±æ€§ã«å¯¾ã™ã‚‹é˜²å¾¡ã‚’強化ã—ã¾ã—㟠| Amazon Web Services
[待望ã®ã‚¢ãƒ—デ]EC2インスタンスメタデータサービスv2ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦SSRF脆弱性ç‰ã¸ã®æ”»æ’ƒã«å¯¾ã™ã‚‹ã‚»ã‚ュリティãŒå¼·åŒ–ã•ã‚Œã¾ã—ãŸï¼ | DevelopersIO![[待望ã®ã‚¢ãƒ—デ]EC2インスタンスメタデータサービスv2ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦SSRF脆弱性ç‰ã¸ã®æ”»æ’ƒã«å¯¾ã™ã‚‹ã‚»ã‚ュリティãŒå¼·åŒ–ã•ã‚Œã¾ã—ãŸï¼ | DevelopersIO](https://cdn-ak-scissors.b.st-hatena.com/image/square/e03678dab7b09cb34c564b7250c4c7eac8677103/height=288;version=1;width=512/https%3A%2F%2Fdevio2023-media.developers.io%2Fwp-content%2Fuploads%2F2019%2F05%2Famazon-ec2.png)
é¢ç™½æ³•äººã‚«ãƒ¤ãƒƒã‚¯ã«ãŠã‘るビルディングブãƒãƒƒã‚¯ã¨ã—ã¦ã®Amazon ECSã®æ´»ç”¨ã¨ã‚µãƒ¼ãƒ“ス間連æºã®å·¥å¤« | Amazon Web Services
使用ã•ã‚Œã¦ã„ãªã„Amazon EBSボリュームを削除ã—ã¦AWSã®ã‚³ã‚¹ãƒˆã‚’コントãƒãƒ¼ãƒ«ã™ã‚‹ | Amazon Web Services
Cross-Account Cross-Region Dashboards with Amazon CloudWatch | Amazon Web Services
How to Use Cross-Account ECR Images in AWS CodeBuild for Your Build Environment | Amazon Web Services
Cloud Native Computing Foundation announces CoreDNS graduation
マイクãƒã‚µãƒ¼ãƒ“スアーã‚テクãƒãƒ£ã¨ãれを支ãˆã‚‹æŠ€è¡“ | ã•ãらã®ãƒŠãƒ¬ãƒƒã‚¸
マイクãƒã‚µãƒ¼ãƒ“スアーã‚テクãƒãƒ£å‘ã‘ã«ã‚µãƒ¼ãƒ“スメッシュをæä¾›ã™ã‚‹ã€ŒIstioã€ã®æ¦‚è¦ã¨ç’°å¢ƒæ§‹ç¯‰ã€ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°è¨å®š | ã•ãらã®ãƒŠãƒ¬ãƒƒã‚¸
New – TLS Termination for Network Load Balancers | Amazon Web Services
é™çš„ãªIPアドレスをæŒã¤NLBãŒTLS Terminationã«å¯¾å¿œã—ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒã‚°ã‚‚出力å¯èƒ½ã«ï¼ | DevelopersIO
注æ„! 2019å¹´2月ã‹ã‚‰ä¸»è¦DNSサーãƒã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®æŒ™å‹•ãŒå¤‰ã‚ã‚Šã¾ã™ – JPNIC Blog
HashiCorptãŒConsulサービスメッシュã®Kubernetesçµ±åˆã‚’改善
ã€æ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã€‘Amazon Connectã§ã‚³ãƒ³ã‚¿ã‚¯ãƒˆã‚»ãƒ³ã‚¿ãƒ¼æ§‹ç¯‰ã¯ã˜ã‚ã®ä¸€æ© | DevelopersIO
Provision AWS Services Through Kubernetes Using the AWS Service Broker | Amazon Web Services
AWS Service Operator for Kubernetes Now Available 🚀 | AWS Open Source Blog
Amazon ECS Task Placement | Amazon Web Services
https://jp.techcrunch.com/2018/12/28/2018-12-26-the-10-largest-us-venture-rounds-of-2018/
イベントレãƒãƒ¼ãƒˆ: Leanã¨DevOpsã®ç§‘å¦[Accelerate] 出版記念イベント #devops - ã‚¯ãƒªã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ãƒ©ã‚¤ãƒ³æ ªå¼ä¼šç¤¾![イベントレãƒãƒ¼ãƒˆ: Leanã¨DevOpsã®ç§‘å¦[Accelerate] 出版記念イベント #devops - ã‚¯ãƒªã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ãƒ©ã‚¤ãƒ³æ ªå¼ä¼šç¤¾](https://cdn-ak-scissors.b.st-hatena.com/image/square/269ca05ba45433a53edaae3916ce2d43e674bbdd/height=288;version=1;width=512/https%3A%2F%2Fwww.creationline.com%2Ftech-blog%2Fcms_x3GWkuX%2Fwp-content%2Fuploads%2F2018%2F12%2FIMG_1344-1.jpg)
{{#tags}}- {{label}}
{{/tags}}