NW JAWSでの発表資料です。

1. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
2019.09.17
NW-JAWS #5

2. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
2

3. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•

4. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•

5. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Amazon VPC フローログにメタデータを追加
2019/09/11
AWS Global Accelerator で Application Load Balancer エンドポイントを対象にしたクライアント IP アドレス保存のサポートを開始
2019/08/28
Amazon Route 53 がパブリックホストゾーンにクエリボリュームのメトリクスを発行
2019/08/28
AWS サイト間 VPN で証明書による認証のサポートを開始
2019/08/16
Amazon CloudFront で、リソースレベルおよびタグベースのアクセス許可のサポートを発表
2019/08/01
新しい AWS 中東 (バーレーン) リージョンを発表
2019/07/30
AWS Direct Connect でリソースベースの認可、タグベースの認可、リソース作成時のタグ付けをサポート
2019/07/17
Network Load Balancer が UDP プロトコルのサポートを開始
2019/06/24
Amazon CloudFront コンソールでの Lambda@Edge モニタリング機能拡張の発表
2019/06/20
Network Load Balancer がアジアパシフィック (大阪) リージョンで利用可能に
2019/06/12
AWS Client VPN がアジアパシフィック (ムンバイ) と アジアパシフィック (東京) の 各AWS リージョンで利用可能に
2019/05/20
AWS Transfer for SFTP が AWS PrivateLink をサポート開始
2019/03/27
Direct Connect ゲートウェイのマルチアカウントサポートを発表
2019/03/26
AWS PrivateLink が VPC ピアリングを経由したアクセスをサポート開始
2019/03/07
AWS Direct Connect の新しいコンソールを発表
2019/03/07
AWS サイト間 VPN が IKEv2 に対応
2019/02/06

6. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•

7. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

8. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
6/29
4/24
AWS
https://aws.amazon.com/jp/blogs/security/setting-
permissions-to-enable-accounts-for-upcoming-aws-regions/

9. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://aws.amazon.com/jp/message/56489/

10. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

11. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
EC2インスタンスのENIからネットワークトラフィックをミラーリングする機能
(2019 6 25 VPC )
https://aws.amazon.com/jp/about-aws/whats-new/2019/06/announcing-amazon-vpc-traffic-mirroring-for-amazon-ec2-instances/
EC2
インスタンス
(Nitroベース)
ネットワーク
トラフィック(IN/OUT)
[VPC Traffic Mirror機能のユースケース]
1. 脅威検出(フォレンジック)
2. コンテンツモニタリング
3. 問題判別
• VPCフローログには含まれない、
パケット内容の取得が可能
このネットワークトラフィック
をコピー(ミラー)し、VXLANで
カプセル化して宛先に送信

12. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

13. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

14. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://aws.amazon.com/jp/blogs/news/
new-tls-termination-for-network-load-
balancers/

15. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://aws.amazon.com/jp/blogs/news/new-
udp-load-balancing-for-network-load-balancer/

16. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•
•
•
•
•

17. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

18. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

19. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
AWS Direct Connect AWS Direct Connect
Link Aggregation Group Direct Connect
AWS 1

20. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
Payer Organization

21. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
tgw-rtb-a
On-Premise
Direct
Connect
Gateway
10.99.99.0/24 via BGP
Direct Connect
Direct Connect Gateway
(Transit VIF)

22. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

23. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

24. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
IKEv2

25. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://aws.amazon.com/jp/about-aws/whats-new/2019/08/aws-site-to-site-
vpn-adds-configurability-security-algorithms-timer-settings-used-for-vpn-
tunnels/?nc1=h_ls

26. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
https://aws.amazon.com/jp/about-aws/whats-new/2019/08/aws-site-to-
site-vpn-now-supports-certificate-authentication/

27. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

28. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.
•
•

29. © 2019, Amazon Web Services, Inc. or its Affiliates. All rights reserved.