セキュリティ系アップデート全体像と AWS Organizations 新ポリシー「宣言型ポリシー」を紹介 #AWSreInvent #regrowth_osaka

2024/12/11 に開催された AWS re:Invent ふりかえり勉強会「クラスメソッド re:Growth 2024 大阪」 にて「セキュリティ系アップデート全体像とAWS Organizationsに登場した新ポリシーを紹介」 というタイトルで発表しました。

来ていただいたみなさま、ありがとうございます！

発表で用いたスライドを本ブログにて共有します。

スライド

参考情報

セキュリティ系アップデート全体像

• 識別で役立つAWSサービスのアップデート
  • Introducing the Amazon Security Lake Ready Specialization - AWS
  • Amazon OpenSearch Service zero-ETL integration with Amazon Security Lake - AWS
  • Find security, compliance, and operating metrics in AWS Resource Explorer - AWS
  • AWS CloudTrail Lake launches enhanced analytics and cross-account data access - AWS
  • AWS CloudTrail Lake enhances log analysis with AI-powered features - AWS
  • The new AWS Systems Manager experience: Simplifying node management - AWS
  • Customize scope of IAM Access Analyzer unused access analysis - AWS
• 防御で役立つAWSサービスのアップデート
  • Centrally manage root access in AWS Identity and Access Management (IAM) - AWS
  • Amazon Web Services announces declarative policies - AWS
  • Introducing resource control policies (RCPs) to centrally restrict access to AWS resources - AWS
  • AWS Control Tower launches managed controls using declarative policies - AWS
  • AWS Control Tower launches configurable managed controls implemented using resource control policies - AWS
  • AWS Control Tower adds prescriptive backup plans to landing zone capabilities - AWS
  • AWS announces Block Public Access for Amazon Virtual Private Cloud - AWS
  • Amazon CloudFront announces VPC origins - AWS
  • AWS Network Firewall expands the list of supported protocols and keywords in firewall rules - AWS
  • AWS Verified Access now supports secure access to resources over non-HTTP(S) protocols (Preview) - AWS
• 検知/対応で役立つAWSサービスのアップデート
  • AWS announces AWS Security Incident Response for general availability - AWS
  • Respond and recovery more quickly with AWS Security Incident Response Partners - AWS
  • Amazon GuardDuty introduces GuardDuty Extended Threat Detection - AWS

AWS Organizations 宣言型ポリシー

• Simplify governance with declarative policies | AWS News Blog
• [アップデート] AWS Organizations で宣言型ポリシー(declarative policies) が利用可能になりました #AWSreInvent | DevelopersIO
• 【アップデート】新たに発表されたdeclarative policies（宣言型ポリシー）をためしてみた #AWSreInvent | DevelopersIO
• 宣言的？ Declarative?どういうこと？ #declarative @Hiroyuki_OSAKI - Qiita