{"categories":["AWS re:Invent 2020"],"blog_title":"\u30b5\u30fc\u30d0\u30fc\u30ef\u30fc\u30af\u30b9\u30a8\u30f3\u30b8\u30cb\u30a2\u30d6\u30ed\u30b0","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/s/serverworks/20201130/20201130092825.png","height":"190","author_name":"swx-takahiro-yamada","provider_name":"Hatena Blog","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fblog.serverworks.co.jp%2Freinvent2020-securing-my-aws-account\" title=\"\u3010\u30bb\u30c3\u30b7\u30e7\u30f3\u30ec\u30dd\u30fc\u30c8\u3011AWS\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u3064\u3044\u3066\u77e5\u3063\u3066\u304a\u304d\u305f\u304415\u306e\u3053\u3068\uff08\u539f\u984c\uff1a15 things I wish I knew about securing my AWS account\uff09 - \u30b5\u30fc\u30d0\u30fc\u30ef\u30fc\u30af\u30b9\u30a8\u30f3\u30b8\u30cb\u30a2\u30d6\u30ed\u30b0\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","version":"1.0","width":"100%","title":"\u3010\u30bb\u30c3\u30b7\u30e7\u30f3\u30ec\u30dd\u30fc\u30c8\u3011AWS\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u3064\u3044\u3066\u77e5\u3063\u3066\u304a\u304d\u305f\u304415\u306e\u3053\u3068\uff08\u539f\u984c\uff1a15 things I wish I knew about securing my AWS account\uff09","published":"2020-12-09 19:25:50","blog_url":"https://blog.serverworks.co.jp/","type":"rich","url":"https://blog.serverworks.co.jp/reinvent2020-securing-my-aws-account","provider_url":"https://hatena.blog","description":"\u306f\u3058\u3081\u306b \u30bb\u30c3\u30b7\u30e7\u30f3\u6982\u8981 1. Enforcing MFA with YubiKeys and an AWS Config Rule 3. beyond 90 days with CloudTrail 5. Exploring access with CloudTrail and Amazon Athena 8. Ditch key pairs in favor of AWS Systems Manager Session Manager 9. Principl of least privilege via IAM Policies 12. Clearing an account with a\u2026","author_url":"https://blog.hatena.ne.jp/swx-takahiro-yamada/"}