{"title":"IAM\u30e6\u30fc\u30b6\u306bMFA\u8a2d\u5b9a\u3092\u5f37\u5236\u3059\u308b\u306b\u3042\u305f\u308aiam:ListUsers\u304c\u5fc5\u9808\u3067\u306f\u7121\u304f\u306a\u3063\u305f\u8a71","provider_url":"https://hatena.blog","author_name":"swx-satake","height":"190","provider_name":"Hatena Blog","width":"100%","categories":["AWS","\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3"],"html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fblog.serverworks.co.jp%2Ftech%2F2019%2F04%2F02%2Fmysecuritycredentials%2F\" title=\"IAM\u30e6\u30fc\u30b6\u306bMFA\u8a2d\u5b9a\u3092\u5f37\u5236\u3059\u308b\u306b\u3042\u305f\u308aiam:ListUsers\u304c\u5fc5\u9808\u3067\u306f\u7121\u304f\u306a\u3063\u305f\u8a71 - \u30b5\u30fc\u30d0\u30fc\u30ef\u30fc\u30af\u30b9\u30a8\u30f3\u30b8\u30cb\u30a2\u30d6\u30ed\u30b0\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","url":"https://blog.serverworks.co.jp/tech/2019/04/02/mysecuritycredentials/","published":"2019-04-02 19:04:30","description":"CS\u8ab2\u4f50\u7af9\u3067\u3059\u3002 \u306f\u3058\u3081\u306b \u4eee\u60f3 MFA \u30c7\u30d0\u30a4\u30b9\u3001U2F\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30ad\u30fc 2019\u5e741\u6708\u307e\u3067\u306eMFA\u5f37\u5236 IAM Policy \u306e\u30d9\u30b9\u30c8\u30d7\u30e9\u30af\u30c6\u30a3\u30b9 \"iam:ListUsers\"\u304c\u554f\u984c\u306b\u306a\u308b\u30b7\u30fc\u30f3 \u5b9f\u969b\u306e\u8a2d\u5b9a\u753b\u9762\u3092\u78ba\u8a8d\u3059\u308b \u73fe\u5728\u306eMFA\u5f37\u5236 IAM Policy \u306e\u30d9\u30b9\u30c8\u30d7\u30e9\u30af\u30c6\u30a3\u30b9 \u65b0\u3057\u304f\u5897\u3048\u305f My Security Credentials (\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8a8d\u8a3c\u60c5\u5831) \u30da\u30fc\u30b8 \u5b9f\u969b\u306e\u8a2d\u5b9a\u753b\u9762\u3092\u78ba\u8a8d\u3059\u308b DenyAllExceptListedIfNoMFA \u306b iam:DeleteVirtualMFADevice \u304c\u5fc5\u8981\u306a\u7406\u7531 DenyAllExceptListedIfNoMFA \u306b\u8ffd\u52a0\u3057\u2026","blog_url":"https://blog.serverworks.co.jp/","image_url":"https://cdn-ak.f.st-hatena.com/images/fotolife/s/serverworks/20200711/20200711230659.png","version":"1.0","blog_title":"\u30b5\u30fc\u30d0\u30fc\u30ef\u30fc\u30af\u30b9\u30a8\u30f3\u30b8\u30cb\u30a2\u30d6\u30ed\u30b0","author_url":"https://blog.hatena.ne.jp/swx-satake/","type":"rich"}