AWS WAF
äžè¬çãªæ»æãããŠã§ãã¢ããªã±ãŒã·ã§ã³ãä¿è·
AWS WAF ã®å©ç¹
-
ãããŒãžãã«ãŒã«ã§æéãç¯çŽããã¢ããªã±ãŒã·ã§ã³ã®æ§ç¯ã«ããå€ãã®æéãè²»ããããšãã§ããŸãã
-
äžè¬çã§èå»¶ããŠããããããããç°¡åã«ã¢ãã¿ãªã³ã°ããããã¯ããŸãã¯ã¬ãŒãå¶éããŸãã
ã»ãã¥ãªãã£ãããã€èšå®ã®è€éããšã¹ããããæå€§ 80% åæžããçµ±åã€ã³ã¿ãŒãã§ã€ã¹ã䜿çšããŠãè€éãªã»ãã¥ãªãã£èšå®ãè¿ éåã§ããŸãã
åäžã®å
æ¬çãªã€ã³ã¿ãŒãã§ã€ã¹ã¯ãã³ã¢ã»ãã¥ãªãã£æ©èœãšå°éçãªããŒãããŒä¿è·ãçµã¿åãããŠãã»ãã¥ãªãã£ã®å¯èŠæ§ãšã³ã³ãããŒã«ã匷åããŸãããã®çµ±åã¢ãããŒãã«ãããã»ãã¥ãªãã£ããŒã¿ãå®çšçãªã€ã³ãµã€ãã«å€æãããéçšäžã®ããªã¯ã·ã§ã³ãæé€ããããªã¹ã¯å¯Ÿå¿ãè¿
éåãããŸãã
äºåèšå®æžã¿ã®ä¿è·ããã¯ã¯ãAWS ã®ã»ãã¥ãªãã£ã«é¢ããå°éç¥èãæŽ»çšããŠãAPIãPHP ã¢ããªã±ãŒã·ã§ã³ããŠã§ããµãŒãã¹ãªã©ã®ç¹å®ã®æ¥çãã¯ãŒã¯ããŒãã¿ã€ãåãã®ä¿è·ãã³ãã¬ãŒããå³åº§ã«æäŸããŸãããããã®ãã³ãã¬ãŒãã¯ç¶ç¶çã«æé©åãããŠããããããããã€ã«é¢ããæ·±ãå°éç¥èãå¿ èŠãšããã«ãææ°ã®ã»ãã¥ãªãã£ãå®çŸã§ããŸããã»ãã¥ãªãã£ã«é¢ããã¬ã³ã¡ã³ããŒã·ã§ã³ãç¶ç¶çã«å ¥æããã»ãã¥ãªãã£äœå¶å šäœã匷åããŸãããã
AWS WAF ã䜿çšãã¹ãçç±
AWS WAF ã§ã¯ãããããã©ãã£ãã¯ãå¶åŸ¡ããã»ãã¥ãªãã£ã«ãŒã«ãäœæããSQL ã€ã³ãžã§ã¯ã·ã§ã³ãã¯ãã¹ãµã€ãã¹ã¯ãªããã£ã³ã° (XSS) ãªã©ã®äžè¬çãªæ»æãã¿ãŒã³ããããã¯ããããšãã§ããŸãã
ãŠãŒã¹ã±ãŒã¹
IP ã¢ãã¬ã¹ãHTTP ããããŒã𿬿ããŸãã¯ã«ã¹ã¿ã URI ãªã©ã®æ¡ä»¶ã«åºã¥ããŠãŠã§ããªã¯ãšã¹ãããã£ã«ã¿ãªã³ã°ããã«ãŒã«ãäœæããŸãã
ã¢ããªã±ãŒã·ã§ã³ã®ãã°ã€ã³ããŒãžãã¢ãã¿ãªã³ã°ããŠã䟵害ãããèªèšŒæ å ±ã䜿çšãããŠãŒã¶ãŒã¢ã«ãŠã³ããžã®äžæ£ã¢ã¯ã»ã¹ããªãããã¢ãã¿ãªã³ã°ããŸãã
ã¢ããªã±ãŒã·ã§ã³å±€ (第 7 å±€) ã®åæ£åãµãŒãã¹æåŠ (DDoS) ã€ãã³ããç¶ç¶çã«ã¢ãã¿ãªã³ã°ããæ°ç§ä»¥å
ã«èªåçã«è»œæžããããã«èšèšãããŠããŸãã
ããŒãºã«åãããŠäºåèšå®ãããã»ãã¥ãªãã£ããã©ã«ãã 1 ç»é¢ã®ã€ã³ã¿ãŒãã§ã€ã¹ã§ã¢ã¯ãã£ãåã§ãããåçåãããã¬ã€ãä»ããªã³ããŒãã£ã³ã°èšå®ã䜿çšããŠãèªä¿¡ããã£ãŠæ°ããã¢ããªã±ãŒã·ã§ã³ãèµ·åã§ããŸãã
ãšãã¹ããŒããå³éžããã«ãŒã«ããã¯ãçµ±åãããå¯èŠæ§ãç¶ç¶çãªã¬ã³ã¡ã³ããŒã·ã§ã³ãéããŠãã»ãã¥ãªãã£äœå¶ãæé©åããããã®å³æã®ä¿è·ãåŸãããšãã§ããŸãã