{"id":23118,"date":"2022-12-12T18:25:37","date_gmt":"2022-12-12T09:25:37","guid":{"rendered":"https:\/\/www.skyarch.net\/blog\/?p=23118"},"modified":"2022-12-12T18:25:37","modified_gmt":"2022-12-12T09:25:37","slug":"amazon-cloudwatch-logs%e3%81%ae%e6%a9%9f%e5%af%86%e3%83%87%e3%83%bc%e3%82%bf%e4%bf%9d%e8%ad%b7%e6%a9%9f%e8%83%bd%e3%82%92%e8%a9%a6%e3%81%99","status":"publish","type":"post","link":"https:\/\/www.skyarch.net\/blog\/amazon-cloudwatch-logs%e3%81%ae%e6%a9%9f%e5%af%86%e3%83%87%e3%83%bc%e3%82%bf%e4%bf%9d%e8%ad%b7%e6%a9%9f%e8%83%bd%e3%82%92%e8%a9%a6%e3%81%99\/","title":{"rendered":"Amazon CloudWatch Logs\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u4fdd\u8b77\u6a5f\u80fd\u3092\u8a66\u3059"},"content":{"rendered":"<h2>\u306f\u3058\u3081\u306b<\/h2>\n<p>re:Invent 2022\u306b\u3066\u767a\u8868\u3055\u308c\u305f\u3001Amazon CloudWatch Logs\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u4fdd\u8b77\u6a5f\u80fd\u3092\u8a66\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n<ul>\n<li>Protect Sensitive Data with Amazon CloudWatch Logs<br \/>\n<a href=\"https:\/\/aws.amazon.com\/jp\/blogs\/aws\/protect-sensitive-data-with-amazon-cloudwatch-logs\/\">https:\/\/aws.amazon.com\/jp\/blogs\/aws\/protect-sensitive-data-with-amazon-cloudwatch-logs\/<\/a><br \/>\n\u3053\u3061\u3089\u3092\u53c2\u8003\u306b\u5b9f\u65bd\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/li>\n<\/ul>\n<h2>\u76ee\u6b21<\/h2>\n<ul>\n<li><a href=\"#overview\">\u624b\u9806\u306e\u6982\u8981<\/a><\/li>\n<li><a href=\"#tejun\">\u624b\u9806<\/a><\/li>\n<li><a href=\"#matome\">\u307e\u3068\u3081<\/a><\/li>\n<\/ul>\n<h2 id=\"overview\">\u624b\u9806\u306e\u6982\u8981<\/h2>\n<ol>\n<li>\u30ed\u30ae\u30f3\u30b0\u30c6\u30b9\u30c8\u7528Lambda\u3092\u4f5c\u6210\u3059\u308b<\/li>\n<li>\u6a5f\u5bc6\u30c7\u30fc\u30bf\uff08\u306e\u3088\u3046\u306a\u30b5\u30f3\u30d7\u30eb\u30c7\u30fc\u30bf\uff09\u3092\u30ed\u30ae\u30f3\u30b0\u3059\u308b<\/li>\n<li>CloudWatch\u3000Logs\u3067\u5bfe\u8c61\u306e\u30ed\u30b0\u30b0\u30eb\u30fc\u30d7\u306bData protection policy\u3092\u8a2d\u5b9a<\/li>\n<li>\u518d\u5ea6 \u624b\u98062\u3092\u5b9f\u884c<\/li>\n<li>\u30de\u30b9\u30af\u3055\u308c\u308b\u4e8b\u3092\u78ba\u8a8d\u3059\u308b<\/li>\n<\/ol>\n<h2 id=\"tejun\">\u624b\u9806<\/h2>\n<h3>1. \u30ed\u30ae\u30f3\u30b0\u30c6\u30b9\u30c8\u7528Lambda\u3092\u4f5c\u6210\u3059\u308b<\/h3>\n<p>\u76f4\u63a5\u30ed\u30b0\u30b0\u30eb\u30fc\u30d7\u306b\u6587\u5b57\u5217\u767a\u884c\u304c\u9762\u5012\u306a\u306e\u3067\u30ed\u30ae\u30f3\u30b0\u3059\u308b\u3060\u3051\u306eLambda\u95a2\u6570\u3092\u4f5c\u6210\u3057\u307e\u3057\u305f\u3002<\/p>\n<h3>2. \u6a5f\u5fae\u306a\u30c7\u30fc\u30bf\uff08\u306e\u3088\u3046\u306a\u30b5\u30f3\u30d7\u30eb\u30c7\u30fc\u30bf\uff09\u3092\u30ed\u30ae\u30f3\u30b0\u3059\u308b<\/h3>\n<p>\u30b5\u30f3\u30d7\u30eb\u30c7\u30fc\u30bf\u3068\u3057\u3066\u4e0b\u8a18\u3092\u30ed\u30ae\u30f3\u30b0\u3057\u3066\u307f\u307e\u3057\u305f\u3002(JSON)<\/p>\n<pre class=\"brush: python; title: ; notranslate\" title=\"\">\r\ntransaction_log = {\r\n    &quot;IP&quot;: &quot;8.8.8.8&quot;,\r\n    &quot;user&quot;: &quot;kouzu@skyarch.net&quot;,\r\n    &quot;card_holder_name&quot;: &quot;KOUZU TEST&quot;,\r\n    &quot;card_number&quot;: &quot;4111111111111111&quot;\r\n}\r\nlogger.info(transaction_log)\r\n<\/pre>\n<h3>3. Data protection policy\u3092\u8a2d\u5b9a<\/h3>\n<p>\u591a\u304f\u306e\u9805\u76ee\u304c\u3042\u308a\u307e\u3059\u304c\u3001\u6b8b\u5ff5\u306a\u304c\u3089JP\u7cfb\u306f\u5c11\u306a\u305d\u3046\u3067\u3059\uff08\u4eca\u5f8c\u306b\u671f\u5f85\uff09<\/p>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/10.DataProtectionSettings-725x1024.png\" alt=\"\" width=\"725\" height=\"1024\" class=\"aligncenter size-large wp-image-23119\" srcset=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/10.DataProtectionSettings-725x1024.png 725w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/10.DataProtectionSettings-212x300.png 212w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/10.DataProtectionSettings-768x1085.png 768w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/10.DataProtectionSettings-1087x1536.png 1087w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/10.DataProtectionSettings-1449x2048.png 1449w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/10.DataProtectionSettings-728x1029.png 728w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/10.DataProtectionSettings.png 1472w\" sizes=\"auto, (max-width: 725px) 100vw, 725px\" \/>\n<p>\u53d6\u308a\u6025\u304eIPAddress\u3001\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9\u3001CreditCardNumber\u7b49\u3092\u8a2d\u5b9a\u3057\u3066\u307f\u307e\u3057\u305f\u3002<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/05.LogsSettings-1024x957.png\" alt=\"\" width=\"728\" height=\"680\" class=\"aligncenter size-large wp-image-23120\" srcset=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/05.LogsSettings-1024x957.png 1024w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/05.LogsSettings-300x280.png 300w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/05.LogsSettings-768x718.png 768w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/05.LogsSettings-1536x1435.png 1536w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/05.LogsSettings-728x680.png 728w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/05.LogsSettings.png 1768w\" sizes=\"auto, (max-width: 728px) 100vw, 728px\" \/><\/p>\n<h3>5. \u30de\u30b9\u30af\u3055\u308c\u308b\u4e8b\u3092\u78ba\u8a8d\u3059\u308b<\/h3>\n<p>\u518d\u5ea6\u624b\u98062\u3092\u5b9f\u884c\u3057\u30de\u30b9\u30af\u3055\u308c\u308b\u304b\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n<p>\u30de\u30b9\u30af\u3055\u308c\u307e\u3057\u305f\uff01\u304c\u30b5\u30f3\u30d7\u30eb\u30c7\u30fc\u30bf\u306e\u305f\u3081\u304b\u3001IP\u30a2\u30c9\u30ec\u30b9\u306e\u307f\u30de\u30b9\u30af\u3055\u308c\u307e\u3057\u305f<br \/>\nSensitive data found \u30ab\u30a6\u30f3\u30c8\u304c\u6b63\u5e38\u306b\u5897\u3048\u3066\u3044\u308b\u306e\u3067\u3001\u5206\u304b\u308a\u3084\u3059\u3044\u3067\u3059\u306d\u3002<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData-1024x572.png\" alt=\"\" width=\"728\" height=\"407\" class=\"aligncenter size-large wp-image-23126\" srcset=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData-1024x572.png 1024w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData-300x168.png 300w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData-768x429.png 768w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData-1536x858.png 1536w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData-728x407.png 728w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData.png 1830w\" sizes=\"auto, (max-width: 728px) 100vw, 728px\" \/><\/p>\n<p>LogsInsights\u306e\u691c\u7d22\u3067\u3082\u30de\u30b9\u30af\u3055\u308c\u3066\u3044\u308b\u4e8b\u3092\u78ba\u8a8d<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData_LogsInsights-714x1024.png\" alt=\"\" width=\"714\" height=\"1024\" class=\"aligncenter size-large wp-image-23125\" srcset=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData_LogsInsights-714x1024.png 714w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData_LogsInsights-209x300.png 209w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData_LogsInsights-768x1101.png 768w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData_LogsInsights-1072x1536.png 1072w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData_LogsInsights-1429x2048.png 1429w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData_LogsInsights-728x1044.png 728w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.MaskedData_LogsInsights.png 1684w\" sizes=\"auto, (max-width: 714px) 100vw, 714px\" \/><\/p>\n<h4>Mask\u3055\u308c\u305f\u90e8\u5206\u3092\u5fa9\u53f7\u3059\u308b<\/h4>\n<p>\u203b\u5927\u524d\u63d0\u3068\u3057\u3066\u3001\u30de\u30cd\u30b8\u30e1\u30f3\u30c8\u30b3\u30f3\u30bd\u30fc\u30eb\u64cd\u4f5c\u8005IAMPolicy\u306b <code>logs:Unmask<\/code> \u304c\u5fc5\u8981\u3067\u3059\u3002<\/p>\n<p>CloudWatch Logs\u3067\u306f\u3001Display\u30e1\u30cb\u30e5\u30fc\u306e[Temporary Unmask Protected Data]\u3067\u5fa9\u53f7\u3067\u304d\u307e\u3059<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_CloudWatchLogs-1024x632.png\" alt=\"\" width=\"728\" height=\"449\" class=\"aligncenter size-large wp-image-23127\" srcset=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_CloudWatchLogs-1024x632.png 1024w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_CloudWatchLogs-300x185.png 300w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_CloudWatchLogs-768x474.png 768w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_CloudWatchLogs-1536x947.png 1536w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_CloudWatchLogs-728x449.png 728w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_CloudWatchLogs.png 1858w\" sizes=\"auto, (max-width: 728px) 100vw, 728px\" \/><\/p>\n<p>CloudWatch Logs Insights\u3067\u306f\u3001\u5fa9\u53f7\u3057\u305f\u3044\u30c7\u30fc\u30bf\u306b unmask() \u3092\u4ed8\u3051\u308b\u4e8b\u3067\u3067\u304d\u307e\u3059<br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_LogsInsights-1024x982.png\" alt=\"\" width=\"728\" height=\"698\" class=\"aligncenter size-large wp-image-23128\" srcset=\"https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_LogsInsights-1024x982.png 1024w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_LogsInsights-300x288.png 300w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_LogsInsights-768x737.png 768w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_LogsInsights-1536x1473.png 1536w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_LogsInsights-728x698.png 728w, https:\/\/www.skyarch.net\/blog\/wp-content\/uploads\/2022\/12\/15.UnMaskedData_LogsInsights.png 1660w\" sizes=\"auto, (max-width: 728px) 100vw, 728px\" \/><\/p>\n<h2 id=\"matome\">\u307e\u3068\u3081<\/h2>\n<p>\u6a5f\u5bc6\u30c7\u30fc\u30bf\u3068\u5b9a\u7fa9\u3055\u308c\u308b\u66f8\u5f0f\u306b\u65e5\u672c\u30d5\u30a9\u30fc\u30de\u30c3\u30c8\u304c\u4eca\u5f8c\u5897\u3048\u3066\u304f\u308c\u3070\u3001\u5b09\u3057\u3044\u30b5\u30fc\u30d3\u30b9\u3068\u611f\u3058\u307e\u3057\u305f\u3002<\/p>\n<p>\u672c\u30b5\u30fc\u30d3\u30b9\u306b\u983c\u308a\u5207\u308b\u4e8b\u306a\u304f\u3001\u4e88\u3081\u6392\u9664\u304c\u5fc5\u8981\uff08\u30ed\u30ae\u30f3\u30b0\u3057\u306a\u3044\u30c7\u30fc\u30bf\uff09\u306f\u30ed\u30b8\u30c3\u30af\u3067\u6392\u9664\u3057\u3066\u304a\u304f\u3053\u3068\u304c\u5f53\u7136\u3067\u3059\u304c\u91cd\u8981\u306a\u4e00\u65b9\u3067\u3001\u6a5f\u5bc6\u30c7\u30fc\u30bf\u304c\u30ed\u30b0\u306b\u5165\u3063\u3066\u3057\u307e\u3063\u305f\u308a\u3057\u3066\u306a\u3044\u3088\u306d\u3068\u3044\u3046\u5ff5\u306e\u70ba\u78ba\u8a8d\u306b\u3082\u3042\u308b\u7a0b\u5ea6\u5229\u7528\u51fa\u6765\u308b\u30b5\u30fc\u30d3\u30b9\u3067\u306f\u306a\u3044\u304b\u3068\u601d\u3044\u307e\u3057\u305f\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u306f\u3058\u3081\u306b re:Invent 2022\u306b\u3066\u767a\u8868\u3055\u308c\u305f\u3001Amazon CloudWatch Logs\u306e\u6a5f\u5bc6\u30c7\u30fc\u30bf\u4fdd\u8b77\u6a5f\u80fd\u3092\u8a66\u3057\u3066\u307f\u307e\u3057\u305f\u3002 Protect Sensitive Data with Amazon CloudW&#8230;<\/p>\n","protected":false},"author":2,"featured_media":23129,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_locale":"ja","_original_post":"https:\/\/www.skyarch.net\/blog\/?p=23118","footnotes":""},"categories":[20,1188],"tags":[],"class_list":{"0":"post-23118","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-aws","8":"category-aws-reinvent-2022","9":"ja"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/posts\/23118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/comments?post=23118"}],"version-history":[{"count":5,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/posts\/23118\/revisions"}],"predecessor-version":[{"id":23140,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/posts\/23118\/revisions\/23140"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/media\/23129"}],"wp:attachment":[{"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/media?parent=23118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/categories?post=23118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyarch.net\/blog\/wp-json\/wp\/v2\/tags?post=23118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}