投稿時間:2022-01-13 19:40:21 RSSフィード2022-01-13 19:00 分まとめ(51件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
TECH	Engadget Japanese	BALMUDA Phone、1月14日に販売再開	https://japanese.engadget.com/balmuda-phone-094640956.html	balmudaphone	2022-01-13 09:46:40
TECH	Engadget Japanese	BALMUDA Phoneに緊急ソフト更新、『一部周波数で干渉ノイズが許容値を超える』問題に対処	https://japanese.engadget.com/balmuda-phone-093559497.html	balmudaphone	2022-01-13 09:35:59
TECH	Engadget Japanese	ヤマハ、オンでもオフでもイケる電動グラベルバイク「WABASH RT」を3月に発売	https://japanese.engadget.com/wabash-rt-093025620.html	crosscorerc	2022-01-13 09:30:25
ROBOT	ロボスタ	セコム AIを活用した「バーチャル警備システム」を発売開始 近づいた人には声がけ 緊急事態は監視用アプリに通報 顔認証システムや検温とも連携可能	https://robotstart.info/2022/01/13/secom-vr-security-system.html	発売開始	2022-01-13 09:50:59
IT	ITmedia 総合記事一覧	[ITmedia News] Amazonに「GPUガチャ」が出品　2％の確率でRX6000シリーズなどが当たる？	https://www.itmedia.co.jp/news/articles/2201/13/news183.html	amazoncojp	2022-01-13 18:51:00
IT	ITmedia 総合記事一覧	[ITmedia ビジネスオンライン] フレッシュネスバーガー、ポテト25％増量キャンペーンを実施　ポテト難民を救いたい	https://www.itmedia.co.jp/business/articles/2201/13/news182.html	ITmediaビジネスオンラインフレッシュネスバーガー、ポテト増量キャンペーンを実施ポテト難民を救いたいフレッシュネスは月日から、ハンバーガーチェーン「フレッシュネスバーガー」にてフライドポテト増量キャンペーンを期間限定で実施する。	2022-01-13 18:42:00
IT	ITmedia 総合記事一覧	[ITmedia ビジネスオンライン] JT、ピースのリトルシガー発売　過去3回が好評で“定番商品”に	https://www.itmedia.co.jp/business/articles/2201/13/news180.html	itmedia	2022-01-13 18:30:00
IT	ITmedia 総合記事一覧	[ITmedia Mobile] BALMUDA Phoneにソフトウェア更新　一部周波数帯における「干渉ノイズ」問題に対応	https://www.itmedia.co.jp/mobile/articles/2201/13/news181.html	balmudaphone	2022-01-13 18:30:00
IT	ITmedia 総合記事一覧	[ITmedia ビジネスオンライン] 世界デジタル政府ランキング　日本が9位に転落、なぜ？	https://www.itmedia.co.jp/business/articles/2201/13/news166.html	itmedia	2022-01-13 18:17:00
IT	ITmedia 総合記事一覧	[ITmedia ビジネスオンライン] 東京駅八重洲北口の改札外に、新施設「グランスタ八重北」がオープン	https://www.itmedia.co.jp/business/articles/2201/13/news175.html	itmedia	2022-01-13 18:12:00
IT	ITmedia 総合記事一覧	[ITmedia News] Firefoxの利用者から「突然ネットにつながらなくなった」報告が殺到　影響範囲は世界中か	https://www.itmedia.co.jp/news/articles/2201/13/news176.html	firefox	2022-01-13 18:07:00
js	JavaScriptタグが付けられた新着投稿 - Qiita	正多面体のデータを作る[改] (HTML+JavaScript版)	https://qiita.com/ikiuo/items/d7486f40f2378af15288	これは対となる正多面体の法線にもなります。	2022-01-13 18:32:51
Ruby	Railsタグが付けられた新着投稿 - Qiita	管理者権限もどき	https://qiita.com/Takahiro011202/items/afc86f1bff36b5eca145	前提この機能を実装するに当たって、deviseを使用したマイページ機能の実装はしてあるものとします。	2022-01-13 18:23:48
技術ブログ	Developers.IO	CloudFormation으로 Config Rule 구축해보기	https://dev.classmethod.jp/articles/cloudformation-aws-config-rule-create/	CloudFormation으로Config Rule 구축해보기소개안녕하세요 클래스메소드금상원입니다 이번블로그에서는CloudFormation으로Config Rule을구축하는방법에대한설명을하려고합니다 목표Config Rule를사용하	2022-01-13 09:21:37
海外TECH	DEV Community	Time to say goodbye to Webpack?	https://dev.to/gauravbehere/time-to-say-goodbye-to-webpack-2kn8	Time to say goodbye to Webpack Before we answer the big question lets look at why we are even considering it If you look at bestofJS data for you would see that the rising star in the build tools category is Vite leaving Webpack far behind in terms of popularity Check out more stats here JavaScript Rising Stars Lets have a closer look at ViteVite French word for quick pronounced vit like veet is a build tool that aims to provide a faster and leaner development experience for modern web projects Please note the emphasis on development Vite does not promise a multifold optimization or better production experience So don t expect your production build to be optimized or any drastic reduction in the bundle size you generate So what does Vite do to make the development experience better It consists of two major parts A dev server that provides rich feature enhancements over native ES modules for example extremely fast Hot Module Replacement HMR A build command that bundles your code with Rollup pre configured to output highly optimized static assets for production Vite is opinionated and comes with sensible defaults out of the box but is also highly extensible via its Plugin API and JavaScript API with full typing support It has been long since we have been writing JS code in a modular fashion specially since ES modules Since not a lot of browsers were handling loading ES modules natively we have the concept of bundling our code using tools that crawl process and concatenate our source modules into files that can run in the browser Tools like Webpack parcel amp rollup do the same job When you start a project the size amp number of JS modules may look like a smaller problem but as you write more code the project grows amp you see that starting a dev server takes a long time Since it has to transpile the code amp concatenate the code in a way that can be loaded in browsers The slow feedback loop can greatly affect developers productivity and happiness Vite aims to address these issues by leveraging new advancements in the ecosystem the availability of native ES modules in the browser and the rise of JavaScript tools written in compile to native languages Vite splits the bundles into two parts External dependencies Vendor code Dependencies are mostly plain JavaScript that do not change often during development Vite pre bundles dependencies using esbuild Esbuild pre bundles dependencies x faster than JavaScript based bundlers Your code ES modules Vite serves source code over native ESM This is essentially letting the browser take over part of the job of a bundler Vite only needs to transform and serve source code on demand as the browser requests it Here Vite assumes that while you are developing in your local machine you would have latest of browsers that support loading ES modules natively That essentially means no time spent on bundling your code before the server can start Awesome so why bundle for production Though most of the browsers now support loading ES modules natively if not all of your target audience is on latest browsers you still need bundling If you don t bundle you are going to make a lot of round trips on the network to fetch modules To get the optimal loading performance in production it is still better to bundle your code with tree shaking lazy loading and common chunk splitting for better caching Getting started with ViteWith minimal dev dependencies you can be off to a flying start devDependencies vitejs plugin react vite A very basic vite config jsimport defineConfig from vite import react from vitejs plugin react export default defineConfig plugins react Two simple commands to start a dev server amp make a production build vite amp vite build respectively Vite looks for an index html entry in the root directory from where you need to load the root index module of your code index html lt DOCTYPE html gt lt html gt lt head gt lt head gt lt body gt lt div id root gt lt div gt lt script type module src index jsx gt lt script gt lt body gt lt html gt index jsximport React from react import ReactDOM from react dom import App from src app ReactDOM render lt React StrictMode gt lt App gt lt React StrictMode gt document querySelector root src app jsximport React from react const App gt return lt gt lt div gt Hello There lt div gt lt div gt Time right now new Date toTimeString lt div gt lt gt export default App Without bundling the code server starts in a fraction of a secondIf you look at how the ES modules are loaded in the browser note that app jsx loaded as a native ES module Hot replacement of modules HMR Developers need to get an immediate feedback of changes made in the code You can t wait for full bundling to happen again amp reloading the page which breaks the current state amp flow This is why some bundlers support Hot Module Replacement HMR allowing a module to hot replace itself without affecting the rest of the page Again as the project grows HMR also takes a longer time which can be a productivity killer Vite takes an edge over other bundling tools by performing HMR over native ESM When a file is edited Vite only needs to precisely invalidate the chain between the edited module and its closest HMR boundary most of the time only the module itself making HMR updates consistently fast regardless of the size of your application Vite also takes advantage of HTTP headers to speed up full page reloads Source code module requests are made conditional via Not Modified and dependency module requests are strongly cached via Cache Control max age immutable so they don t hit the server again once cached RecapVite starts your dev server fast by skipping the bundling Vite make use of HTTP status codes for a faster reload amp caching Vite uses native ESM for hot module replacement Thus your changes reflect in your app faster Since Vite is a bit opinionated about the config with a minimal config you are good to go Server side renderingVite is also pre configured to handle your build as a universal app Vite can pre render the HTML pages so robot crawlers can fetch your page content without executing js Read more So should we just move to Vite amp stop using tools like Webpack Coming back to the question that we started with With all the benefits listed above it seems promising to move to Vite What gives you a lot of simpler APIs with a lot of abstraction with an opinion is often hard to configure Based on this principle if you use some very specific long tail configurations of Webpack it won t be a good idea to jump to Vite rightaway If you use Webpack with basic configurations you should move to Vite for a better developer experience If I am starting a new project it will be using Vite for sure Thank you for reading If you have moved a large scale project from Webpack to Vite do share your experience It will be great to learn from your experience	2022-01-13 09:50:25
海外TECH	DEV Community	What are the uses of JavaScript	https://dev.to/heyvik/what-are-the-uses-of-javascript-gk6	What are the uses of JavaScriptJavaScript is a lightweight object oriented programming language that is used to script webpages by a number of websites It s a full featured interpreted programming language When applied to an HTML document JavaScript allows for dynamic interactivity on websites JavaScript enables users to create modern web applications that allow users to engage without having to reload the page every time The DOM API frequently uses JavaScript to dynamically modify HTML and CSS to update a user interface It is primarily employed in web based applications Let s talk about how JavaScript is used The following image depicts some of the applications of JavaScript Make sure to Subscribe to my Newsletter Web DevelopmentJavaScript is a scripting language that is often used to create web pages It enables us to add dynamic behaviour to the homepage as well as special effects It is primarily used on websites for validation purposes JavaScript allows us to do complicated tasks and allows websites to communicate with users It is also feasible to load the content of a document without reloading the webpage using JavaScript Mobile ApplicationsMobile devices are widely utilized to access the internet nowadays We can also create an application for non web environments using JavaScript JavaScript s strengths and applications make it a powerful tool for developing mobile apps The React Native framework is a popular JavaScript framework for developing mobile apps We can create mobile applications for a variety of operating systems using React Native We don t need to write separate codes for the iOS and Android platforms It only needs to be written once and run on multiple platforms Making GamesJavaScript can also be used to make games It comes with a number of libraries and frameworks that can be used to make a game The game can be in two dimensions or three dimensions We can use JavaScript game engines like PhysicsJS and Pixi js to make a web game We can also utilize WebGL web graphics library a JavaScript API that allows us to render D and D pictures in browsers PresentationsWe can also use JavaScript to make website presentations RevealJs and BespokeJs are two libraries that may be used to create a web based slide presentation They are simpler to utilise allowing us to create something spectacular in a short amount of time With the use of HTML Reveal js is used to create dynamic and stunning slide decks These presentations perform well on tablets and mobile devices It also works with all CSS colour formats Animated bullet lists responsive scaling and a wide range of features are included in BespokeJS Server Applications A server side component is present in a vast number of web applications To generate content and process HTTP requests JavaScript is employed Node js allows JavaScript to execute on servers Node js provides a server side environment with all of the tools required for JavaScript to run There are many other uses of JavaScript too but for this blog listing of them are enough Hope you did like the blog make sure to give it a like For some exclusive tech content you can subscribe to my newsletter	2022-01-13 09:40:54
海外TECH	DEV Community	Security Pillar - AWS Well-Architected Framework | AWS White Paper Summary	https://dev.to/awsmenacommunity/security-pillar-aws-well-architected-framework-aws-white-paper-summary-5cbj	Security Pillar AWS Well Architected Framework AWS White Paper Summary IntroductionThe AWS Well Architected Framework helps you understand trade offs for decisions you make while building workloads on AWS By using the Framework you will learn current architectural best practices for designing and operating reliable secure efficient and cost effective workloads in the cloud It provides a way for you to consistently measure your workload against best practices and identify areas for improvement We believe that having well architected workloads greatly increases the likelihood of business success The framework is based on five pillars Operational ExcellenceSecurityReliabilityPerformance EfficiencyCost OptimizationThis paper focuses on the security pillar This will help you meet your business and regulatory requirements by following current AWS recommendations It s intended for those in technology roles such as chief technology officers CTOs chief information security officers CSOs CISOs architects developers and operations team members Security FoundationsThe security pillar describes how to take advantage of cloud technologies to protect data systems and assets in a way that can improve your security posture This paper provides in depth best practice guidance for architecting secure workloads on AWS Design PrinciplesIn the cloud there are a number of principles that can help you strengthen your workload security Implement a strong identity foundation Implement the principle of least privilege and enforce separation of duties with appropriate authorization for each interaction with your AWS resources Centralize identity management and aim to eliminate reliance on long term static credentials Enable traceability Monitor alert and audit actions and changes to your environment in real time Integrate log and metric collection with systems to automatically investigate and take action Apply security at all layers Apply a defense in depth approach with multiple security controls Apply to all layers for example edge of network VPC load balancing every instance and compute service operating system application and code Automate security best practices Automated software based security mechanisms improve your ability to securely scale more rapidly and cost effectively Create secure architectures including the implementation of controls that are defined and managed as code in version controlled templates Protect data in transit and at rest Classify your data into sensitivity levels and use mechanisms such as encryption tokenization and access control where appropriate Keep people away from data Use mechanisms and tools to reduce or eliminate the need for direct access or manual processing of data This reduces the risk of mishandling or modification and human error when handling sensitive data Prepare for security events Prepare for an incident by having incident management and investigation policy and processes that align to your organizational requirements Run incident response simulations and use tools with automation to increase your speed for detection investigation and recovery Shared ResponsibilitySecurity and Compliance is a shared responsibility between AWS and the customer This shared model can help relieve the customer s operational burden as AWS operates manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates The customer assumes responsibility and management of the guest operating system including updates and security patches and other associated application software in addition to the configuration of the AWS provided security group firewall Customers should carefully consider the services they choose as their responsibilities vary depending on the services used the integration of those services into their IT environment and applicable laws and regulations The nature of this shared responsibility also provides the flexibility and customer control that permits the deployment As shown in the following chart this differentiation of responsibility is commonly referred to as Security “of the Cloud versus Security “in the Cloud AWS responsibility “Security of the Cloud AWS is responsible for protecting the infrastructure that runs all of the services offered in the AWS Cloud This infrastructure is composed of the hardware software networking and facilities that run AWS Cloud services Customer responsibility “Security in the Cloud Customer responsibility will be determined by the AWS Cloud services that a customer selects This determines the amount of configuration work the customer must perform as part of their security responsibilities For example a service such as Amazon Elastic Compute Cloud Amazon EC is categorized as Infrastructure as a Service IaaS and as such requires the customer to perform all of the necessary security configuration and management tasks Customers that deploy an Amazon EC instance are responsible for management of the guest operating system including updates and security patches any application software or utilities installed by the customer on the instances and the configuration of the AWS provided firewall called a security group on each instance For abstracted services such as Amazon S and Amazon DynamoDB AWS operates the infrastructure layer the operating system and platforms and customers access the endpoints to store and retrieve data Customers are responsible for managing their data including encryption options classifying their assets and using IAM tools to apply the appropriate permissions Figure AWS Shared Responsibility Model This customer AWS shared responsibility model also extends to IT controls Just as the responsibility to operate the IT environment is shared between AWS and its customers so is the management operation and verification of IT controls shared AWS can help relieve customer burden of operating controls by managing those controls associated with the physical infrastructure deployed in the AWS environment that may previously have been managed by the customer As every customer is deployed differently in AWS customers can take advantage of shifting management of certain IT controls to AWS which results in a new distributed control environment Customers can then use the AWS control and compliance documentation available to them to perform their control evaluation and verification procedures as required The following are examples of controls that are managed by AWS AWS customers or both Inherited Controls Controls that a customer fully inherits from AWS Physical and Environmental controlsShared Controls Controls that apply to both the infrastructure layer and customer layers but in separate contexts or perspectives In a shared control AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of AWS services Examples include Patch Management AWS is responsible for patching and fixing flaws within the infrastructure but customers are responsible for patching their guest operating system and applications Configuration Management AWS maintains the configuration of its infrastructure devices but customers are responsible for configuring their own guest operating systems databases and applications Awareness and Training AWS trains AWS employees but customers must train their own employees Customer Specific Controls that are solely the responsibility of the customer based on the application they are deploying within AWS services Examples include Service and Communications Protection or Zone Security which might require a customer to route or zone data within specific security environments AWS Response to Abuse and CompromiseAbuse activities are observed behaviors of AWS customers instances or other resources that are malicious offensive illegal or could harm other internet sites AWS works with you to detect and address suspicious and malicious activities from your AWS resources Unexpected or suspicious behaviors from your resources can indicate that your AWS resources have been compromised which signals potential risks to your business GovernanceSecurity governance as a subset of the overall approach is meant to support business objectives by defining policies and control objectives to help manage risk Achieve risk management by following a layered approach to security control objectives each layer builds upon the previous one Understanding the AWS Shared Responsibility Model is your foundational layer This knowledge provides clarity on what you are responsible for on the customer side and what you inherit from AWS A beneficial resource is AWS Artifact which gives you on demand access to AWS security and compliance reports and select online agreements Operating Your Workloads SecurelyOperating workloads securely covers the whole lifecycle of a workload from design to build to run and to ongoing improvement One of the ways to improve your ability to operate securely in the cloud is by taking an organizational approach to governance Governance is the way that decisions are guided consistently without depending solely on the good judgment of the people involved Your governance model and process are the way you answer the question “How do I know that the control objectives for a given workload are met and are appropriate for that workload Having a consistent approach to making decisions speeds up the deployment of workloads and helps raise the bar for the security capability in your organization ResourcesRefer to the following resources to learn more about operating your workload securely AWS Account Management and SeparationWe recommend that you organize workloads in separate accounts and group accounts based on function compliance requirements or a common set of controls rather than mirroring your organization s reporting structure In AWS accounts are a hard boundary For example account level separation is strongly recommended for isolating production workloads from development and test workloads ResourcesRefer to the following resources to learn more about AWS recommendations for deploying and managing multiple AWS accounts Identity and Access ManagementTo use AWS services you must grant your users and applications access to resources in your AWS accounts As you run more workloads on AWS you need robust identity management and permissions in place to ensure that the right people have access to the right resources under the right conditions AWS offers a large selection of capabilities to help you manage your human and machine identities and their permissions The best practices for these capabilities fall into two main areas Identity ManagementThere are two types of identities you need to manage when approaching operating secure AWS workloads Human Identities The administrators developers operators and consumers of your applications require an identity to access your AWS environments and applications These can be members of your organization or external users with whom you collaborate and who interact with your AWS resources via a web browser client application mobile app or interactive command line tools Machine Identities Your workload applications operational tools and components require an identity to make requests to AWS services for example to read data These identities include machines running in your AWS environment such as Amazon EC instances or AWS Lambda functions You can also manage machine identities for external parties who need access Additionally you might also have machines outside of AWS that need access to your AWS environment ResourcesRefer to the following resources to learn more about AWS best practices for protecting your AWS credentials Permissions ManagementManage permissions to control access to human and machine identities that require access to AWS and your workloads Permissions control who can access what and under what conditions Set permissions to specific human and machine identities to grant access to specific service actions on specific resources Additionally specify conditions that must be true for access to be granted For example you can allow developers to create new Lambda functions but only in a specific Region When managing your AWS environments at scale adhere to the following best practices to ensure that identities only have the access they need and nothing more ResourcesRefer to the following resources to learn more about current AWS best practices for fine grained authorization DetectionDetection consists of two parts detection of unexpected or unwanted configuration changes and the detection of unexpected behavior The first can take place at multiple places in an application delivery lifecycle Using infrastructure as code for example a CloudFormation template you can check for unwanted configuration before a workload is deployed by implementing checks in the CI CD pipelines or source control Then as you deploy a workload into non production and production environments you can check configuration using native AWS open source or AWS Partner tools These checks can be for configuration that does not meet security principles or best practices or for changes that were made between a tested and deployed configuration For a running application you can check whether the configuration has been changed in an unexpected fashion including outside of a known deployment or automated scaling event In AWS there are a number of approaches you can use when addressing detective mechanisms The following sections describe how to use these approaches ConfigureInvestigate ConfigureConfigure service and application logging A foundational practice is to establish a set of detection mechanisms at the account level This base set of mechanisms is aimed at recording and detecting a wide range of actions on all resources in your account They allow you to build out a comprehensive detective capability with options that include automated remediation and partner integrations to add functionality ResourcesRefer to the following resources to learn more about current AWS recommendations for capturing and analyzing logs InvestigateImplement actionable security events For each detective mechanism you have you should also have a process in the form of a runbook or playbook to investigate For example when you enable Amazon GuardDuty it generates different findings You should have a runbook entry for each finding type for example if a trojan is discovered your runbook has simple instructions that instruct someone to investigate and remediate Automate response to events In AWS investigating events of interest and information on potentially unexpected changes into an automated workflow can be achieved using Amazon EventBridge This service provides a scalable rules engine designed to broker both native AWS event formats such as CloudTrail events as well as custom events you can generate from your application Amazon GuardDuty also allows you to route events to a workflow system for those building incident response systems Step Functions or to a central Security Account or to a bucket for further analysis ResourcesRefer to the following resources to learn more about current AWS best practices for integrating auditing controls with notification and workflow Infrastructure ProtectionInfrastructure protection encompasses control methodologies such as defense in depth that are necessary to meet best practices and organizational or regulatory obligations Use of these methodologies is critical for successful ongoing operations in the cloud Infrastructure protection is a key part of an information security program It ensures that systems and services within your workload are protected against unintended and unauthorized access and potential vulnerabilities For example you ll define trust boundaries for example network and account boundaries system security configuration and maintenance for example hardening minimization and patching operating system authentication and authorizations for example users keys and access levels and other appropriate policy enforcement points for example web application firewalls and or API gateways Regions Availability Zones AWS Local Zones and AWS OutpostsMake sure you are familiar with Regions Availability Zones AWS Local Zones and AWS Outposts which are components of the AWS secure global infrastructure In AWS there are a number of approaches to infrastructure protection The following sections describe how to use these approaches Protecting NetworksProtecting Compute Protecting NetworksUsers both in your workforce and your customers can be located anywhere You need to pivot from traditional models of trusting anyone and anything that has access to your network When you follow the principle of applying security at all layers you employ a Zero Trust approach Zero Trust security is a model where application components or microservices are considered discrete from each other and no component or microservice trusts any other The careful planning and management of your network design forms the foundation of how you provide isolation and boundaries for resources within your workload Because many resources in your workload operate in a VPC and inherit the security properties it s critical that the design is supported with inspection and protection mechanisms backed by automation Likewise for workloads that operate outside a VPC using purely edge services and or serverless the best practices apply in a more simplified approach Refer to the AWS Well Architected Serverless Applications Lens for specific guidance on serverless security ResourcesRefer to the following resources to learn more about AWS best practices for protecting networks Protecting ComputeCompute resources include EC instances containers AWS Lambda functions database services IoT devices and more Each of these compute resource types require different approaches to secure them However they do share common strategies that you need to consider defense in depth vulnerability management reduction in attack surface automation of configuration and operation and performing actions at a distance In this section you will find general guidance for protecting your compute resources for key services For each AWS service used it s important for you to check the specific security recommendations in the service documentation Perform vulnerability management Frequently scan and patch for vulnerabilities in your code dependencies and in your infrastructure to help protect against new threats Reduce attack surface Reduce your exposure to unintended access by hardening operating systems and minimizing the components libraries and externally consumable services in use Start by reducing unused components whether they are operating system packages applications etc for EC based workloads or external software modules in your code for all workloads Enable people to perform actions at a distance Removing the ability for interactive access reduces the risk of human error and the potential for manual configuration or management For example use a change management workflow to manage EC instances using tools such as AWS Systems Manager instead of allowing direct access or via a bastion host Implement managed services Implement services that manage resources such as Amazon RDS AWS Lambda and Amazon ECS to reduce your security maintenance tasks as part of the shared responsibility model For example Amazon RDS helps you set up operate and scale a relational database automates administration tasks such as hardware provisioning database setup patching and backups Validate software integrity Implement mechanisms e g code signing to validate that the software code and libraries used in the workload are from trusted sources and have not been tampered with For example you should verify the code signing certificate of binaries and scripts to confirm the author and ensure it has not been tampered with since created by the author Automate compute protection Automate your protective compute mechanisms including vulnerability management reduction in attack surface and management of resources The automation will help you invest time in securing other aspects of your workload and reduce the risk of human error ResourcesRefer to the following resources to learn more about AWS best practices for protecting compute Data ProtectionBefore architecting any workload foundational practices that influence security should be in place For example data classification provides a way to categorize data based on levels of sensitivity and encryption protects data by way of rendering it unintelligible to unauthorized access These methods are important because they support objectives such as preventing mishandling or complying with regulatory obligations In AWS there are a number of different approaches you can use when addressing data protection The following section describes how to use these approaches Data ClassificationProtecting Data at RestProtecting Data in Transit Data ClassificationData classification provides a way to categorize organizational data based on criticality and sensitivity in order to help you determine appropriate protection and retention controls Identify the data within your workload You need to understand the type and classification of data your workload is processing the associated business processes data owner applicable legal and compliance requirements where it s stored and the resulting controls that are needed to be enforced Define data protection controls By using resource tags separate AWS accounts per sensitivity and potentially also per caveat enclave community of interest IAM policies Organizations SCPs AWS KMS and AWS CloudHSM you can define and implement your policies for data classification and protection with encryption Define data lifecycle management Your defined lifecycle strategy should be based on sensitivity level as well as legal and organization requirements Aspects including the duration for which you retain data data destruction processes data access management data transformation and data sharing should be considered Automate identification and classification Automating the identification and classification of data can help you implement the correct controls Using automation for this instead of direct access from a person reduces the risk of human error and exposure You should evaluate using a tool such as Amazon Macie that uses machine learning to automatically discover classify and protect sensitive data in AWS ResourcesRefer to the following resources to learn more about data classification Protecting Data at RestData at rest represents any data that you persist in non volatile storage for any duration in your workload This includes block storage object storage databases archives IoT devices and any other storage medium on which data is persisted Protecting your data at rest reduces the risk of unauthorized access when encryption and appropriate access controls are implemented Encryption and tokenization are two important but distinct data protection schemes Tokenization is a process that allows you to define a token to represent an otherwise sensitive piece of information for example a token to represent a customer s credit card number A token must be meaningless on its own and must not be derived from the data it is tokenizing therefore a cryptographic digest is not usable as a token By carefully planning your tokenization approach you can provide additional protection for your content and you can ensure that you meet your compliance requirements For example you can reduce the compliance scope of a credit card processing system if you leverage a token instead of a credit card number Encryption is a way of transforming content in a manner that makes it unreadable without a secret key necessary to decrypt the content back into plaintext Both tokenization and encryption can be used to secure and protect information as appropriate Further masking is a technique that allows part of a piece of data to be redacted to a point where the remaining data is not considered sensitive For example PCI DSS allows the last four digits of a card number to be retained outside the compliance scope boundary for indexing Implement secure key management By defining an encryption approach that includes the storage rotation and access control of keys you can help provide protection for your content against unauthorized users and against unnecessary exposure to authorized users AWS KMS helps you manage encryption keys and integrates with many AWS services Enforce encryption at rest You should ensure that the only way to store data is by using encryption AWS KMS integrates seamlessly with many AWS services to make it easier for you to encrypt all your data at rest For example in Amazon S you can set default encryption on a bucket so that all new objects are automatically encrypted Enforce access control Different controls including access using least privilege backups see Reliability whitepaper isolation and versioning can all help protect your data at rest Access to your data should be audited using detective mechanisms covered earlier in this paper including CloudTrail and service level log such as S access logs You should inventory what data is publicly accessible and plan for how you can reduce the amount of data available over time Audit the use of encryption keys Ensure that you understand and audit the use of encryption keys to validate that the access control mechanisms on the keys are appropriately implemented For example any AWS service using an AWS KMS key logs each use in AWS CloudTrail Use mechanisms to keep people away from data Keep all users away from directly accessing sensitive data and systems under normal operational circumstances For example use a change management workflow to manage EC instances using tools instead of allowing direct access or a bastion host This can be achieved using AWS Systems Manager Automation which uses automation documents that contain steps you use to perform tasks Automate data at rest protection Use automated tools to validate and enforce data at rest controls continuously for example verify that there are only encrypted storage resources You can automate validation that all EBS volumes are encrypted using AWS Config Rules ResourcesRefer to the following resources to learn more about AWS best practices for protecting data at rest Protecting Data in TransitData in transit is any data that is sent from one system to another This includes communication between resources within your workload as well as communication between other services and your end users By providing the appropriate level of protection for your data in transit you protect the confidentiality and integrity of your workload s data Implement secure key and certificate management Store encryption keys and certificates securely and rotate them at appropriate time intervals with strict access control The best way to accomplish this is to use a managed service such as AWS Certificate Manager ACM Enforce encryption in transit Enforce your defined encryption requirements based on appropriate standards and recommendations to help you meet your organizational legal and compliance requirements AWS services provide HTTPS endpoints using TLS for communication thus providing encryption in transit when communicating with the AWS APIs Authenticate network communications Using network protocols that support authentication allows for trust to be established between the parties This adds to the encryption used in the protocol to reduce the risk of communications being altered or intercepted Common protocols that implement authentication include Transport Layer Security TLS which is used in many AWS services and IPsec which is used in AWS Virtual Private Network AWS VPN Automate detection of unintended data access Use tools such as Amazon GuardDuty to automatically detect suspicious activity or attempts to move data outside of defined boundaries For example GuardDuty can detect S read activity that is unusual with the Exfiltration S ObjectRead Unusual finding ResourcesRefer to the following resources to learn more about AWS best practices for protecting data in transit Incident ResponseEven with mature preventive and detective controls your organization should implement mechanisms to respond to and mitigate the potential impact of security incidents Your preparation strongly affects the ability of your teams to operate effectively during an incident to isolate contain and perform forensics on issues and to restore operations to a known good state Putting in place the tools and access ahead of a security incident then routinely practicing incident response through game days helps ensure that you can recover while minimizing business disruption Design Goals of Cloud ResponseEducatePrepareSimulateIterateResources Design Goals of Cloud ResponseEstablish response objectives Work with your stakeholders legal counsel and organizational leadership to determine the goal of responding to an incident Some common goals include containing and mitigating the issue recovering the affected resources preserving data for forensics and attribution Document plans Create plans to help you respond to communicate during and recover from an incident Respond using the cloud Implement your response patterns where the event and data occurs Know what you have and what you need Preserve logs snapshots and other evidence by copying them to a centralized security cloud account Use tags metadata and mechanisms that enforce retention policies For example you might choose to use the Linux dd command or a Windows equivalent to make a complete copy of the data for investigative purposes Use redeployment mechanisms If a security anomaly can be attributed to a misconfiguration the remediation might be as simple as removing the variance by redeploying the resources with the proper configuration When possible make your response mechanisms safe to execute more than once and in environments in an unknown state Automate where possible As you see issues or incidents repeat build mechanisms that programmatically triage and respond to common situations Use human responses for unique new and sensitive incidents Choose scalable solutions Strive to match the scalability of your organization s approach to cloud computing and reduce the time between detection and response Learn and improve your process When you identify gaps in your process tools or people implement plans to fix them Simulations are safe methods to find gaps and improve processes In AWS there are a number of different approaches you can use when addressing incident response The following section describes how to use these approaches Educate your security operations and incident response staff about cloud technologies and how your organization intends to use them Prepare your incident response team to detect and respond to incidents in the cloud enable detective capabilities and ensure appropriate access to the necessary tools and cloud services Additionally prepare the necessary runbooks both manual and automated to ensure reliable and consistent responses Work with other teams to establish expected baseline operations and use that knowledge to identify deviations from those normal operations Simulate both expected and unexpected security events within your cloud environment to understand the effectiveness of your preparation Iterate on the outcome of your simulation to improve the scale of your response posture reduce time to value and further reduce risk ResourcesRefer to the following resources to learn more about current AWS best practices for incident response ConclusionSecurity is an ongoing effort When incidents occur they should be treated as opportunities to improve the security of the architecture Having strong identity controls automating responses to security events protecting infrastructure at multiple levels and managing well classified data with encryption provides defense in depth that every organization should implement This effort is easier thanks to the programmatic functions and AWS features and services discussed in this paper AWS strives to help you build and operate architectures that protect information systems and assets while delivering business value ReferenceOriginal paper	2022-01-13 09:37:07
海外TECH	DEV Community	How to Improve Page Rank of Your Blog by Creating Quality Backlinks.	https://dev.to/shivashish/how-to-improve-page-rank-of-your-blog-by-creating-quality-backlinks-2oce	How to Improve Page Rank of Your Blog by Creating Quality Backlinks IntroductionIf you have read about SEO somewhere or you are a newbie blogger then you must be a little familiar with the word Backlinks You must have also thought that what is Backlink and what is its importance on SEO You use On Site On Page SEO Techniques like Keywords Meta Description etc to increase the traffic of your websites but in the absence of more information keep ignoring the importance of Backlinks Backlinks are very important for your blog because because of backlinks search engines check the authority of any website Backlinks are an important factor in determining the search rank of a website by search engines What are Backlinks Backlinks as the name suggests are links that connect your web page to another web page That second page can be on your own website and can also be on any other website The link appearing on any other page on clicking which visitors come to your page is called a backlink These are also called Inbound Links IBLs They are called backlinks because they point back to your page from another page The backlinks that are in our own domain are called internal links and the backlinks on other websites are called external links Proper use of Quality Backlinks improves the Search Engine Ranking of your website Backlinks also help search engines a lot in finding links to your website and accessing your website through them Especially for a new website or blog it is even more necessary to create Quality Backlinks because they make quick search and indexing of your site easier for Search Engines They send referral traffic to your website or blog which is Targeted Traffic and its bounce rate is very low Meaning and Importance of Quality BacklinksQuality Backlinks are those backlinks that are got from a High PageRank website and such website which is related to the content of your blog Like if you are blogging on Health Niche then it is important for you to have the backlinks that you are getting from other high page ranked health websites A High Quality Backlink can be a thousand times more effective than any Normal Backlink Quality Backlinks are very important to improve the Search Rankings of our website If your content is getting organic backlinks from a good and high page ranked website then the chances of getting a higher position in the search engine ranking increase manifold compared to other pages of that page or content Therefore it should be your goal to create quality backlinks for your homepage and other pages Ways to Build Quality BacklinksMany times bloggers do not get any benefit in SEO even after creating many backlinks of their blog or website The only reason for this is that their backlinks do not have quality backlinks For example suppose your website is about Technology Reviews and you have created your backlink on a website related to Dog Care Such backlinks will not bring much benefit to your SEO Because Search Engines see the similarity of both Backlink Hosting Site and Targeted Site along with Quantity Before creating backlinks keep in mind that any blog post you are making links to should have High Quality Content in that blog post and if the user clicks and reads your blog post then it should benefit The second important thing is that do not make backlinks everywhere only on such relevant websites on which the user will benefit by leaving the link You can use the following ways to create Quality Backlinks Guest BloggingGuest blogging is one of the best ways to generate quality backlinks This is the most commonly used method Find some Famous Blogs related to your website that accept Guest Posting Then write an attractive and Informative Post on those blogs and include a link to your blog in that post Not only will you get a good backlink from this but the visitors of that website will read your post and will be attracted to your website Comment on other blogs Commenting on the posts of other blogs is also a good way to get backlinks It should be kept in mind that the blog supports Do Follow Links Do Follow Links means those links from which we get the benefit of Backlinks Not all blogs support Do Follow Links and hence we do not get any referral from the comments made on them Therefore we should comment on more and more Do Follow Blogs Leave only a small comment the comment also does some value addition then only you will get the benefit Use Discussion PlatformsSome discussion platforms are also very helpful in generating quality backlinks The most prominent of these are Quora com and Yahoo Answers Take part in the discussion related to your Blogging Niche going on these Discussion Platforms answer the questions logically and leave the link of your website there Their people will visit your website after being impressed by your answer Use Blogging Community Make the most of blogging communities like Indiblogger DoSplash Inbound and Blog Engage Post the content of your website on it If your content is good and informative then you will get Upvotes This will not only improve your search engine ranking as well as the backlink of your website on these communities will also increase the traffic of your website in a big way Exchange the link with other bloggers related to your niche Link Exchange with other bloggers related to the area of ​​your website Your website will also get backlinks from this In Link Exchange two bloggers place each other s links in their own blog posts due to which both get quality backlinks This is a freeway to get Quality Backlinks and it also has a Guaranteed SEO Boost But keep in mind that this should not be only for backlinks your links should benefit the user otherwise this link can harm your search engine Create links in such a way that they should look real and if the user clicks on that link then he should get useful information Use internal links Internal links are those quality backlinks that we use to give a link to another post in one post of our website If they are used properly then there can be a significant improvement in search engine ranking Search Engine Ranking is determined by your keywords visitors and the time they spend on your website The biggest advantage of internal links is that they are helpful in taking the visitor from one post to another due to which the visitor spends more time on your website In this way your Search Rankings improve Apart from these methods you can also use Social Media Blog Directories and Public Forums to get quality backlinks Quality Backlinks always prove to be useful in increasing traffic and SEO	2022-01-13 09:25:14
ラズパイ	Raspberry Pi	New free resources for young people to create 3D worlds with code in Unity	https://www.raspberrypi.org/blog/free-resources-unity-game-development-3d-worlds/	New free resources for young people to create D worlds with code in UnityToday we re releasing an exciting new path of projects for young people who want to create D worlds stories and games We ve partnered with Unity to offer any young person anywhere the opportunity to take their first steps in creating virtual worlds using real time D The Unity Charitable Fund a fund of the Tides Foundation The post New free resources for young people to create D worlds with code in Unity appeared first on Raspberry Pi	2022-01-13 09:40:20
海外TECH	CodeProject Latest Articles	Parse Transact SQL to Check Syntax	https://www.codeproject.com/Articles/410081/Parse-Transact-SQL-to-Check-Syntax	article	2022-01-13 09:44:00
金融	金融庁ホームページ	入札公告等を更新しました。	https://www.fsa.go.jp/choutatu/choutatu_j/nyusatu_menu.html	公告	2022-01-13 10:00:00
海外ニュース	Japan Times latest articles	Japan eyes relaxed rules on COVID-19 close contacts and hospitalization	https://www.japantimes.co.jp/news/2022/01/13/national/covid19-close-contacts-hospitalization-rules-relax/	Japan eyes relaxed rules on COVID close contacts and hospitalizationA group of infectious disease experts announced a draft proposal that recommended isolation periods for close contacts be shortened to days in principle	2022-01-13 18:11:41
海外ニュース	Japan Times latest articles	Chiefs ready to make run at third straight Super Bowl appearance	https://www.japantimes.co.jp/sports/2022/01/13/more-sports/football/chiefs-steelers-playoffs/	Chiefs ready to make run at third straight Super Bowl appearanceThe Chiefs loss in last season s Super Bowl remains a source of motivation for the defending AFC champions but it s also a loss the team	2022-01-13 18:43:38
ニュース	BBC News - Home	Boris Johnson: Senior Tories urge PM to quit after party apology	https://www.bbc.co.uk/news/uk-politics-59972859?at_medium=RSS&at_campaign=KARANGA	tories	2022-01-13 09:23:51
ニュース	BBC News - Home	Jonathan Van-Tam to leave role as deputy chief medical officer	https://www.bbc.co.uk/news/uk-59979504?at_medium=RSS&at_campaign=KARANGA	march	2022-01-13 09:56:02
ニュース	BBC News - Home	Covid-19: France to relax travel rules from the UK	https://www.bbc.co.uk/news/world-europe-59977978?at_medium=RSS&at_campaign=KARANGA	france	2022-01-13 09:51:47
ニュース	BBC News - Home	Prince Andrew accuser unlikely to accept money settlement alone, says lawyer	https://www.bbc.co.uk/news/uk-59977517?at_medium=RSS&at_campaign=KARANGA	money	2022-01-13 09:00:58
ニュース	BBC News - Home	German court finds Syrian colonel guilty of crimes against humanity	https://www.bbc.co.uk/news/world-europe-59949924?at_medium=RSS&at_campaign=KARANGA	syria	2022-01-13 09:31:47
ニュース	BBC News - Home	Brexit: Liz Truss aims for 'reset' as UK-EU protocol talks resume	https://www.bbc.co.uk/news/uk-northern-ireland-59971172?at_medium=RSS&at_campaign=KARANGA	negotiator	2022-01-13 09:40:22
ニュース	BBC News - Home	Water pollution: How clean are the UK's rivers and lakes?	https://www.bbc.co.uk/news/science-environment-59898988?at_medium=RSS&at_campaign=KARANGA	chemical	2022-01-13 09:47:47
ニュース	BBC News - Home	Chris Wood: Newcastle sign New Zealand striker from Burnley for undisclosed fee	https://www.bbc.co.uk/sport/football/59978551?at_medium=RSS&at_campaign=KARANGA	january	2022-01-13 09:35:30
ニュース	BBC News - Home	Lucas Digne joins Aston Villa from Everton in 25m deal	https://www.bbc.co.uk/sport/football/59977639?at_medium=RSS&at_campaign=KARANGA	everton	2022-01-13 09:38:59
ニュース	BBC News - Home	Omicron: What Covid tests do I need to travel abroad?	https://www.bbc.co.uk/news/explainers-52544307?at_medium=RSS&at_campaign=KARANGA	covid	2022-01-13 09:40:51
ビジネス	ダイヤモンド・オンライン - 新着記事	“排ガス浄化触媒”など｢排ガス規制｣関連銘柄を紹介！ EVの本格普及を前に、世界中で厳格化が進む「排ガス 規制」への対応で需要＆売上が増える注目企業を解説 - 「お宝銘柄」発掘術！	https://diamond.jp/articles/-/293208		2022-01-13 18:30:00
ビジネス	不景気.com	ラピーヌの22年2月期は7億円の営業赤字へ、在庫評価損 - 不景気.com	https://www.fukeiki.com/2022/01/lapine-2022-loss.html	通期業績予想	2022-01-13 09:25:56
北海道	北海道新聞	根室市で１人感染	https://www.hokkaido-np.co.jp/article/632992/	市立根室病院	2022-01-13 18:18:00
北海道	北海道新聞	献上鮭づくり、ジオラマに　別海町郷土資料館職員が制作　加賀家文書館で展示	https://www.hokkaido-np.co.jp/article/632991/	江戸時代	2022-01-13 18:17:00
北海道	北海道新聞	「開放特許」　道内コロナ禍で脚光　中小の商品開発後押し	https://www.hokkaido-np.co.jp/article/632990/	商品開発	2022-01-13 18:16:00
北海道	北海道新聞	ニセコで広がる冬のワーケーション　コンドミニアムや戸建て	https://www.hokkaido-np.co.jp/article/632984/	管内	2022-01-13 18:12:00
北海道	北海道新聞	東京円、１１４円台前半	https://www.hokkaido-np.co.jp/article/632983/	東京外国為替市場	2022-01-13 18:10:00
北海道	北海道新聞	小樽市の成人式　前後の飲食で１６人感染	https://www.hokkaido-np.co.jp/article/632976/	記者会見	2022-01-13 18:09:57
北海道	北海道新聞	桜の開花予想、平年より早め　３月１５日東京、広島から	https://www.hokkaido-np.co.jp/article/632981/	今シーズン	2022-01-13 18:09:00
北海道	北海道新聞	巨人の中田「一から頑張る」　移籍２年目、復権目指す	https://www.hokkaido-np.co.jp/article/632980/	沖縄県石垣市	2022-01-13 18:09:00
北海道	北海道新聞	中国、少子化策の提言閲覧不能に　人口議論過熱を警戒、削除指示か	https://www.hokkaido-np.co.jp/article/632979/	中国人民銀行	2022-01-13 18:09:00
北海道	北海道新聞	中日のブライト「いい雰囲気」　新人合同練習を開始	https://www.hokkaido-np.co.jp/article/632978/	雰囲気	2022-01-13 18:05:00
北海道	北海道新聞	中国、西安の病院を閉鎖処分　妊婦が死産、市民反発	https://www.hokkaido-np.co.jp/article/632977/	新型コロナウイルス	2022-01-13 18:05:00
北海道	北海道新聞	１２億円、当せん者どこに？　サッカーくじ、期限迫る	https://www.hokkaido-np.co.jp/article/632975/	日本スポーツ振興センター	2022-01-13 18:02:00
IT	週刊アスキー	『PUBG: BATTLEGROUNDS』の無料プレイサービスが開始！既存プレイヤーには特典も	https://weekly.ascii.jp/elem/000/004/080/4080246/	playstationxboxonepcsteam	2022-01-13 18:45:00
IT	週刊アスキー	ガーミンジャパン、ドライビングパフォーマンスを計測・分析できるレーシングコーチ・デバイス「Catalyst」を発売	https://weekly.ascii.jp/elem/000/004/080/4080228/	catalyst	2022-01-13 18:20:00
IT	週刊アスキー	ネオポケの名作カードゲーム『SNK VS.CAPCOM 激突カードファイターズ（1999年発売）』がSwitchで復活！	https://weekly.ascii.jp/elem/000/004/080/4080243/	nintendo	2022-01-13 18:15:00
マーケティング	AdverTimes	【人事】ファミマ、新規事業推進部とデジタルコマース推進室を統合ほか（2022年3月1日付）	https://www.advertimes.com/20220113/article374021/	人事異動	2022-01-13 09:50:38