投稿時間:2022-12-27 06:21:11 RSSフィード2022-12-27 06:00 分まとめ(24件)

カテゴリー等	サイト名等	記事タイトル・トレンドワード等	リンクURL	頻出ワード・要約等/検索ボリューム	登録日
AWS	AWS Japan Blog	公益企業が Infrastructure as Code によってランサムウェアやその他の災害から復旧する方法	https://aws.amazon.com/jp/blogs/news/how-energy-and-utility-companies-can-recover-from-ransomware-and-other-disasters-using-iac-on-aws/	itycompaniescanrecoverfr	2022-12-26 20:49:56
海外TECH	MakeUseOf	What Is a Pretexting Attack and How Can You Protect Yourself?	https://www.makeuseof.com/what-is-pretexting-attack/	personal	2022-12-26 20:30:15
海外TECH	MakeUseOf	How to Open the Fax Cover Page Editor in Windows 11	https://www.makeuseof.com/windows-11-fax-cover-page-editor/	editor	2022-12-26 20:15:15
海外TECH	DEV Community	Monitor Your Cloud Environment with AWS Trusted Advisor ☁️	https://dev.to/aws-builders/monitor-your-cloud-environment-with-aws-trusted-advisor-1oeg	Monitor Your Cloud Environment with AWS Trusted Advisor ️Cloud security monitoring and increasing visibility are two main important things in the cloud It helps us to build automated solutions for identifying risky or malicious behavior in the cloud environment It is also required for every major regulation such as HIPAA PCI DSS etc Every day there are lots of AWS services that we re using and gaining visibility and creating monitoring solutions are our responsibility As your cloud environment grows there could be many security problems if you don t know where they are and whether are they configured properly from a security perspective In AWS there are lots of security services and using and managing them is our responsibility One of them is AWS Trusted Advisor a service that analyzes your AWS environment and provides recommendations for you in five categories Cost optimization security fault tolerance performance and service limits In this blog we re focusing on the security part of the AWS Trusted Advisor But you should consider the other parts of improving your environment such as cost performance etc In the AWS Trusted Advisor there are lots of controls for security configurations of your AWS resources some examples are the following Security Groups ーSpecific Ports Unrestricted This control checks security groups for rules that allow unrestricted access to specific ports such as SSH and RDP Unrestricted access increases opportunities for malicious activity hacking denial of service attacks loss of data Amazon RDS Public Snapshots This control checks the permission settings for your Amazon RDS DB snapshots and alerts you if any snapshots are marked as public When you make a snapshot public you give all AWS accounts and anonymous users access to all the data on the snapshot If sharing snapshots is a requirement for you you can mark the snapshot as private and then specify the user or accounts you want to share In AWS Trusted advisor some security controls are enabled by default and free and some of them are needs upgrading your AWS Account and you need to pay for it These controls are more deep dive solutions and recommendations for you Automated Monitoring of Trusted Advisor Security Checks From a cloud security perspective enabling AWS Trusted Advisor is not enough We need to automate and get action about controls But AWS Trusted Advisor scenarios are different plan by plan You can use the Trusted Advisor console to access checks in the security category if you have a Basic Developer Support plan If you have other plans in addition to all of these you can use AWS Support API to access all Trusted Advisor checks You can also Amazon CloudWatch or EventBridge events to monitor and alarm Using Trusted Advisor with Different Scenarios You have a strict security policy for your databases You do not want publicly accessible snapshots in your test and production environment Also you should not configure the security group rule of your databases overly permissive If these actions are taken there should be an incident response plan to roll back all these configurations Solution You can use AWS Trusted API metrics for this incident response plan You can set an Amazon EventBridge Rule for these checks When this rule is triggered you can invoke an AWS Lambda function that rolls back all the changes such as deleting overly permissive rules in the security group and disabling publicly accessible snapshots You can use AWS SDK functions for these This is the architectural design Note You need to upgrade your support plan for this The Basic Plan which is enabled when you create a new account does not support AWS Trusted Advisor metrics You have only a console view in this plan Your security team wants to get a weekly summary security report of your environment Do you need a custom solution or AWS Trusted Advisor can do that Solution In the Trusted Advisor there is a “Notification solution You can receive the email notification for Trusted Advisor Recommendations once a week You need to add your security billing and operations contact e mail addresses You can also set up a Slack solution with this There are some useful links that I want to share with you if you want to implement them Trusted Advisor with AWS Organizations AWS Premium Support customers can use Trusted Advisor from an Organizational View This provides a general and centralized view of all AWS Trusted Advisor recommendations Trusted Advisor Tools This is a perfect GitHub repo for automating Trusted Advisor checks with AWS CloudFormation templates Trusted Advisor Best Practices There are some best practice rules for AWS Trusted Advisor by TrendMicro Thanks for reading Stay safe in the cloud ️	2022-12-26 20:32:27
海外TECH	DEV Community	Alternatives to Git.	https://dev.to/niza/alternatives-to-git-4p6m	Alternatives to Git Git is a popular version control system that is widely used by software developers to track changes to their code and collaborate with other team members However there are several alternative version control systems available that offer similar functionality to Git Here are a few examples Mercurial Mercurial is a free open source version control system that is similar to Git in many ways It is known for its simplicity and speed and is popular among developers who prefer a lightweight tool The official website for Mercurial is Some basic commands in Mercurial include hg init Initializes a new Mercurial repository hg clone Makes a copy of an existing repository hg add Adds a new file to the repository hg commit Saves changes to the repository hg push Sends changes to a remote repository Subversion Subversion also known as SVN is another popular version control system that is similar to Git It is known for its reliability and simplicity and is often used in large organizations The official website for Subversion is Some basic commands in Subversion include svn checkout Downloads repository from a remote server svn add Adds a new file to the repository svn commit Saves changes to the repository svn update Downloads latest changes from a remote repository CVS CVS Concurrent Versions System is an older version control system that is still used by some developers today It is known for its simplicity and ease of use but lacks some of the more advanced features found in newer systems like Git and Mercurial The official website for CVS is Some basic commands in CVS include cvs checkout Downloads repository from a remote server cvs add Adds a new file to the repository cvs commit Saves changes to the repository cvs update Downloads latest changes from a remote repository Comparison of Git Mercurial Subversion and CVS Speed Git is generally considered the fastest version control system as it utilizes a decentralized model and stores data in the form of hashed values allowing for faster data transfer and retrieval Mercurial is also known for its speed as it utilizes a similar decentralized model and stores data in a similar manner Subversion and CVS are both centralized systems and may not be as fast as Git and Mercurial in terms of data transfer and retrieval Flexibility Git and Mercurial are both highly flexible version control systems as they allow for the creation of multiple branches and merging of changes easily Subversion is also flexible but may not be as user friendly in terms of branching and merging compared to Git and Mercurial CVS is not as flexible as the other version control systems as it does not support branching and merging as easily Security Git and Mercurial both utilize a decentralized model which means that there is no central repository for data This makes it more difficult for data to be lost or compromised Subversion also has good security measures as it uses SSL TLS encryption for data transfer and has options for authentication and authorization CVS has weaker security measures compared to the other version control systems as it does not utilize encryption for data transfer and has limited options for authentication and authorization Ease of use Git and Mercurial can both be somewhat difficult for new users to learn as they utilize a command line interface and have a steep learning curve Subversion is more user friendly as it has a GUI interface and is easier to understand for new users CVS is also user friendly as it has a simple command line interface and is easy to learn for new users	2022-12-26 20:12:20
Apple	AppleInsider - Frontpage News	Apple's 1TB 16-inch MacBook Pro is on sale for $2,199, plus $80 off AppleCare	https://appleinsider.com/articles/22/12/26/apples-1tb-16-inch-macbook-pro-is-on-sale-for-2199-plus-80-off-applecare?utm_medium=rss	Apple x s TB inch MacBook Pro is on sale for plus off AppleCareShoppers looking for year end deals can find a MacBook Pro inch with TB of storage for off Plus save on AppleCare Save on Apple s TB MacBook Pro The exclusive deal can be activated with promo code APINSIDER when you shop at Adorama com The code valid on hundreds of Mac configurations offers the lowest prices on most models ーincluding Apple s inch MacBook Pro Shoppers can find details on where to find the promo code field below as well as on this help page Read more	2022-12-26 20:35:23
Apple	AppleInsider - Frontpage News	How to manage duplicate contacts in iOS 16	https://appleinsider.com/inside/ios-16/tips/how-to-manage-duplicate-contacts-in-ios-16?utm_medium=rss	How to manage duplicate contacts in iOS Organizing your life means condensing the contacts on your iPhone by weeding out the ones you ll never use again and merging the copies of the ones you will Here s how to do it The Apple Contacts appAs we transition to new employment gain friends or part with others our contact lists take on duplicate contacts or contacts we need to delete Here s how you can manage multiple contacts from your phone and iCloud Read more	2022-12-26 20:13:45
海外TECH	WIRED	19 Best After-Christmas Sales and Deals (2022): Vacuums, Phones, and Board Games	https://www.wired.com/story/christmas-sales-and-deals-2022/	cards	2022-12-26 20:30:09
ニュース	@日本経済新聞 電子版	レバレッジに泣き「逆神」に笑った　金融記者年末座談会 https://t.co/WZt2ga5Uap	https://twitter.com/nikkei/statuses/1607478537522671616	金融	2022-12-26 20:48:43
ニュース	@日本経済新聞 電子版	トリシェECB元総裁、日銀の緩和修正「投機回避に成功」 https://t.co/uoBlSVXuls	https://twitter.com/nikkei/statuses/1607472257240268800	緩和	2022-12-26 20:23:46
ニュース	@日本経済新聞 電子版	トップ弁護士に聞く①太田洋氏「良い敵対的買収増加も」 https://t.co/1VKXiULN2S	https://twitter.com/nikkei/statuses/1607467706277859329	敵対的買収	2022-12-26 20:05:41
ニュース	BBC News - Home	Do not reduce UK's modern slavery protections, Theresa May warns	https://www.bbc.co.uk/news/uk-politics-64098701?at_medium=RSS&at_campaign=KARANGA	criminal	2022-12-26 20:46:44
ニュース	BBC News - Home	Aston Villa 1-3 Liverpool: Reds make winning start to Premier League top-four bid	https://www.bbc.co.uk/sport/football/64022706?at_medium=RSS&at_campaign=KARANGA	Aston Villa Liverpool Reds make winning start to Premier League top four bidLiverpool make a winning return to Premier League action as they restart their bid to force their way into the Premier League s top four with victory over Aston Villa	2022-12-26 20:02:10
ビジネス	ダイヤモンド・オンライン - 新着記事	セブン＆アイが円安効果で売上高10兆円台へ！「グループ解体危機」乗り切る会心の経営判断とは？ - 貧国ニッポン 「弱い円」の呪縛	https://diamond.jp/articles/-/314735	営業収益	2022-12-27 05:20:00
ビジネス	ダイヤモンド・オンライン - 新着記事	三菱UFJ社長が激白！単体利益「メガ首位奪還」の方策と「銀信証連携」戦略 - 総予測2023	https://diamond.jp/articles/-/314519	三菱ufj	2022-12-27 05:15:00
ビジネス	ダイヤモンド・オンライン - 新着記事	アナリスト予想、利益は的中も株価は的外れ - WSJ発	https://diamond.jp/articles/-/315462	的外れ	2022-12-27 05:10:00
ビジネス	ダイヤモンド・オンライン - 新着記事	楽天に蔓延する「不正連鎖」の闇、今度はモバイル部門で発覚した金銭着服の全構図 - 楽天 解体の序章	https://diamond.jp/articles/-/315102	引き換え	2022-12-27 05:10:00
ビジネス	ダイヤモンド・オンライン - 新着記事	米中関係悪化、オピオイド危機にも波及 - WSJ発	https://diamond.jp/articles/-/315463	米中関係	2022-12-27 05:09:00
ビジネス	ダイヤモンド・オンライン - 新着記事	三菱電機社長「不正で社員離れ加速に危機感」、背水の陣で敷く“新人事施策”とは？ - 総予測2023	https://diamond.jp/articles/-/314518	三菱電機	2022-12-27 05:05:00
北海道	北海道新聞	中国、入国時の隔離撤廃　１月、ゼロコロナ転換	https://www.hokkaido-np.co.jp/article/781098/	中国政府	2022-12-27 05:42:25
北海道	北海道新聞	＜社説＞秋葉復興相更迭　自民党の体質を改めよ	https://www.hokkaido-np.co.jp/article/781094/	岸田文雄	2022-12-27 05:01:00
北海道	北海道新聞	＜卓上四季＞愛に飢えたテロル	https://www.hokkaido-np.co.jp/article/781101/	難波大助	2022-12-27 05:02:16
ビジネス	東洋経済オンライン	日銀｢事実上の利上げ｣の先に待つ4つのシナリオ ｢金利なき世界｣から金利のある未来へと転換 | 市場観測 | 東洋経済オンライン	https://toyokeizai.net/articles/-/642439?utm_source=rss&utm_medium=http&utm_campaign=link_back	日本銀行	2022-12-27 05:40:00
ビジネス	東洋経済オンライン	｢株持ち企業｣ランキング上位300社はここだ！ 全上場企業の｢政策保有株式｣を集計した結果 | 企業ランキング | 東洋経済オンライン	https://toyokeizai.net/articles/-/642352?utm_source=rss&utm_medium=http&utm_campaign=link_back	上場企業	2022-12-27 05:20:00