AWS Va - Amazon S3€¦ · AWS (DCX) IoT / APN 4 APN / APN 4 APN 18 . AWS 1.0 ... 5.1 AWS APN AWS...

AWS 1.0 1

AWS

Va

2019 12

1.0

AWS AWS

AWS / APN

AWS 1.0 2

......................................................................................................................................................................................... 3

..................................................................................................................................................................... 3

AWS ................................................................................................................................................................ 4

......................................................................................................................................................................... 4

AWS ................................................................................................................................................ 5

................................................................................................................................. 8

AWS .......................................................................................................................................................................... 12

AWS 1.0 3

AWS AWS

( APN ) ( ) AWS APN

AWS APN AWS

AWS

APN AWS

AWS ("PDR") AWS ("PDM")

PDR/PDM

APN

1. APN (https://partnercentral.awspartner.com/)

2. "View My APN Account ( APN )"

3. "Program Details ( )"

4. AWS "Update ( )"

5. "Submit ( )"

6. [email protected]

o

▪ ( ( )

)

▪ ( AWS SaaS )

▪ AWS ( )

PDR/PDM

AWS

APN

AWS APN APN

AWS /

APN ( AWS )

http://aws.amazon.com/partners/competencies

https://partnercentral.awspartner.com/

mailto:[email protected]

AWS 1.0 4

AWS

AWS (

)

APN

• (CRM) ( ) SEO

• /

• (WMS) (ERP) /

• POS (OMS)

( ) ( / ESL IoT

Kiosk ) (DAM)

• AI/ML

• IT

APN

1. SaaS AWS AWS APN

2. AWS AWS

AWS 1.0 5

AWS

AWS

1.0 APN ( / )

1.1 APN

1.2 APN APN AWS

1.3 APN

APN

SaaS

1.4 APN

2.0 ( / )

2.1 APN 4

4 APN

( )

AWS (DCX) IoT / APN

4

APN

▪

▪

▪

▪

▪

▪

▪ /

▪

APN

4 APN

18

https://s3-us-west-2.amazonaws.com/competency.awspartner.com/Templates/Partner+Guides/AWS+Competency+Guidlines.pdf

https://s3-us-west-2.amazonaws.com/competency.awspartner.com/Templates/Partner+Guides/AWS+Competency+Guidlines.pdf

AWS 1.0 6

2.2 AWS KPI

APN APN

4 2 APN

APN APN

APN

▪ APN AWS

▪

▪

▪ AWS

▪ /

3.0 AWS ( / )

3.1 APN AWS

APN AWS APN

APN AWS AWS

APN

AWS

APN AWS APN

APN

AWS

3.2 AWS AWS

APN ( )

APN 12

4.0

4.1 APN

AWS

( )

4.2 / APN

4.3 AWS

Marketplace

APN AWS Marketplace

APN AWS Marketplace

AWS 1.0 7

4.4 AWS

APN AWS

____________________________

APN

4.5 AWS/APN

APN

5.0 APN ( / )

5.1 AWS

APN AWS

▪ APN

▪ [email protected]

“[APN Partner Name], Retail Competency

Technology Partner Completed Self-Assessment”

▪ APN AWS

(PDR) (PDM)

APN AWS

AWS 1.0 8

/ AWS

SaaS

AWS

( / )

AWS AWS

AWS Amazon Virtual Private Cloud

(VPC) (AZ) AWS

AWS

–

–

AWS

–

4 APN

1.0

1.1 AWS

root

AWS root AWS

AWS Identity and Access Management (IAM)

IAM

IAM AWS root

AWS root

IAM

IAM

1.2 AWS

root

Multi-Factor

Authentication

(MFA)

AWS root Multi-Factor Authentication

(MFA) AWS root AWS

MFA MFA MFA

1.3 IAM

AWS root

IAM

Administrator Access

AWS

AWS

root

root

1.4

IAM

Multi-Factor

Authentication

(MFA)

IAM MFA MFA

( OTP)

( ) OTP MFA

(

)

https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#create-iam-users


https://docs.aws.amazon.com/general/latest/gr/aws_tasks-that-require-root.html


https://docs.aws.amazon.com/IAM/latest/UserGuide/getting-started_create-admin-group.html

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html#enable-virt-mfa-for-root

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_mfa_enable_physical.html#enable-hw-mfa-for-root



https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#enable-mfa-for-privileged-users

AWS 1.0 9

1.5 IAM

IAM

IAM

IAM

1.6 IAM

IAM

IAM

Account Settings ( )

IAM

1.7

IAM

AWS IAM

IAM

IAM IAM

IAM

IAM

IAM ( root

)

1.8 IAM

1.9

( )

AWS

AWS

AWS AWS

1.10

1.11 AWS

AWS 1. AWS

2.

AWS a) Amazon EC2

Amazon Elastic Container Service (Amazon ECS)

b) AWS c) IAM

i) ii)

1.12

AWS

AWS CloudTrail

AWS AWS CloudTrail

AWS AWS

CloudTrail AWS

AWS

1.13 CloudTrail

AWS

S3

AWS CloudTrail AWS

1.14 CloudTrail S3

MFA

AWS CloudTrail MFA

https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#rotate-credentials

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html#Using_RotateAccessKey

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html

https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_passwords_account-policy.html


https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-privilege

https://docs.aws.amazon.com/general/latest/gr/aws-access-keys-best-practices.html

https://aws.amazon.com/compliance/shared-responsibility-model/

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html

https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-receive-logs-from-multiple-accounts.html

https://docs.aws.amazon.com/AmazonS3/latest/dev/Versioning.html

https://docs.aws.amazon.com/AmazonS3/latest/dev/Versioning.html

AWS 1.0 10

1.15 Amazon

EC2

Amazon EC2

1. Amazon VPC

2. Amazon VPC 3.

1.16

Amazon S3

Amazon S3

AWS

( )

1.17

Amazon S3

Amazon S3

Amazon S3 Amazon S3

( )

1.18

S3

Amazon S3

AWS Trusted Advisor AWS

Trusted Advisor Amazon S3

/

Trusted Advisor

1.19

Amazon EC2

Amazon S3

1.

Amazon S3

2 Amazon S3

a. ( Chef

Puppet ) ( OSSEC Tripwire )

b. Amazon S3

'canary' ( )

c.

OSSEC with ElasticSearch Kibana

a. Amazon S3

1.20

1.21

1.22

AWS AWS Key Management Service (KMS) (

HashiCorp Vault)

1.23

Amazon Virtual Private Cloud

1.24

AWS

12 a.

b. c.

https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-overview.html

https://aws.amazon.com/premiumsupport/knowledge-center/secure-s3-resources/

https://aws.amazon.com/blogs/aws/amazon-s3-update-cloudtrail-integration/

https://aws.amazon.com/blogs/security/how-to-monitor-host-based-intrusion-detection-system-alerts-on-amazon-ec2-instances/

AWS 1.0 11

1.25

(PCI)

(DSS) –

SAQ

(PCI) (DSS)

PCI DSS SAQ

PCI DSS (SAQ)

1.26 PCI

Amazon VPC

1.27

(DDoS)

(OSI)

(DDoS)

1.28

(OWASP)

10

(OWASP)

2.0

2.1

VPN AWS

Direct Connect

2.2

1.

2.

2.3

AWS

AWS

2.4

AWS

AWS

2.5

( AWS CloudFormation

Terraform) AWS AWS

AWS

2.6

Amazon S3 Amazon

Glacier

GB

2.7

AWS

2.8

2.9

12

2.10

(DR)

(RPO)

(RTO) RPO RTO RPO

RTO SLA

https://aws.amazon.com/whitepapers/backup-and-recovery-using-aws/

https://aws.amazon.com/backup-restore/getting-started/

AWS 1.0 12

AWS

/

AWS Well Architected Well Architected

2.11

(RTO)

24

RTO 24

2.12

(DR)

(RPO)

(RTO) DR DR

AWS APN

2.13

(DR)

DR AWS

12

DR AWS

AWS

3.0

3.1

AWS

Secure Shell (SSH) (RDP)

AWS

3.2

Runbook

Runbook AWS

AWS Support

3.3 AWS

AWS

( ) AWS

AWS

4.0

IT

4.1

4.2

https://s3-us-west-2.amazonaws.com/competency.awspartner.com/Templates/Partner+Guides/How-to+Guide+-+APN+-+Building+a+Microsite.pdf

https://s3-us-west-2.amazonaws.com/competency.awspartner.com/Templates/Partner+Guides/CaseStudyKit.pdf

https://s3-us-west-2.amazonaws.com/competency.awspartner.com/Templates/Partner+Guides/How-to+Guide+-+APN+-+Architecture+Diagram.pdf

https://s3-us-west-2.amazonaws.com/competency.awspartner.com/Templates/AWS+Competency+Application+Readiness+Checklist.pdf

https://aws.amazon.com/architecture/well-architected/

https://aws.amazon.com/premiumsupport/business-support/

AWS Va - Amazon S3€¦ · AWS (DCX) IoT / APN 4 APN / APN 4 APN 18 . AWS 1.0 ... 5.1 AWS APN AWS...

Documents

Transcript of AWS Va - Amazon S3€¦ · AWS (DCX) IoT / APN 4 APN / APN 4 APN 18 . AWS 1.0 ... 5.1 AWS APN AWS...