{"id":50642,"date":"2023-02-22T10:47:58","date_gmt":"2023-03-25T11:15:35","guid":{"rendered":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/"},"modified":"2024-04-29T15:45:02","modified_gmt":"2024-04-29T07:45:02","slug":"%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5","status":"publish","type":"post","link":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/","title":{"rendered":"\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5"},"content":{"rendered":"

\u9996\u5148<\/h2>\n

\u8fd9\u6b21\u6211\u7528CDK\u8bd5\u56fe\u5b9e\u73b0\u4e86\u5173\u4e8e\u5b89\u5168\u65b9\u9762\u7684Slack\u901a\u77e5\u3002\u4e0eChatbot\u6ca1\u6709\u76f4\u63a5\u96c6\u6210\u7684\u670d\u52a1\u5c06\u901a\u8fc7EventBridge\u89e6\u53d1\u4e8b\u4ef6\uff0c\u7136\u540e\u901a\u8fc7SNS->Chatbot\u6d41\u7a0b\u8fdb\u884c\u901a\u77e5\u3002
\n* \u7531\u4e8e\u8fd9\u6b21\u5185\u5bb9\u6709\u70b9\u957f\uff0c\u6240\u4ee5\u6211\u6298\u53e0\u4e86\u51e0\u4e2a\u9879\u76ee\u3002<\/p>\n

\u30fb\u76f8\u5173\u6587\u7ae0
\n\u3010CDK\u3011\u7531\u4e8eCost Anomaly Detection\u4e0eChatbot\u96c6\u6210\uff0c\u6211\u5728CDK\u4e2d\u8fdb\u884c\u4e86\u5b9e\u73b0\u3010\u66f4\u65b0\u3011
\n\u3010CDK\u3011\u901a\u8fc7chatbot\u5c06ECR\u955c\u50cf\u626b\u63cf\u7ed3\u679c\u901a\u77e5\u5230slack\u4e0a<\/p>\n

\u5b89\u5168\u4e2d\u5fc3<\/h2>\n

Q\uff1aAWS Security Hub \u662f\u4ec0\u4e48\uff1f
\nAWS Security Hub \u5728AWS\u5185\u63d0\u4f9b\u7efc\u5408\u6027\u7684\u5b89\u5168\u72b6\u6001\uff0c\u5e76\u6307\u51fa\u5176\u662f\u5426\u7b26\u5408\u5b89\u5168\u6807\u51c6\u548c\u6700\u4f73\u5b9e\u8df5\u3002\u901a\u8fc7\u5c06AWS\u8d26\u6237\u3001\u670d\u52a1\u548c\u53d7\u652f\u6301\u7684\u7b2c\u4e09\u65b9\u5408\u4f5c\u4f19\u4f34\u7684\u5b89\u5168\u68c0\u6d4b\u7ed3\u679c\u96c6\u4e2d\u5316\u548c\u4f18\u5148\u7ea7\u6392\u5e8f\uff0cAWS Security Hub\u53ef\u5206\u6790\u5b89\u5168\u8d8b\u52bf\u5e76\u786e\u5b9a\u6700\u91cd\u8981\u7684\u5b89\u5168\u95ee\u9898\u3002<\/p><\/blockquote>\n

\u603b\u800c\u8a00\u4e4b<\/h3>\n
    \n
  • \n
      \u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c7\u30fc\u30bf\u306e\u96c6\u7d04\u3068\u4e00\u5143\u7684\u306a\u53ef\u8996\u5316<\/ul>\n<\/li>\n<\/ul>\n

       <\/p>\n

        \u696d\u754c\u6a19\u6e96\u3084\u30d9\u30b9\u30c8\u30d7\u30e9\u30af\u30c6\u30a3\u30b9\u306b\u57fa\u3065\u3044\u305f\u81ea\u52d5\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u30c1\u30a7\u30c3\u30af<\/ul>\n
        \u4ee5\u4e0b\u662f\u96c6\u7d04\u5bfe\u8c61\u7684\u5b89\u5168\u6570\u636e\u6e05\u5355\uff1a\u670d\u52a1\u540d\u79f0
        \n\u76ee\u6807<\/p>\n

        Amazon GuardDuty
        \n\u5173\u4e8e\u5a01\u80c1\u68c0\u6d4b\u7684\u6240\u6709\u68c0\u6d4b\u7ed3\u679c<\/p>\n

        Amazon Inspector
        \n\u901a\u8fc7\u5b89\u5168\u8bc4\u4f30\u7684\u6240\u6709\u68c0\u6d4b\u7ed3\u679c<\/p>\n

        Amazon Macie
        \n\u8fdd\u53cd\u7b56\u7565\u65f6\u7684\u68c0\u6d4b\u7ed3\u679c<\/p>\n

        AWS IAM Access Analyzer
        \n\u68c0\u6d4b\u5230\u5728\u81ea\u5df1\u8d26\u6237\u5185\u5141\u8bb8\u5916\u90e8\u8bbf\u95ee\u7684\u7b56\u7565\u63cf\u8ff0\u65f6\u7684\u68c0\u6d4b\u7ed3\u679c<\/p>\n

        AWS Firewall Manager
        \nAWS WAF\u7b56\u7565\u6216Web ACL\u89c4\u5219\u4e0d\u7b26\u5408\u5408\u89c4\u6027\u65f6\u7684\u68c0\u6d4b\u7ed3\u679c\uff1b\u672a\u53d7AWS Shield Advanced\u4fdd\u62a4\u6216\u68c0\u6d4b\u5230\u653b\u51fb\u65f6\u7684\u68c0\u6d4b\u7ed3\u679c<\/p>\n

        AWS Systems Manager Patch Manager
        \n\u68c0\u6d4b\u5230EC2\u5b9e\u4f8b\u4e0d\u7b26\u5408\u57fa\u4e8e\u8865\u4e01\u57fa\u7ebf\u7684\u5408\u89c4\u6027\u89c4\u5219\u65f6\u7684\u68c0\u6d4b\u7ed3\u679c<\/p>\n<\/details>\n

        \u81ea\u52a8\u5408\u89c4\u68c0\u67e5\u6e05\u5355\u5bf9\u8c61\u8bf4\u660e<\/p>\n

        AWS\u57fa\u7840\u5b89\u5168\u7684\u6700\u4f73\u5b9e\u8df5 v1.0.0
        \n\u8fd9\u662f\u4e00\u7ec4\u81ea\u52a8\u5316\u7684\u5b89\u5168\u68c0\u67e5\uff0c\u7528\u4e8e\u68c0\u6d4bAWS\u8d26\u6237\u548c\u90e8\u7f72\u7684\u8d44\u6e90\u662f\u5426\u7b26\u5408\u6700\u4f73\u5b89\u5168\u5b9e\u8df5\u3002\u6b64\u6807\u51c6\u7531AWS\u5b89\u5168\u4e13\u5bb6\u5b9a\u4e49\u3002\u8fd9\u4e2a\u7ecf\u8fc7\u7cbe\u9009\u7684\u4e00\u7cfb\u5217\u63a7\u5236\u6709\u52a9\u4e8e\u6539\u8fdbAWS\u7684\u5b89\u5168\u4f53\u7cfb\uff0c\u5e76\u6db5\u76d6\u4e86AWS\u6700\u53d7\u6b22\u8fce\u7684\u57fa\u7840\u670d\u52a1\u3002<\/p>\n

        CIS AWS Foundations Benchmark v1.2.0
        \nCenter for Internet Security (CIS) AWS Foundations Benchmark v1.2.0\u662fAWS\u5b89\u5168\u8bbe\u7f6e\u7684\u6700\u4f73\u5b9e\u8df5\u96c6\u3002\u8fd9\u4e2aSecurity Hub\u6807\u51c6\u4f1a\u81ea\u52a8\u68c0\u67e5CIS\u8981\u6c42\u7684\u5b50\u96c6\u7684\u5408\u89c4\u51c6\u5907\u60c5\u51b5\u3002<\/p>\n

        PCI DSS v3.2.1
        \nPayment Card Industry Data Security Standard (PCI DSS) v3.2.1\u662f\u4e00\u9879\u9002\u7528\u4e8e\u5b58\u50a8\u3001\u5904\u7406\u548c\u4f20\u8f93\u6301\u5361\u4eba\u6570\u636e\u7684\u5b9e\u4f53\u7684\u4fe1\u606f\u5b89\u5168\u6807\u51c6\u3002\u8fd9\u4e2aSecurity Hub\u6807\u51c6\u4f1a\u81ea\u52a8\u68c0\u67e5PCI DSS\u8981\u6c42\u7684\u5b50\u96c6\u7684\u5408\u89c4\u51c6\u5907\u60c5\u51b5\u3002<\/p>\n<\/details>\n

        \u8bf7\u4e3a\u6211\u63d0\u4f9b\u4e00\u4e2a\u9009\u9879\u7684\u6c49\u8bed\u540c\u4e49\u8bcd\u3002<\/h4>\n

        AWS\u9ed1\u5e26-AWSSecurityHub<\/p>\n

        \u914d\u7f6e<\/h2>\n

        AWS Config\u662f\u4ec0\u4e48\uff1f
        \nAWS Config\u63d0\u4f9b\u4e86AWS\u8d26\u6237\u4e2dAWS\u8d44\u6e90\u7684\u8be6\u7ec6\u914d\u7f6e\u89c6\u56fe\u3002\u8fd9\u5305\u62ec\u8d44\u6e90\u4e4b\u95f4\u7684\u5173\u7cfb\u548c\u914d\u7f6e\u5386\u53f2\uff0c\u4f7f\u60a8\u80fd\u591f\u67e5\u770b\u914d\u7f6e\u548c\u5173\u7cfb\u968f\u7740\u65f6\u95f4\u7684\u63a8\u79fb\u800c\u53d1\u751f\u7684\u53d8\u5316\u3002<\/p><\/blockquote>\n

        \u603b\u4e4b<\/h3>\n

        AWS\u30ea\u30bd\u30fc\u30b9\u306a\u3069\u306e\u69cb\u6210\u5909\u66f4\u3092\u30ed\u30ae\u30f3\u30b0 (\u3069\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u3001\u8ab0\u304c\u3001\u3044\u3064\u3001\u4f55\u3092\u3057\u305f\u304b\u3092\u8a18\u9332)
        \n\u203b\u4ed6\u306b\u3082ConfigRule\u3068\u3044\u3046\u8a55\u4fa1\u6a5f\u80fd\u304c\u3042\u308a\u307e\u3059\u304c\u3053\u3053\u3067\u306f\u5272\u611b<\/p>\n

        \u652f\u6301\u7684\u8d44\u6e90\u7c7b\u578b<\/h3>\n

         <\/p>\n

        \u8bf7\u53c2\u9605<\/h3>\n

        AWS-\u9ed1\u5e26_\u914d\u7f6e<\/p>\n

        \u5b88\u536b\u4e49\u52a1<\/h2>\n

        \u95ee\uff1aAmazon GuardDuty \u662f\u4ec0\u4e48?
        \nAmazon GuardDuty \u662f\u4e00\u79cd\u6301\u7eed\u76d1\u63a7\u548c\u4fdd\u62a4AWS\u8d26\u6237\u3001\u5de5\u4f5c\u8d1f\u8f7d\u4ee5\u53ca\u5b58\u50a8\u5728Amazon Simple Storage Service (Amazon S3) \u4e0a\u7684\u6570\u636e\u7684\u5a01\u80c1\u68c0\u6d4b\u529f\u80fd\u3002GuardDuty \u5206\u6790\u6765\u81ea\u8d26\u6237\u751f\u6210\u7684\u6301\u7eed\u5143\u6570\u636e\u6d41\u4ee5\u53caAWS CloudTrail\u4e8b\u4ef6\u3001Amazon Virtual Private Cloud (VPC) \u6d41\u65e5\u5fd7\u548c\u57df\u540d\u7cfb\u7edf (DNS) \u65e5\u5fd7\u4e2d\u7684\u7f51\u7edc\u6d3b\u52a8\u3002\u6b64\u5916\uff0cGuardDuty \u4f7f\u7528\u5df2\u77e5\u7684\u6076\u610f IP \u5730\u5740\u3001\u5f02\u5e38\u68c0\u6d4b\u3001\u96c6\u6210\u7684\u5a01\u80c1\u60c5\u62a5\u5982\u673a\u5668\u5b66\u4e60 (ML) \u6765\u66f4\u51c6\u786e\u5730\u8bc6\u522b\u5a01\u80c1\u3002<\/p><\/blockquote>\n

        \u603b\u4e4b<\/h3>\n
          \n
        • \n
            CloudTrail Event Logs\u3001VPCFlowlog\u3001DNS\u30ed\u30b0\u3092\u30c7\u30fc\u30bf\u30bd\u30fc\u30b9\u3068\u3057\u3066\u5206\u6790\u3057\u3066\u9a5a\u7570\u30ea\u30b9\u30af\u3092\u691c\u77e5<\/ul>\n<\/li>\n<\/ul>\n

             <\/p>\n

              \n
            • \n
                \u60aa\u610f\u306e\u3042\u308bIP\u30a2\u30c9\u30ec\u30b9\u3084\u30c9\u30e1\u30a4\u30f3\u3001\u7570\u5e38\u691c\u51fa\u3001\u6a5f\u68b0\u5b66\u7fd2\u3092\u4f7f\u7528\u3057\u3066\u8105\u5a01\u3092\u8b58\u5225<\/ul>\n<\/li>\n<\/ul>\n

                 <\/p>\n

                  S3\u306b\u4fdd\u5b58\u3055\u308c\u305f\u30c7\u30fc\u30bf\u306e\u4fdd\u8b77(\u30c7\u30fc\u30bf\u30a2\u30af\u30bb\u30b9\u30a4\u30d9\u30f3\u30c8\u3068\u8a2d\u5b9a\u306e\u30e2\u30cb\u30bf\u30ea\u30f3\u30b0\u3068\u30d7\u30ed\u30d5\u30a1\u30a4\u30ea\u30f3\u30b0)<\/ul>\n
                  \u68c0\u6d4b\u5230\u7684\u6f5c\u5728\u98ce\u9669\u5217\u8868
                  \n\u5206\u7c7b
                  \n\u6076\u610f\u626b\u63cf
                  \n\u5b9e\u4f8b\u4fa6\u67e5\uff1a\u2022 \u7aef\u53e3\u63a2\u6d4b\/\u901a\u4fe1\u63a5\u53d7\u2022 \u7aef\u53e3\u626b\u63cf\uff08VPC\u5185\u90e8\uff09\u2022 \u66b4\u529b\u7834\u89e3\u653b\u51fb\uff08IP\u5730\u5740\uff09\u2022 \u653e\u7f6e\u70b9\uff08IP\u5730\u5740\uff09\u2022 Tor\u901a\u4fe1\u8d26\u6237\u4fa6\u67e5\uff1a\u2022 Tor API\u8c03\u7528\uff08\u5931\u8d25\uff09\u8d26\u6237\u4fa6\u67e5\uff1a\u2022 Tor API\u8c03\u7528\uff08\u5931\u8d25\uff09
                  \n\u5bf9\u5b9e\u4f8b\u7684\u5a01\u80c1
                  \n\u2022 C&C\u6d3b\u52a8\u2022 \u6076\u610f\u57df\u540d\u8bf7\u6c42\u2022 EC2\u5a01\u80c1\u5217\u8868\u2022 \u653e\u7f6e\u70b9IP\u5730\u5740\u2022 \u6076\u610f\u901a\u4fe1\uff08ASIS\uff09\u2022 \u6316\u77ff\u6bd4\u7279\u5e01\u2022 \u51fa\u7ad9DDoS\u2022 \u5783\u573e\u90ae\u4ef6\u673a\u5668\u4eba\u6d3b\u52a8\u2022 \u51fa\u7ad9SSH\u66b4\u529b\u7834\u89e3\u2022 \u5f02\u5e38\u7f51\u7edc\u7aef\u53e3\u2022 \u5f02\u5e38\u6d41\u91cf\u91cf\/\u6d41\u5411\u2022 \u5f02\u5e38DNS\u8bf7\u6c42\u2022 \u57df\u540d\u751f\u6210\u7b97\u6cd5
                  \n\u5bf9\u5e10\u6237\u7684\u5a01\u80c1
                  \n\u2022 \u6076\u610fAPI\u8c03\u7528\uff08\u6076\u610fIP\u5730\u5740\uff09\u2022 Tor API\u8c03\u7528\uff08\u5df2\u63a5\u53d7\uff09\u2022 CloudTrail\u5df2\u7981\u7528\u2022 \u5bc6\u7801\u7b56\u7565\u66f4\u6539\u2022 \u5b9e\u4f8b\u542f\u52a8\u5f02\u5e38\u2022 \u5f02\u5e38\u5730\u533a\u6d3b\u52a8\u2022 \u53ef\u7591\u63a7\u5236\u53f0\u767b\u5f55\u2022 \u5f02\u5e38ISP\u8c03\u7528\u8005\u2022 \u53d8\u5f02\u7684API\u8c03\u7528\uff08\u521b\u5efa\u3001\u66f4\u65b0\u3001\u5220\u9664\uff09\u2022 \u9ad8\u6570\u91cf\u7684Describe\u8c03\u7528\u2022 \u5f02\u5e38IAM\u7528\u6237\u6dfb\u52a0<\/details>\n
                  \u4ee5\u4e0b\u662f\u641c\u7d22\u7c7b\u578b\u7684\u5217\u8868\uff1a\u53d1\u73b0\u7c7b\u578b
                  \n\u8d44\u6e90
                  \n\u6570\u636e\u6e90
                  \n\u4e25\u91cd\u7a0b\u5ea6<\/p>\n

                  \u540e\u95e8\uff1aEC2 \/ C\uff06CActivity.B
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u540e\u95e8\uff1aEC2 \/ C\uff06CActivity.B\uff01DNS
                  \nEC2
                  \nDNS\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u540e\u95e8\uff1aEC2 \/ DenialOfService.Dns
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u540e\u95e8\uff1aEC2 \/ DenialOfService.Tcp
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u540e\u95e8\uff1aEC2 \/ DenialOfService.Udp
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u540e\u95e8\uff1aEC2 \/ DenialOfService.UdpOnTcpPorts
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u540e\u95e8\uff1aEC2 \/ DenialOfService.UnusualProtocol
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u540e\u95e8\uff1aEC2 \/ Spambot
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u884c\u4e3a\uff1aEC2 \/ NetworkPortUnusual
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u884c\u4e3a\uff1aEC2 \/ TrafficVolumeUnusual
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u51ed\u8bc1\u8bbf\u95ee\uff1aIAM\u7528\u6237\/\u5f02\u5e38\u884c\u4e3a
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u51ed\u8bc1\u8bbf\u95ee\uff1aKubernetes \/ \u6076\u610fIP\u8c03\u7528\u8005
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u51ed\u8bc1\u8bbf\u95ee\uff1aKubernetes \/ \u6076\u610fIP\u8c03\u7528\u8005.Custom
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u51ed\u8bc1\u8bbf\u95ee\uff1aKubernetes \/ \u6210\u529f\u533f\u540d\u8bbf\u95ee
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u51ed\u8bc1\u8bbf\u95ee\uff1aKubernetes \/ TorIP\u8c03\u7528\u8005
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u52a0\u5bc6\u8d27\u5e01\uff1aEC2 \/ BitcoinTool.B
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u52a0\u5bc6\u8d27\u5e01\uff1aEC2 \/ BitcoinTool.B\uff01DNS
                  \nEC2
                  \nDNS\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u9632\u5fa1\u89c4\u907f\uff1aIAM\u7528\u6237\/\u5f02\u5e38\u884c\u4e3a
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u9632\u5fa1\u89c4\u907f\uff1aKubernetes \/ \u6076\u610fIP\u8c03\u7528\u8005
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u9632\u5fa1\u89c4\u907f\uff1aKubernetes \/ \u6076\u610fIP\u8c03\u7528\u8005.Custom
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u9632\u5fa1\u89c4\u907f\uff1aKubernetes \/ \u6210\u529f\u533f\u540d\u8bbf\u95ee
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u9632\u5fa1\u89c4\u907f\uff1aKubernetes \/ TorIP\u8c03\u7528\u8005
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u53d1\u73b0\uff1aIAM\u7528\u6237\/\u5f02\u5e38\u884c\u4e3a
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4f4e<\/p>\n

                  \u53d1\u73b0\uff1aKubernetes \/ \u6076\u610fIP\u8c03\u7528\u8005
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u53d1\u73b0\uff1aKubernetes \/ \u6076\u610fIP\u8c03\u7528\u8005.Custom
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u53d1\u73b0\uff1aKubernetes \/ \u6210\u529f\u533f\u540d\u8bbf\u95ee
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u53d1\u73b0\uff1aKubernetes \/ TorIP\u8c03\u7528\u8005
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u53d1\u73b0\uff1aS3 \/ \u6076\u610fIP\u8c03\u7528\u8005
                  \nS3
                  \nCloudTrail S3\u6570\u636e\u4e8b\u4ef6
                  \n\u9ad8<\/p>\n

                  \u53d1\u73b0\uff1aS3 \/ \u6076\u610fIP\u8c03\u7528\u8005.Custom
                  \nS3
                  \nCloudTrail S3\u6570\u636e\u4e8b\u4ef6
                  \n\u9ad8<\/p>\n

                  \u53d1\u73b0\uff1aS3 \/ TorIP\u8c03\u7528\u8005
                  \nS3
                  \nCloudTrail S3\u6570\u636e\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6267\u884c\uff1aKubernetes \/ ExecInKubeSystemPod
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u6e17\u900f\uff1aIAM\u7528\u6237 \/ KaliLinux
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6e17\u900f\uff1aIAM\u7528\u6237 \/ ParrotLinux
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6e17\u900f\uff1aIAM\u7528\u6237 \/ PentooLinux
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6e17\u900f\uff1aS3 \/ KaliLinux
                  \nS3
                  \nCloudTrail S3\u6570\u636e\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6e17\u900f\uff1aS3 \/ ParrotLinux
                  \nS3
                  \nCloudTrail S3\u6570\u636e\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6e17\u900f\uff1aS3 \/ PentooLinux
                  \nS3
                  \nCloudTrail S3\u6570\u636e\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6301\u4e45\u5316\uff1aIAM\u7528\u6237 \/ \u5f02\u5e38\u884c\u4e3a
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6301\u4e45\u5316\uff1aKubernetes \/ \u5177\u6709\u654f\u611f\u6302\u8f7d\u7684\u5bb9\u5668
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u6301\u4e45\u5316\uff1aKubernetes \/ \u6076\u610fIP\u8c03\u7528\u8005
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u6301\u4e45\u5316\uff1aKubernetes \/ \u6076\u610fIP\u8c03\u7528\u8005.Custom
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u6301\u4e45\u5316\uff1aKubernetes \/ \u6210\u529f\u533f\u540d\u8bbf\u95ee
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u6301\u4e45\u5316\uff1aKubernetes \/ TorIP\u8c03\u7528\u8005
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u7b56\u7565\uff1aIAM\u7528\u6237 \/ \u6839\u51ed\u636e\u4f7f\u7528
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6\u6216CloudTrail\u6570\u636e\u4e8b\u4ef6
                  \n\u4f4e<\/p>\n

                  \u7b56\u7565\uff1aKubernetes \/ \u5bf9\u9ed8\u8ba4\u670d\u52a1\u5e10\u6237\u7684\u7ba1\u7406\u8bbf\u95ee
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u7b56\u7565\uff1aKubernetes \/ \u6388\u4e88\u533f\u540d\u8bbf\u95ee\u6743\u9650
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u7b56\u7565\uff1aKubernetes \/ Kubeflow\u4eea\u8868\u677f\u66b4\u9732
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u7b56\u7565\uff1aKubernetes \/ \u66b4\u9732\u7684\u4eea\u8868\u677f
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u7b56\u7565\uff1aS3 \/ \u7981\u7528\u5e10\u6237\u516c\u5171\u8bbf\u95ee\u5757
                  \nS3
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4f4e<\/p>\n

                  \u7b56\u7565\uff1aS3 \/ \u5b58\u50a8\u6876\u6388\u4e88\u533f\u540d\u8bbf\u95ee\u6743\u9650
                  \nS3
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u9ad8<\/p>\n

                  \u7b56\u7565\uff1aS3 \/ \u5b58\u50a8\u6876\u7981\u7528\u516c\u5171\u8bbf\u95ee\u5757
                  \nS3
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4f4e<\/p>\n

                  \u7b56\u7565\uff1aS3 \/ \u5b58\u50a8\u6876\u6388\u4e88\u516c\u5171\u8bbf\u95ee\u6743\u9650
                  \nS3
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u9ad8<\/p>\n

                  \u6743\u9650\u63d0\u5347\uff1aIAM\u7528\u6237 \/ \u5f02\u5e38\u884c\u4e3a
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u6743\u9650\u63d0\u5347\uff1aKubernetes \/ \u7279\u6743\u5bb9\u5668
                  \nKubernetes
                  \nKubernetes\u5ba1\u8ba1\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u4fa6\u5bdf\uff1aEC2 \/ PortProbeEMRUnprotectedPort
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u4fa6\u5bdf\uff1aEC2 \/ PortProbeUnprotectedPort
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u4f4e<\/p>\n

                  \u4fa6\u5bdf\uff1aEC2 \/ Portscan
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u4fa6\u5bdf\uff1aIAM\u7528\u6237 \/ \u6076\u610fIP\u8c03\u7528\u8005
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u4fa6\u5bdf\uff1aIAM\u7528\u6237 \/ \u6076\u610fIP\u8c03\u7528\u8005.Custom
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u4fa6\u5bdf\uff1aIAM\u7528\u6237 \/ TorIP\u8c03\u7528\u8005
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4e2d<\/p>\n

                  \u9690\u533f\u6027\uff1aIAM\u7528\u6237 \/ \u7981\u7528CloudTrail\u65e5\u5fd7\u8bb0\u5f55
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4f4e<\/p>\n

                  \u9690\u533f\u6027\uff1aIAM\u7528\u6237 \/ \u5bc6\u7801\u7b56\u7565\u66f4\u6539
                  \nIAM
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4f4e<\/p>\n

                  \u9690\u533f\u6027\uff1aS3 \/ \u7981\u7528\u670d\u52a1\u5668\u8bbf\u95ee\u65e5\u5fd7\u8bb0\u5f55
                  \nS3
                  \nCloudTrail\u7ba1\u7406\u4e8b\u4ef6
                  \n\u4f4e<\/p>\n

                  \u7279\u6d1b\u4f0a\u6728\u9a6c\uff1aEC2 \/ BlackholeTraffic
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u7279\u6d1b\u4f0a\u6728\u9a6c\uff1aEC2 \/ BlackholeTraffic\uff01DNS
                  \nEC2
                  \nDNS\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u7279\u6d1b\u4f0a\u6728\u9a6c\uff1aEC2 \/ DGADomainRequest.B
                  \nEC2
                  \nDNS\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u7279\u6d1b\u4f0a\u6728\u9a6c\uff1aEC2 \/ DGADomainRequest.C\uff01DNS
                  \nEC2
                  \nDNS\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u7279\u6d1b\u4f0a\u6728\u9a6c\uff1aEC2 \/ DNSDataExfiltration
                  \nEC2
                  \nDNS\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u7279\u6d1b\u4f0a\u6728\u9a6c\uff1aEC2 \/ DriveBySourceTraffic\uff01DNS
                  \nEC2
                  \nDNS\u65e5\u5fd7
                  \n\u9ad8<\/p>\n

                  \u7279\u6d1b\u4f0a\u6728\u9a6c\uff1aEC2 \/ DropPoint
                  \nEC2
                  \nVPC\u6d41\u91cf\u65e5\u5fd7
                  \n\u4e2d<\/p>\n

                  \u7279\u6d1b\u4f0a\u6728\u9a6c\uff1aEC<\/p>\n<\/details>\n

                  \u5982\u679c\u60a8\u67e5\u770b\u4e0a\u9762\u7684\u641c\u7d22\u7c7b\u578b\u5217\u8868\uff0c\u4f1a\u53d1\u73b0GuardDuty\u4f1a\u5206\u6790VPC\u6d41\u91cf\u65e5\u5fd7\u7b49\u6570\u636e\u6e90\uff0c\u5e76\u6839\u636e\u6bcf\u4e2aEC2\u3001IAM\u3001S3\u548cEKS\u662f\u5426\u5177\u6709\u6f5c\u5728\u98ce\u9669\u6765\u63d0\u4f9b\u901a\u77e5\u3002<\/p>\n

                  \u8bf7\u63d0\u4f9b\u4e0b\u5217\u53c2\u8003\u3002<\/h3>\n

                  AWS-\u9ed1\u5e26_\u4e9a\u9a6c\u900a-\u5b88\u536b\u76d1\u7763<\/p>\n

                  \u4e91\u8ddf\u8e2a<\/h2>\n

                  Q: AWS CloudTrail \u3068\u306f\u4f55\u3067\u3059\u304b?
                  \nAWS CloudTrail\u662f\u901a\u8fc7\u8ddf\u8e2a\u7528\u6237\u6d3b\u52a8\u548cAPI\u7684\u4f7f\u7528\u60c5\u51b5\u6765\u5b9e\u73b0\u5ba1\u8ba1\u3001\u5b89\u5168\u76d1\u63a7\u548c\u64cd\u4f5c\u6545\u969c\u6392\u9664\u7684\u5de5\u5177\u3002CloudTrail\u4f1a\u8bb0\u5f55\u4e0e\u5ba2\u6237\u7684AWS\u57fa\u7840\u8bbe\u65bd\u76f8\u5173\u7684\u8d26\u6237\u6d3b\u52a8\uff0c\u5e76\u6301\u7eed\u76d1\u63a7\u3001\u4fdd\u7559\u3001\u5b58\u50a8\u3001\u5206\u6790\u548c\u63a7\u5236\u4fee\u590d\u64cd\u4f5c\u3002<\/p><\/blockquote>\n

                  \u7b80\u800c\u8a00\u4e4b<\/h3>\n
                    AWS\u306b\u5bfe\u3059\u308bAPI\u64cd\u4f5c\u3092\u8a18\u9332\u3001\u4fdd\u5b58\u3001\u5206\u6790<\/ul>\n
                    \u30b5\u30dd\u30fc\u30c8\u3055\u308c\u308b\u30b5\u30fc\u30d3\u30b9\u4e00\u89a7AWS Service
                    \nCloudTrail Topics
                    \nSupport began<\/p>\n

                    Alexa for Business
                    \nLogging Alexa for Business Administration Calls Using AWS CloudTrail
                    \n11\/29\/2017<\/p>\n

                    AWS Amplify
                    \nLogging Amplify API calls using AWS CloudTrail
                    \n11\/30\/2020<\/p>\n

                    AWS Audit Manager
                    \nLogging AWS Audit Manager API calls with AWS CloudTrail
                    \n12\/07\/2020<\/p>\n

                    Amazon API Gateway
                    \nLog API management calls to Amazon API Gateway Using AWS CloudTrail
                    \n07\/09\/2015<\/p>\n

                    Amazon Connect
                    \nLogging Amazon Connect API Calls with AWS CloudTrail
                    \n12\/11\/2019<\/p>\n

                    Application Auto Scaling
                    \nLogging Application Auto Scaling API calls with AWS CloudTrail
                    \n10\/31\/2016<\/p>\n

                    AWS Application Discovery Service
                    \nLogging Application Discovery Service API Calls with AWS CloudTrail
                    \n05\/12\/2016<\/p>\n

                    Amazon AppFlow
                    \nLogging Amazon AppFlow API calls with AWS CloudTrail
                    \n04\/22\/2020<\/p>\n

                    AWS App Mesh
                    \nLogging App Mesh API Calls with AWS CloudTrail
                    \nAWS App Mesh 10\/30\/2019<\/p>\n

                    App Mesh Envoy Management Service 03\/18\/2022<\/p>\n

                    AWS App Runner
                    \nLogging App Runner API calls with AWS CloudTrail
                    \n05\/18\/2021<\/p>\n

                    Amazon AppStream 2.0
                    \nLogging Amazon AppStream 2.0 API Calls with AWS CloudTrail
                    \n04\/25\/2019<\/p>\n

                    AWS AppSync
                    \nLogging AWS AppSync API Calls with AWS CloudTrail
                    \n02\/13\/2018<\/p>\n

                    Amazon Athena
                    \nLogging Amazon Athena API Calls with AWS CloudTrail
                    \n05\/19\/2017<\/p>\n

                    AWS Auto Scaling
                    \nLogging AWS Auto Scaling API Calls By Using CloudTrail
                    \n08\/15\/2018<\/p>\n

                    AWS Backup
                    \nLogging AWS Backup API Calls with AWS CloudTrail
                    \n02\/04\/2019<\/p>\n

                    AWS Batch
                    \nLogging AWS Batch API Calls with AWS CloudTrail
                    \n1\/10\/2018<\/p>\n

                    AWS Billing and Cost Management
                    \nLogging AWS Billing and Cost Management API Calls with AWS CloudTrail
                    \n06\/07\/2018<\/p>\n

                    AWS BugBust
                    \nLogging BugBust API calls using CloudTrail
                    \n06\/24\/2021<\/p>\n

                    AWS Certificate Manager
                    \nUsing AWS CloudTrail
                    \n03\/25\/2016<\/p>\n

                    AWS Certificate Manager Private Certificate Authority
                    \nUsing CloudTrail
                    \n06\/06\/2019<\/p>\n

                    Amazon Chime
                    \nLog Amazon Chime Administration Calls Using AWS CloudTrail
                    \n09\/27\/2017<\/p>\n

                    Amazon Cloud Directory
                    \nLogging Amazon Cloud Directory API Calls Using AWS CloudTrail
                    \n01\/26\/2017<\/p>\n

                    AWS Cloud9
                    \nLogging AWS Cloud9 API Calls with AWS CloudTrail
                    \n01\/21\/2019<\/p>\n

                    AWS CloudFormation
                    \nLogging AWS CloudFormation API Calls in AWS CloudTrail
                    \n04\/02\/2014<\/p>\n

                    Amazon CloudFront
                    \nUsing AWS CloudTrail to Capture Requests Sent to the CloudFront API
                    \n05\/28\/2014<\/p>\n

                    AWS CloudHSM
                    \nLogging AWS CloudHSM API Calls By Using AWS CloudTrail
                    \n01\/08\/2015<\/p>\n

                    AWS Cloud Map
                    \nLogging AWS Cloud Map API Calls with AWS CloudTrail
                    \n11\/28\/2018<\/p>\n

                    Amazon CloudSearch
                    \nLogging Amazon CloudSearch Configuration Service Calls Using AWS CloudTrail
                    \n10\/16\/2014<\/p>\n

                    AWS CloudTrail
                    \nAWS CloudTrail API Reference\u00a0(All CloudTrail API calls are logged by CloudTrail.)
                    \n11\/13\/2013<\/p>\n

                    Amazon CloudWatch
                    \nLogging Amazon CloudWatch API Calls in AWS CloudTrail
                    \n04\/30\/2014<\/p>\n

                    CloudWatch Events
                    \nLogging Amazon CloudWatch Events API Calls in AWS CloudTrail
                    \n01\/16\/2016<\/p>\n

                    CloudWatch Logs
                    \nLogging Amazon CloudWatch Logs API Calls in AWS CloudTrail
                    \n03\/10\/2016<\/p>\n

                    AWS CodeBuild
                    \nLogging AWS CodeBuild API Calls with AWS CloudTrail
                    \n12\/01\/2016<\/p>\n

                    AWS CodeCommit
                    \nLogging AWS CodeCommit API Calls with AWS CloudTrail
                    \n01\/11\/2017<\/p>\n

                    AWS CodeDeploy
                    \nMonitoring Deployments with AWS CloudTrail
                    \n12\/16\/2014<\/p>\n

                    Amazon CodeGuru Reviewer
                    \nLogging Amazon CodeGuru Reviewer API Calls with AWS CloudTrail
                    \n12\/02\/2019<\/p>\n

                    AWS CodePipeline
                    \nLogging CodePipeline API Calls By Using AWS CloudTrail
                    \n07\/09\/2015<\/p>\n

                    AWS CodeStar
                    \nLogging AWS CodeStar API Calls with AWS CloudTrail
                    \n06\/14\/2017<\/p>\n

                    AWS CodeStar Notifications
                    \nLogging AWS CodeStar Notifications API Calls with AWS CloudTrail
                    \n11\/05\/2019<\/p>\n

                    Amazon Cognito
                    \nLogging Amazon Cognito API Calls with AWS CloudTrail
                    \n02\/18\/2016<\/p>\n

                    Amazon Comprehend
                    \nLogging Amazon Comprehend API Calls with AWS CloudTrail
                    \n01\/17\/2018<\/p>\n

                    Amazon Comprehend Medical
                    \nLogging Amazon Comprehend Medical API Calls by Using AWS CloudTrail
                    \n11\/27\/2018<\/p>\n

                    AWS Config
                    \nLogging AWS Config API Calls By with AWS CloudTrail
                    \n02\/10\/2015<\/p>\n

                    AWS Control Tower
                    \nLogging AWS Control Tower Actions with AWS CloudTrail
                    \n08\/12\/2019<\/p>\n

                    Amazon Data Lifecycle Manager
                    \nLogging Amazon Data Lifecycle Manager API Calls Using AWS CloudTrail
                    \n07\/24\/2018<\/p>\n

                    AWS Data Pipeline
                    \nLogging AWS Data Pipeline API Calls by using AWS CloudTrail
                    \n12\/02\/2014<\/p>\n

                    AWS Database Migration Service (AWS DMS)
                    \nLogging AWS Database Migration Service API Calls Using AWS CloudTrail
                    \n02\/04\/2016<\/p>\n

                    AWS DataSync
                    \nLogging AWS DataSync API Calls with AWS CloudTrail
                    \n11\/26\/2018<\/p>\n

                    Amazon Detective
                    \nLogging Amazon Detective API calls with AWS CloudTrail
                    \n03\/31\/2020<\/p>\n

                    AWS Device Farm
                    \nLogging AWS Device Farm API Calls By Using AWS CloudTrail
                    \n07\/13\/2015<\/p>\n

                    AWS Direct Connect
                    \nLogging AWS Direct Connect API Calls in AWS CloudTrail
                    \n03\/08\/2014<\/p>\n

                    AWS Directory Service
                    \nLogging AWS Directory Service API Calls by Using CloudTrail
                    \n05\/14\/2015<\/p>\n

                    Amazon DocumentDB (with MongoDB compatibility)
                    \nLogging Amazon DocumentDB API Calls with AWS CloudTrail
                    \n01\/09\/2019<\/p>\n

                    Amazon DynamoDB
                    \nLogging DynamoDB Operations By Using AWS CloudTrail
                    \n05\/28\/2015<\/p>\n

                    Amazon Elastic Container Registry (Amazon ECR)
                    \nLogging Amazon ECR API Calls By Using AWS CloudTrail
                    \n12\/21\/2015<\/p>\n

                    Amazon Elastic Container Service (Amazon ECS)
                    \nLogging Amazon ECS API Calls By Using AWS CloudTrail
                    \n04\/09\/2015<\/p>\n

                    AWS Elastic Beanstalk (Elastic Beanstalk)
                    \nUsing Elastic Beanstalk API Calls with AWS CloudTrail
                    \n03\/31\/2014<\/p>\n

                    Amazon Elastic Block Store (Amazon EBS)
                    \nLogging API Calls Using AWS CloudTrail
                    \nAmazon EBS: 11\/13\/2013<\/p>\n

                    EBS direct APIs
                    \nLog API Calls for the EBS direct APIs with AWS CloudTrail
                    \nEBS direct APIs: 06\/30\/2020<\/p>\n

                    Amazon Elastic Compute Cloud (Amazon EC2)
                    \nLogging API Calls Using AWS CloudTrail
                    \n11\/13\/2013<\/p>\n

                    Amazon EC2 Auto Scaling
                    \nLogging Auto Scaling API Calls By Using CloudTrail
                    \n07\/16\/2014<\/p>\n

                    Amazon EC2 Image Builder
                    \nLogging EC2 Image Builder API calls using CloudTrail
                    \n12\/02\/2019<\/p>\n

                    Amazon Elastic File System (Amazon EFS)
                    \nLogging Amazon EFS API Calls with AWS CloudTrail
                    \n06\/28\/2016<\/p>\n

                    Amazon Fraud Detector
                    \nLogging Amazon Fraud Detector API Calls with AWS CloudTrail
                    \n01\/09\/2020<\/p>\n

                    Amazon GameSparks
                    \nLog GameSparks API calls with AWS CloudTrail
                    \n03\/23\/2022<\/p>\n

                    Amazon Elastic Kubernetes Service (Amazon EKS)
                    \nLogging Amazon EKS API Calls with AWS CloudTrail
                    \n06\/05\/2018<\/p>\n

                    Elastic Load Balancing
                    \nAWS CloudTrail Logging for Your Classic Load Balancer\u00a0and\u00a0AWS CloudTrail Logging for Your Application Load Balancer
                    \n04\/04\/2014<\/p>\n

                    Amazon Elastic Transcoder
                    \nLogging Amazon Elastic Transcoder API Calls with AWS CloudTrail
                    \n10\/27\/2014<\/p>\n

                    Amazon ElastiCache
                    \nLogging Amazon ElastiCache API Calls Using AWS CloudTrail
                    \n09\/15\/2014<\/p>\n

                    Amazon OpenSearch Service
                    \nAuditing Amazon OpenSearch Service Domains with AWS CloudTrail
                    \n10\/01\/2015<\/p>\n

                    AWS Elemental MediaConnect
                    \nLogging AWS Elemental MediaConnect API Calls with AWS CloudTrail
                    \n11\/27\/2018<\/p>\n

                    AWS Elemental MediaConvert
                    \nLogging AWS Elemental MediaConvert API Calls with CloudTrail
                    \n11\/27\/2017<\/p>\n

                    AWS Elemental MediaLive
                    \nLogging MediaLive API Calls with AWS CloudTrail
                    \n01\/19\/2019<\/p>\n

                    AWS Elemental MediaPackage
                    \nLogging AWS Elemental MediaPackage API Calls with AWS CloudTrail
                    \n12\/21\/2018<\/p>\n

                    AWS Elemental MediaStore
                    \nLogging AWS Elemental MediaStore API Calls with CloudTrail
                    \n11\/27\/2017<\/p>\n

                    AWS Elemental MediaTailor
                    \nLogging AWS Elemental MediaTailor API Calls with AWS CloudTrail
                    \n02\/11\/2019<\/p>\n

                    Amazon EMR
                    \nLogging Amazon EMR API Calls in AWS CloudTrail
                    \n04\/04\/2014<\/p>\n

                    Amazon EMR on EKS
                    \nLogging Amazon EMR on EKS API calls using AWS CloudTrail
                    \n12\/09\/2020<\/p>\n

                    AWS Fault Injection Simulator
                    \nLog API calls with AWS CloudTrail
                    \n03\/15\/2021<\/p>\n

                    AWS Firewall Manager
                    \nLogging AWS Firewall Manager API Calls with AWS CloudTrail
                    \n04\/05\/2018<\/p>\n

                    Amazon Forecast
                    \nLogging Amazon Forecast API Calls with AWS CloudTrail
                    \n11\/28\/2018<\/p>\n

                    FreeRTOS Over-the-Air Updates (OTA)
                    \nLogging AWS IoT OTA API Calls with AWS CloudTrail
                    \n05\/22\/2019<\/p>\n

                    Amazon FSx for Lustre
                    \nLogging Amazon FSx for Lustre API Calls with AWS CloudTrail
                    \n01\/11\/2019<\/p>\n

                    Amazon FSx for Windows File Server
                    \nMonitoring with AWS CloudTrail
                    \n11\/28\/2018<\/p>\n

                    Amazon GameLift
                    \nLogging Amazon GameLift API Calls with AWS CloudTrail
                    \n01\/27\/2016<\/p>\n

                    Amazon S3 Glacier
                    \nLogging S3 Glacier API Calls By Using AWS CloudTrail
                    \n12\/11\/2014<\/p>\n

                    AWS Global Accelerator
                    \nLogging AWS Global Accelerator API Calls with AWS CloudTrail
                    \n11\/26\/2018<\/p>\n

                    AWS Glue
                    \nLogging AWS Glue Operations Using AWS CloudTrail
                    \n11\/07\/2017<\/p>\n

                    AWS Ground Station
                    \nLogging AWS Ground Station API Calls with AWS CloudTrail
                    \n05\/31\/2019<\/p>\n

                    Amazon GuardDuty
                    \nLogging Amazon GuardDuty API Calls with AWS CloudTrail
                    \n02\/12\/2018<\/p>\n

                    AWS Health
                    \nLogging AWS Health API Calls with AWS CloudTrail
                    \n11\/21\/2016<\/p>\n

                    Amazon HealthLake
                    \nLogging Amazon HealthLake API calls with AWS CloudTrail
                    \n12\/07\/2020<\/p>\n

                    Amazon Honeycode
                    \nLogging Amazon Honeycode API Calls with AWS CloudTrail
                    \n06\/24\/2020<\/p>\n

                    Amazon Inspector
                    \nLogging Amazon Inspector API calls with AWS CloudTrail
                    \n04\/20\/2016<\/p>\n

                    Amazon Interactive Video Service
                    \nLogging Amazon IVS API Calls with AWS CloudTrail
                    \n07\/15\/2020<\/p>\n

                    AWS IoT
                    \nLogging AWS IoT API Calls with AWS CloudTrail
                    \n04\/11\/2016<\/p>\n

                    AWS IoT Analytics
                    \nLogging AWS IoT Analytics API calls with AWS CloudTrail
                    \n04\/23\/2018<\/p>\n

                    AWS IoT 1-Click
                    \nLogging AWS IoT 1-Click API Calls with AWS CloudTrail
                    \n05\/14\/2018<\/p>\n

                    AWS IoT Events
                    \nLogging AWS IoT Events API Calls with AWS CloudTrail
                    \n06\/11\/2019<\/p>\n

                    AWS IoT Greengrass
                    \nLogging AWS IoT Greengrass API Calls with AWS CloudTrail
                    \n10\/29\/2018<\/p>\n

                    AWS IoT Greengrass V2
                    \nLog AWS IoT Greengrass V2 API calls with AWS CloudTrail
                    \n12\/14\/2020<\/p>\n

                    AWS IoT SiteWise
                    \nLogging AWS IoT SiteWise API calls with AWS CloudTrail
                    \n04\/29\/2020<\/p>\n

                    AWS IoT Things Graph
                    \nLogging AWS IoT Things Graph API Calls with AWS CloudTrail
                    \n05\/31\/2019<\/p>\n

                    AWS Identity and Access Management (IAM)
                    \nLogging IAM Events with AWS CloudTrail
                    \n11\/13\/2013<\/p>\n

                    Amazon Kendra
                    \nLogging Amazon Kendra API calls with AWS CloudTrail
                    \n05\/11\/2020<\/p>\n

                    AWS Key Management Service (AWS KMS)
                    \nLogging AWS KMS API Calls using AWS CloudTrail
                    \n11\/12\/2014<\/p>\n

                    Amazon Kinesis Data Analytics
                    \nMonitoring Amazon Kinesis Data Analytics with AWS CloudTrail (SQL Applications)\u00a0and\u00a0Monitoring Amazon Kinesis Data Analytics with AWS CloudTrail (Apache Flink Applications)
                    \n03\/22\/2019<\/p>\n

                    Amazon Kinesis Data Firehose
                    \nMonitoring Amazon Kinesis Data Firehose API Calls with AWS CloudTrail
                    \n03\/17\/2016<\/p>\n

                    Amazon Kinesis Data Streams
                    \nLogging Amazon Kinesis Data Streams API Calls Using AWS CloudTrail
                    \n04\/25\/2014<\/p>\n

                    Amazon Kinesis Video Streams
                    \nLogging Kinesis Video Streams API Calls with AWS CloudTrail
                    \n05\/24\/2018<\/p>\n

                    AWS Lake Formation
                    \nLogging AWS Lake Formation API Calls Using AWS CloudTrail
                    \n08\/09\/2019<\/p>\n

                    AWS Lambda
                    \nLogging AWS Lambda API Calls By Using AWS CloudTrail
                    \nManagement events: 04\/09\/2015<\/p>\n

                    Using Lambda with AWS CloudTrail
                    \nData events: 11\/30\/2017<\/p>\n

                    Amazon Lex
                    \nLogging Amazon Lex API Calls with CloudTrail
                    \n08\/15\/2017<\/p>\n

                    AWS License Manager
                    \nLogging AWS License Manager API Calls with AWS CloudTrail
                    \n03\/01\/2019<\/p>\n

                    Amazon Lightsail
                    \nLogging Lightsail API Calls with AWS CloudTrail
                    \n12\/23\/2016<\/p>\n

                    Amazon Location Service
                    \nLogging and monitoring with AWS CloudTrail
                    \n12\/15\/2020<\/p>\n

                    Amazon Lookout for Vision
                    \nLogging Amazon Lookout for Vision calls with AWS CloudTrail
                    \n12\/01\/2020<\/p>\n

                    Amazon Lookout for Equipment
                    \nMonitoring Amazon Lookout for Equipment calls with AWS CloudTrail
                    \n12\/01\/2020<\/p>\n

                    Amazon Lookout for Metrics
                    \nViewing Amazon Lookout for Metrics API activity in AWS CloudTrail
                    \n12\/08\/2020<\/p>\n

                    Amazon Machine Learning
                    \nLogging Amazon ML API Calls By Using AWS CloudTrail
                    \n12\/10\/2015<\/p>\n

                    Amazon Macie
                    \nLog Amazon Macie API calls using AWS CloudTrail
                    \n05\/13\/2020<\/p>\n

                    Amazon Managed Blockchain
                    \nLogging Amazon Managed Blockchain API calls using AWS CloudTrail
                    \n04\/01\/2019<\/p>\n

                    Logging Ethereum for Managed Blockchain API calls using AWS CloudTrail\u00a0(Preview)<\/p>\n

                    Amazon Managed Grafana
                    \nLogging Amazon Managed Grafana API calls using AWS CloudTrail
                    \n12\/15\/2020<\/p>\n

                    Amazon Managed Service for Prometheus
                    \nLogging Amazon Managed Service for Prometheus API calls using AWS CloudTrail
                    \n12\/15\/2020<\/p>\n

                    Amazon Keyspaces (for Apache Cassandra)
                    \nLogging Amazon Keyspaces API calls with AWS CloudTrail
                    \n01\/13\/2020<\/p>\n

                    AWS Managed Services
                    \nAWS Managed Services
                    \n12\/21\/2016<\/p>\n

                    Amazon Managed Streaming for Apache Kafka
                    \nLogging Amazon MSK API Calls with AWS CloudTrail
                    \n12\/11\/2018<\/p>\n

                    Amazon Managed Workflows for Apache Airflow
                    \nMonitoring Amazon MWAA API activity with AWS CloudTrail
                    \n11\/24\/2020<\/p>\n

                    AWS Marketplace
                    \nLogging AWS Marketplace API Calls with AWS CloudTrail
                    \n05\/02\/2017<\/p>\n

                    AWS Marketplace Metering Service
                    \nLogging AWS Marketplace API Calls with AWS CloudTrail
                    \n08\/22\/2018<\/p>\n

                    AWS Migration Hub
                    \nLogging AWS Migration Hub API Calls with AWS CloudTrail
                    \n08\/14\/2017<\/p>\n

                    AWS Mobile Hub
                    \nLogging AWS Mobile CLI API Calls with AWS CloudTrail
                    \n06\/29\/2018<\/p>\n

                    Amazon MQ
                    \nLogging Amazon MQ API Calls Using AWS CloudTrail
                    \n07\/19\/2018<\/p>\n

                    Amazon Neptune
                    \nLogging Amazon Neptune API Calls Using AWS CloudTrail
                    \n05\/30\/2018<\/p>\n

                    AWS Network Firewall
                    \nLogging calls to the AWS Network Firewall API with AWS CloudTrail
                    \n11\/17\/2020<\/p>\n

                    AWS OpsWorks for Chef Automate
                    \nLogging AWS OpsWorks for Chef Automate API Calls with AWS CloudTrail
                    \n07\/16\/2018<\/p>\n

                    AWS OpsWorks for Puppet Enterprise
                    \nLogging OpsWorks for Puppet Enterprise API Calls with AWS CloudTrail
                    \n07\/16\/2018<\/p>\n

                    AWS OpsWorks Stacks
                    \nLogging AWS OpsWorks Stacks API Calls with AWS CloudTrail
                    \n06\/04\/2014<\/p>\n

                    AWS Organizations
                    \nLogging AWS Organizations Events with AWS CloudTrail
                    \n02\/27\/2017<\/p>\n

                    AWS Outposts
                    \nLogging AWS Outposts API calls with AWS CloudTrail
                    \n02\/04\/2020<\/p>\n

                    AWS Health Dashboard
                    \nLogging AWS Health API Calls with AWS CloudTrail
                    \n12\/01\/2016<\/p>\n

                    Amazon Personalize
                    \nLogging Amazon Personalize API Calls with AWS CloudTrail
                    \n11\/28\/2018<\/p>\n

                    Amazon Pinpoint
                    \nLogging Amazon Pinpoint API Calls with AWS CloudTrail
                    \n02\/06\/2018<\/p>\n

                    Amazon Pinpoint SMS and Voice API
                    \nLogging Amazon Pinpoint API Calls with AWS CloudTrail
                    \n11\/16\/2018<\/p>\n

                    Amazon Polly
                    \nLogging Amazon Polly API Calls with AWS CloudTrail
                    \n11\/30\/2016<\/p>\n

                    Amazon Quantum Ledger Database (Amazon QLDB)
                    \nLogging Amazon QLDB API Calls with AWS CloudTrail
                    \n09\/10\/2019<\/p>\n

                    AWS Certificate Manager Private Certificate Authority
                    \nUsing CloudTrail
                    \n04\/04\/2018<\/p>\n

                    Amazon QuickSight
                    \nLogging Operations with CloudTrail
                    \n04\/28\/2017<\/p>\n

                    Amazon Redshift
                    \nLogging Amazon Redshift API Calls with AWS CloudTrail
                    \n06\/10\/2014<\/p>\n

                    Amazon Rekognition
                    \nLogging Amazon Rekognition API Calls Using AWS CloudTrail
                    \n04\/6\/2018<\/p>\n

                    Amazon Relational Database Service (Amazon RDS)
                    \nLogging Amazon RDS API Calls Using AWS CloudTrail
                    \n11\/13\/2013<\/p>\n

                    Amazon RDS Performance Insights
                    \nLogging Amazon RDS API Calls Using AWS CloudTrail
                    \n06\/21\/2018<\/p>\n

                    The Amazon RDS Performance Insights API is a subset of the Amazon RDS API.<\/p>\n

                    AWS Resilience Hub
                    \nAWS CloudTrail
                    \n11\/10\/2021<\/p>\n

                    AWS Resource Access Manager (AWS RAM)
                    \nLogging AWS RAM API Calls with AWS CloudTrail
                    \n11\/20\/2018<\/p>\n

                    AWS Resource Groups
                    \nLogging AWS Resource Groups API Calls with AWS CloudTrail
                    \n06\/29\/2018<\/p>\n

                    AWS RoboMaker
                    \nLogging AWS RoboMaker API Calls with AWS CloudTrail
                    \n01\/16\/2019<\/p>\n

                    Amazon Route\u00a053
                    \nUsing AWS CloudTrail to Capture Requests Sent to the Route\u00a053 API
                    \n02\/11\/2015<\/p>\n

                    Amazon Route\u00a053 Application Recovery Controller
                    \nLogging Amazon Route\u00a053 Application Recovery Controller API calls using AWS CloudTrail
                    \n07\/27\/2021<\/p>\n

                    Amazon SageMaker
                    \nLogging Amazon SageMaker API Calls with AWS CloudTrail
                    \n01\/11\/2018<\/p>\n

                    AWS Secrets Manager
                    \nMonitor the Use of Your AWS Secrets Manager Secrets
                    \n04\/05\/2018<\/p>\n

                    AWS Security Hub
                    \nLogging AWS Security Hub API Calls with AWS CloudTrail
                    \n11\/27\/2018<\/p>\n

                    AWS Security Token Service (AWS STS)
                    \nLogging IAM Events with AWS CloudTrail
                    \n11\/13\/2013<\/p>\n

                    The IAM topic includes information for AWS STS.<\/p>\n

                    AWS Server Migration Service
                    \nAWS SMS API Reference
                    \n11\/14\/2016<\/p>\n

                    AWS Serverless Application Repository
                    \nLogging AWS Serverless Application Repository API Calls with AWS CloudTrail
                    \n02\/20\/2018<\/p>\n

                    AWS Service Catalog
                    \nLogging AWS Service Catalog API Calls with AWS CloudTrail
                    \n07\/06\/2016<\/p>\n

                    Service Quotas<\/p>\n

                    06\/24\/2019<\/p>\n

                    AWS Shield
                    \nLogging Shield Advanced API Calls with AWS CloudTrail
                    \n02\/08\/2018<\/p>\n

                    Amazon Simple Email Service (Amazon SES)
                    \nLogging Amazon SES API Calls By Using AWS CloudTrail
                    \n05\/07\/2015<\/p>\n

                    Amazon Simple Notification Service (Amazon SNS)
                    \nLogging Amazon Simple Notification Service API Calls By Using AWS CloudTrail
                    \n10\/09\/2014<\/p>\n

                    Amazon Simple Queue Service (Amazon SQS)
                    \nLogging Amazon SQS API Actions Using AWS CloudTrail
                    \n07\/16\/2014<\/p>\n

                    Amazon Simple Storage Service
                    \nLogging Amazon S3 API Calls By Using AWS CloudTrail
                    \nManagement events: 09\/01\/2015<\/p>\n

                    Data events: 11\/21\/2016<\/p>\n

                    Amazon Simple Workflow Service (Amazon SWF)
                    \nLogging Amazon Simple Workflow Service API Calls with AWS CloudTrail
                    \n05\/13\/2014<\/p>\n

                    AWS Single Sign-On (AWS SSO)
                    \nLogging AWS SSO API Calls with AWS CloudTrail
                    \n12\/07\/2017<\/p>\n

                    AWS Snowball
                    \nLogging AWS Snowball API Calls with AWS CloudTrail
                    \n01\/25\/2019<\/p>\n

                    AWS Snowball Edge
                    \nLogging AWS Snowball Edge API Calls with AWS CloudTrail
                    \n01\/25\/2019<\/p>\n

                    AWS Step Functions
                    \nLogging AWS Step Functions API Calls with AWS CloudTrail
                    \n12\/01\/2016<\/p>\n

                    Storage Gateway
                    \nLogging Storage Gateway API Calls by Using AWS CloudTrail
                    \n12\/16\/2014<\/p>\n

                    AWS Support
                    \nLogging AWS Support API Calls with AWS CloudTrail
                    \n04\/21\/2016<\/p>\n

                    AWS Systems Manager
                    \nLogging AWS Systems Manager API Calls with AWS CloudTrail
                    \n11\/13\/2013<\/p>\n

                    AWS Systems Manager Incident Manager
                    \nLogging AWS Systems Manager Incident Manager API calls using AWS CloudTrail
                    \n05\/10\/2021<\/p>\n

                    Amazon Textract
                    \nLogging Amazon Textract API Calls with AWS CloudTrail
                    \n05\/29\/2019<\/p>\n

                    Amazon Transcribe
                    \nLogging Amazon Transcribe API Calls with AWS CloudTrail
                    \n06\/28\/2018<\/p>\n

                    AWS Transfer for SFTP
                    \nLogging AWS Transfer for SFTP API Calls with AWS CloudTrail
                    \n01\/08\/2019<\/p>\n

                    Amazon Translate
                    \nLogging Amazon Translate API Calls with AWS CloudTrail
                    \n04\/04\/2018<\/p>\n

                    AWS Transit Gateway
                    \nLogging API Calls for Your Transit Gateway Using AWS CloudTrail
                    \n11\/26\/2018<\/p>\n

                    AWS Trusted Advisor
                    \nLogging AWS Trusted Advisor console actions with AWS CloudTrail
                    \n10\/22\/2020<\/p>\n

                    Amazon Virtual Private Cloud (Amazon VPC)
                    \nLogging API Calls Using AWS CloudTrail
                    \n11\/13\/2013<\/p>\n

                    The Amazon VPC API is a subset of the Amazon EC2 API.<\/p>\n

                    AWS WAF
                    \nLogging AWS WAF API Calls with AWS CloudTrail
                    \n04\/28\/2016<\/p>\n

                    AWS Well-Architected Tool
                    \nLogging AWS Well-Architected Tool API Calls with AWS CloudTrail
                    \n12\/15\/2020<\/p>\n

                    Amazon WorkDocs
                    \nLogging Amazon WorkDocs API Calls By Using AWS CloudTrail
                    \n08\/27\/2014<\/p>\n

                    Amazon WorkLink
                    \nLogging Amazon WorkLink API Calls with AWS CloudTrail
                    \n01\/23\/2019<\/p>\n

                    Amazon WorkMail
                    \nLogging Amazon WorkMail API Calls Using AWS CloudTrail
                    \n12\/12\/2017<\/p>\n

                    Amazon WorkSpaces
                    \nLogging Amazon WorkSpaces API Calls by Using CloudTrail
                    \n04\/09\/2015<\/p>\n

                    Amazon WorkSpaces Web
                    \nLogging Amazon WorkSpaces Web API calls using AWS CloudTrail
                    \n11\/30\/2021<\/p>\n

                    AWS X-Ray
                    \nLogging AWS X-Ray API Calls With CloudTrail
                    \n04\/25\/2018<\/p>\n<\/details>\n

                    AWS\u4e0d\u652f\u6301\u7684\u670d\u52a1\u5217\u8868AWS\u670d\u52a1 \u5f00\u59cb\u65e5\u671f<\/p>\n

                    AWS Import\/Export 2020\u5e746\u670817\u65e5
                    \nAWS Price List 2018\u5e7412\u670817\u65e5
                    \nAWS Deep Learning AMI 2017\u5e7411\u670815\u65e5
                    \nAmazon WorkSpaces Application Manager 2015\u5e744\u67089\u65e5
                    \nAWS Artifact 2016\u5e7411\u670830\u65e5
                    \nAWS DeepComposer 2019\u5e7412\u67082\u65e5
                    \nAWS DeepLens 2017\u5e7411\u670829\u65e5
                    \nAWS DeepRacer 2019\u5e744\u670829\u65e5
                    \nAWS Snowmobile 2016\u5e7411\u670830\u65e5
                    \nAmazon Sumerian 2018\u5e745\u670815\u65e5<\/p>\n<\/details>\n

                    \u8bf7\u63d0\u4f9b\u4e0b\u8ff0\u7684\u53c2\u8003\u8d44\u6599\u3002<\/h3>\n

                    \u4e9a\u9a6c\u900a\u7f51\u7edc\u670d\u52a1\u9ed1\u5e26_\u4e91\u8ddf\u8e2a<\/p>\n

                    \u4e8b\u524d\u51c6\u5907 (Sh\u00ec<\/h2>\n
                    \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8_2022-03-12_16_13_16.png<\/div>\n

                    CDK<\/h2>\n

                    \u6211\u5011\u5c07\u5728\u672c\u6b21\u9032\u884c\u4e2d\u4f7f\u7528\u591a\u500bStack\u4f86\u90e8\u7f72\u76f8\u95dc\u8cc7\u6e90\u3002<\/p>\n

                    \u6aa2\u67e5\u8005\u53ef\u6839\u64da\u9700\u8981\u6307\u5b9aContext\u7684slackWorkspaceId\u548cslackChannelId\u3002<\/p>\n

                    cdk.jsoncdk.json
                    \n{
                    \n“app”: “npx ts-node –prefer-ts-exts bin\/src.ts”,
                    \n“watch”: {
                    \n“include”: [
                    \n“**”
                    \n],
                    \n“exclude”: [
                    \n“README.md”,
                    \n“cdk*.json”,
                    \n“**\/*.d.ts”,
                    \n“**\/*.js”,
                    \n“tsconfig.json”,
                    \n“package*.json”,
                    \n“yarn.lock”,
                    \n“node_modules”,
                    \n“test”
                    \n]
                    \n},
                    \n“context”: {
                    \n“@aws-cdk\/aws-apigateway:usagePlanKeyOrderInsensitiveId”: true,
                    \n“@aws-cdk\/core:stackRelativeExports”: true,
                    \n“@aws-cdk\/aws-rds:lowercaseDbIdentifier”: true,
                    \n“@aws-cdk\/aws-lambda:recognizeVersionProps”: true,
                    \n“@aws-cdk\/aws-cloudfront:defaultSecurityPolicyTLSv1.2_2021”: true,
                    \n“@aws-cdk-containers\/ecs-service-extensions:enableDefaultLogDriver”: true,
                    \n“@aws-cdk\/core:target-partitions”: [
                    \n“aws”,
                    \n“aws-cn”
                    \n],
                    \n“prefix”: “\u6837\u672c”,
                    \n“slackWorkspaceId”:”xxxxxxxxx”,
                    \n“slackChannelId”:”xxxxxxxxxx”,
                    \n}
                    \n}<\/p>\n<\/details>\n
                    bin\/src.ts
                    \n#!\/usr\/bin\/env node
                    \nimport * as cdk from “aws-cdk-lib”;
                    \nimport { SnsStack } from “..\/lib\/sns-stack”;
                    \nimport { ChatbotStack } from “..\/lib\/chatbot-stack”;
                    \nimport { SecrityStack } from “..\/lib\/secrity-stack”;const app = new cdk.App();
                    \nconst prefix = app.node.tryGetContext(“prefix”); \/\/ \u83b7\u53d6Context\u4e2d\u6307\u5b9a\u7684prefix<\/p>\n

                    const snsStack = new SnsStack(app, `${prefix}-sns-stack`);
                    \nconst chatbotStack = new ChatbotStack(app, `${prefix}-chatbot-stack`, snsStack);
                    \nconst securityStack = new SecrityStack(app, `${prefix}-security-stack`, snsStack);<\/p>\n

                    chatbotStack.addDependency(snsStack);
                    \nsecurityStack.addDependency(snsStack);<\/p>\n<\/details>\n

                    lib\/sns-stack.tssns-stack.ts
                    \nimport * as cdk from “aws-cdk-lib”;
                    \nimport * as sns from “aws-cdk-lib\/aws-sns”;
                    \nimport * as iam from ‘aws-cdk-lib\/aws-iam’;<\/p>\n

                    export interface SnsStackProps {
                    \nreadonly snsTopic: sns.Topic
                    \n}<\/p>\n

                    export class SnsStack extends cdk.Stack {
                    \npublic readonly snsTopic: sns.Topic<\/p>\n

                    \/\/ \u521b\u5efaSNS\u4e3b\u9898
                    \nprivate createSnsTopic(name: string): sns.Topic {<\/p>\n

                    const snsTopic = new sns.Topic(this, `${name}`, {
                    \ndisplayName: “\u5b89\u5168\u901a\u77e5”,
                    \ntopicName: name,
                    \n});
                    \nsnsTopic.addToResourcePolicy(new iam.PolicyStatement({
                    \nsid: ‘SNSPublishingPermissions’,
                    \neffect: iam.Effect.ALLOW,
                    \nprincipals: [
                    \nnew iam.ServicePrincipal(‘config.amazonaws.com’),
                    \nnew iam.ServicePrincipal(‘events.amazonaws.com’)
                    \n],
                    \nactions: [‘SNS:Publish’],
                    \nresources: [snsTopic.topicArn],
                    \n}));
                    \nreturn snsTopic;
                    \n}<\/p>\n

                    constructor(scope: cdk.App, id: string, props?: cdk.StackProps) {
                    \nsuper(scope, id, props);<\/p>\n

                    const prefix = this.node.tryGetContext(“prefix”); \/\/ \u83b7\u53d6\u4e0a\u4e0b\u6587\u4e2d\u6307\u5b9a\u7684\u524d\u7f00<\/p>\n

                    this.snsTopic = this.createSnsTopic(`${prefix}-sns-topic`);
                    \n}
                    \n}<\/p>\n<\/details>\n

                    lib\/chatbot-stack.tschatbot-stack.ts
                    \nimport * as cdk from “aws-cdk-lib”;
                    \nimport * as sns from “aws-cdk-lib\/aws-sns”;
                    \nimport type { SnsStackProps } from “.\/sns-stack”
                    \nimport * as chatbot from “aws-cdk-lib\/aws-chatbot”;<\/p>\n

                    export class ChatbotStack extends cdk.Stack {<\/p>\n

                    \/\/ \u804a\u5929\u673a\u5668\u4eba
                    \nprivate createChatbot(name: string, sns: sns.Topic): chatbot.SlackChannelConfiguration {
                    \nconst slackWorkspaceId = this.node.tryGetContext(“slackWorkspaceId”); \/\/ \u83b7\u53d6\u4e0a\u4e0b\u6587\u4e2d\u6307\u5b9a\u7684slackworkspaceid
                    \nconst slackChannelId = this.node.tryGetContext(“slackChannelId”); \/\/ \u83b7\u53d6\u4e0a\u4e0b\u6587\u4e2d\u6307\u5b9a\u7684slackchannelid<\/p>\n

                    const slackchatbot = new chatbot.SlackChannelConfiguration(this, `${name}`, {
                    \nslackChannelConfigurationName: name,
                    \nslackWorkspaceId: slackWorkspaceId, \/\/ \u9884\u5148\u5728\u63a7\u5236\u53f0\u4e0a\u5411chatbot\u6388\u4e88\u8bbf\u95eeslackworkspace\u7684\u6743\u9650
                    \nslackChannelId: slackChannelId,
                    \nloggingLevel: chatbot.LoggingLevel.INFO,
                    \nnotificationTopics: [sns],
                    \n});
                    \nreturn slackchatbot;
                    \n}<\/p>\n

                    constructor(scope: cdk.App, id: string, SnsStack: SnsStackProps, props?: cdk.StackProps) {
                    \nsuper(scope, id, props);<\/p>\n

                    const prefix = this.node.tryGetContext(“prefix”); \/\/ \u83b7\u53d6\u4e0a\u4e0b\u6587\u4e2d\u6307\u5b9a\u7684\u524d\u7f00<\/p>\n

                    this.createChatbot(`${prefix}-chatbot`, SnsStack.snsTopic);
                    \n}
                    \n}<\/p>\n<\/details>\n

                    \u5b89\u5168\u5806\u6808<\/h3>\n

                    \u521b\u5efa\u8d44\u6e90<\/p>\n

                    \n
                    \u30ea\u30bd\u30fc\u30b9\u8a2d\u5b9a\u5024S3\u6697\u53f7\u5316
                    \n1\u5e74\u5f8c\u306bGlacier\u3078\u79fb\u884c
                    \n\u30d1\u30d6\u30ea\u30c3\u30af\u30fb\u30a2\u30af\u30bb\u30b9\u30d6\u30ed\u30c3\u30af
                    \n\u524a\u9664\u30dd\u30ea\u30b7\u30fc(Destroy)SecurityHub\u57fa\u790e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306e\u30d9\u30b9\u30c8\u30d7\u30e9\u30af\u30c6\u30a3\u30b9\u306e\u81ea\u52d5\u30c1\u30a7\u30c3\u30af\u6709\u52b9\u5316GuardDutyGuardDuty\u6709\u52b9\u5316CloudTrailCloudWatchlogs\u3078\u914d\u4fe1\u6709\u52b9\u5316
                    \n\u30ed\u30b0\u30d5\u30a1\u30a4\u30eb\u306e\u6574\u5408\u6027\u306e\u691c\u8a3c\u3092\u6709\u52b9Config\u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u308b\u5168\u3066\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u8a18\u9332(\u30b0\u30ed\u30fc\u30d0\u30eb\u30b5\u30fc\u30d3\u30b9\u542b\u3080)
                    \n24\u6642\u9593\u6bce\u306b\u8a18\u9332\u60c5\u5831\u3092S3\u3001sns\u306b\u914d\u4fe1EventBridgeGuardDuty->\u91cd\u8981\u5ea6\uff1a\u9ad8\u4ee5\u4e0a\u3067\u901a\u77e5
                    \nSecurityHub->\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u30c1\u30a7\u30c3\u30af\u306bPass\u3057\u306a\u304b\u3063\u305f\u3082\u306e\u3067\u3001\u91cd\u8981\u5ea6\u304cMIDDLE\u4ee5\u4e0a\u306e\u65b0\u898f\u9805\u76ee\u3092\u901a\u77e5
                    \nConfig->\u30ea\u30bd\u30fc\u30b9\u8a2d\u5b9a\u306a\u3069\u304c\u5909\u66f4\u3055\u308c\u305f\u3082\u306e\u3092\u901a\u77e5
                    \nTrail->Root\u30e6\u30fc\u30b6\u306b\u3088\u308bAWS\u30b3\u30f3\u30bd\u30fc\u30eb\u30ed\u30b0\u30a4\u30f3\u3092\u901a\u77e5<\/div>\n<\/div>\n

                    \u9664\u4e86\u9ed8\u8ba4\u7684\u5e94\u7528\u8bbe\u7f6e\u4e4b\u5916\u7684\u9879\u76ee<\/p>\n

                    import<\/span> *<\/span> as<\/span> cdk<\/span> from<\/span> \"<\/span>aws-cdk-lib<\/span>\"<\/span>;<\/span>\r\nimport<\/span> type<\/span> {<\/span> SnsStackProps<\/span> }<\/span> from<\/span> \"<\/span>.\/sns-stack<\/span>\"<\/span>\r\nimport<\/span> *<\/span> as<\/span> iam<\/span> from<\/span> '<\/span>aws-cdk-lib\/aws-iam<\/span>'<\/span>;<\/span>\r\nimport<\/span> *<\/span> as<\/span> sns<\/span> from<\/span> '<\/span>aws-cdk-lib\/aws-sns<\/span>'<\/span>;<\/span>\r\nimport<\/span> *<\/span> as<\/span> s3<\/span> from<\/span> \"<\/span>aws-cdk-lib\/aws-s3<\/span>\"<\/span>;<\/span>\r\nimport<\/span> *<\/span> as<\/span> sechub<\/span> from<\/span> '<\/span>aws-cdk-lib\/aws-securityhub<\/span>'<\/span>;<\/span>\r\nimport<\/span> *<\/span> as<\/span> guardduty<\/span> from<\/span> '<\/span>aws-cdk-lib\/aws-guardduty<\/span>'<\/span>;<\/span>\r\nimport<\/span> *<\/span> as<\/span> config<\/span> from<\/span> '<\/span>aws-cdk-lib\/aws-config<\/span>'<\/span>;<\/span>\r\nimport<\/span> *<\/span> as<\/span> trail<\/span> from<\/span> '<\/span>aws-cdk-lib\/aws-cloudtrail<\/span>'<\/span>;<\/span>\r\nimport<\/span> *<\/span> as<\/span> events<\/span> from<\/span> \"<\/span>aws-cdk-lib\/aws-events<\/span>\"<\/span>;<\/span>\r\nimport<\/span> *<\/span> as<\/span> targets<\/span> from<\/span> \"<\/span>aws-cdk-lib\/aws-events-targets<\/span>\"<\/span>;<\/span>\r\n\r\nexport<\/span> interface<\/span> SecrityStackProps<\/span> {<\/span>\r\n  readonly<\/span> s3bucket<\/span>:<\/span> s3<\/span>.<\/span>Bucket<\/span>;<\/span>\r\n}<\/span>\r\n\r\nexport<\/span> class<\/span> SecrityStack<\/span> extends<\/span> cdk<\/span>.<\/span>Stack<\/span> {<\/span>\r\n  public<\/span> readonly<\/span> s3bucket<\/span>:<\/span> s3<\/span>.<\/span>Bucket<\/span>;<\/span>\r\n\r\n  \/\/ S3<\/span>\r\n  private<\/span> createS3Bucket<\/span>(<\/span>name<\/span>:<\/span> string<\/span>):<\/span> s3<\/span>.<\/span>Bucket<\/span> {<\/span>\r\n    const<\/span> accountId<\/span> =<\/span> cdk<\/span>.<\/span>Stack<\/span>.<\/span>of<\/span>(<\/span>this<\/span>).<\/span>account<\/span>;<\/span>\r\n\r\n    const<\/span> s3bucket<\/span> =<\/span> new<\/span> s3<\/span>.<\/span>Bucket<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>`<\/span>,<\/span> {<\/span>\r\n      bucketName<\/span>:<\/span> name<\/span>,<\/span>\r\n      encryption<\/span>:<\/span> s3<\/span>.<\/span>BucketEncryption<\/span>.<\/span>S3_MANAGED<\/span>,<\/span>\r\n      blockPublicAccess<\/span>:<\/span> s3<\/span>.<\/span>BlockPublicAccess<\/span>.<\/span>BLOCK_ALL<\/span>,<\/span>\r\n      removalPolicy<\/span>:<\/span> cdk<\/span>.<\/span>RemovalPolicy<\/span>.<\/span>DESTROY<\/span>,<\/span> \/\/ \u52d5\u4f5c\u78ba\u8a8d\u5f8c\u306b\u524a\u9664\u3055\u305b\u308b\u305f\u3081'DESTROY'<\/span>\r\n      lifecycleRules<\/span>:<\/span> [{<\/span>\r\n        id<\/span>:<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-lifecycleRule`<\/span>,<\/span>\r\n        transitions<\/span>:<\/span> [<\/span>\r\n          {<\/span>storageClass<\/span>:<\/span> s3<\/span>.<\/span>StorageClass<\/span>.<\/span>GLACIER<\/span>,<\/span> transitionAfter<\/span>:<\/span> cdk<\/span>.<\/span>Duration<\/span>.<\/span>days<\/span>(<\/span>365<\/span>)},<\/span> \/\/ 1\u5e74\u5f8cGlacier\u3078<\/span>\r\n        ]<\/span>\r\n      }]<\/span>\r\n    });<\/span>\r\n    s3bucket<\/span>.<\/span>addToResourcePolicy<\/span>(<\/span>new<\/span> iam<\/span>.<\/span>PolicyStatement<\/span>({<\/span>\r\n      sid<\/span>:<\/span> `AWSConfigBucketPermissionsCheck`<\/span>,<\/span>\r\n      effect<\/span>:<\/span> iam<\/span>.<\/span>Effect<\/span>.<\/span>ALLOW<\/span>,<\/span>\r\n      principals<\/span>:<\/span> [<\/span>new<\/span> iam<\/span>.<\/span>ServicePrincipal<\/span>(<\/span>`config.amazonaws.com`<\/span>)],<\/span>\r\n      actions<\/span>:<\/span> [<\/span>\"<\/span>s3:GetBucketAcl<\/span>\"<\/span>],<\/span>\r\n      resources<\/span>:<\/span> [<\/span>s3bucket<\/span>.<\/span>bucketArn<\/span>],<\/span>\r\n    }))<\/span>\r\n    s3bucket<\/span>.<\/span>addToResourcePolicy<\/span>(<\/span>new<\/span> iam<\/span>.<\/span>PolicyStatement<\/span>({<\/span>\r\n      sid<\/span>:<\/span> `AWSConfigBucketDelivery`<\/span>,<\/span>\r\n      effect<\/span>:<\/span> iam<\/span>.<\/span>Effect<\/span>.<\/span>ALLOW<\/span>,<\/span>\r\n      principals<\/span>:<\/span> [<\/span>new<\/span> iam<\/span>.<\/span>ServicePrincipal<\/span>(<\/span>`config.amazonaws.com`<\/span>)],<\/span>\r\n      actions<\/span>:<\/span> [<\/span>\"<\/span>s3:PutObject<\/span>\"<\/span>],<\/span>\r\n      resources<\/span>:<\/span> [<\/span>s3bucket<\/span>.<\/span>bucketArn<\/span> +<\/span> \"<\/span>\/AWSLogs\/<\/span>\"<\/span> +<\/span> accountId<\/span> +<\/span> \"<\/span>\/*<\/span>\"<\/span>],<\/span>\r\n    }))<\/span>\r\n  return<\/span> s3bucket<\/span>;<\/span>\r\n  }<\/span>\r\n\r\n  \/\/ securityhub<\/span>\r\n  private<\/span> createSecurityHub<\/span>(<\/span>name<\/span>:<\/span> string<\/span>):<\/span> void<\/span> {<\/span>\r\n\r\n    const<\/span> securityhub<\/span> =<\/span> new<\/span> sechub<\/span>.<\/span>CfnHub<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>`<\/span>,<\/span> {<\/span>\r\n      tags<\/span>:<\/span> {<\/span>\r\n        key<\/span>:<\/span> \"<\/span>Name<\/span>\"<\/span>,<\/span>\r\n        value<\/span>:<\/span> `<\/span>${<\/span>name<\/span>}<\/span>`<\/span>,<\/span>\r\n      },<\/span>\r\n    });<\/span>\r\n  }<\/span>\r\n\r\n  \/\/ GuardDuty<\/span>\r\n  private<\/span> createGuardDuty<\/span>(<\/span>name<\/span>:<\/span> string<\/span>):<\/span> void<\/span> {<\/span>\r\n\r\n    const<\/span> detector<\/span> =<\/span> new<\/span> guardduty<\/span>.<\/span>CfnDetector<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>`<\/span>,<\/span> {<\/span>\r\n      enable<\/span>:<\/span> true<\/span>,<\/span>\r\n    });<\/span>\r\n  }<\/span>\r\n\r\n  \/\/ Config<\/span>\r\n  private<\/span> createConfig<\/span>(<\/span>name<\/span>:<\/span> string<\/span>,<\/span> sns<\/span>:<\/span> sns<\/span>.<\/span>Topic<\/span>,<\/span> s3<\/span>:<\/span> s3<\/span>.<\/span>IBucket<\/span>):<\/span> void<\/span> {<\/span>\r\n\r\n    const<\/span> configrole<\/span> =<\/span> new<\/span> iam<\/span>.<\/span>Role<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-configrole`<\/span>,<\/span> {<\/span>\r\n      roleName<\/span>:<\/span> name<\/span>,<\/span>\r\n      path<\/span>:<\/span> '<\/span>\/<\/span>'<\/span>,<\/span>\r\n      assumedBy<\/span>:<\/span> new<\/span> iam<\/span>.<\/span>CompositePrincipal<\/span>(<\/span>\r\n        new<\/span> iam<\/span>.<\/span>ServicePrincipal<\/span>(<\/span>'<\/span>config.amazonaws.com<\/span>'<\/span>)<\/span>\r\n      ),<\/span>\r\n      managedPolicies<\/span>:<\/span> [<\/span>\r\n        iam<\/span>.<\/span>ManagedPolicy<\/span>.<\/span>fromAwsManagedPolicyName<\/span>(<\/span>'<\/span>service-role\/AWS_ConfigRole<\/span>'<\/span>),<\/span>\r\n      ]<\/span>\r\n    });<\/span>\r\n\r\n    const<\/span> recorder<\/span> =<\/span> new<\/span> config<\/span>.<\/span>CfnConfigurationRecorder<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-configdetector`<\/span>,<\/span> {<\/span>\r\n      name<\/span>:<\/span> name<\/span>,<\/span>\r\n      recordingGroup<\/span>:<\/span> {<\/span>\r\n        allSupported<\/span>:<\/span> true<\/span>,<\/span> \/\/ \u30b5\u30dd\u30fc\u30c8\u3055\u308c\u3066\u3044\u308b\u5168\u3066\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u8a18\u9332<\/span>\r\n        includeGlobalResourceTypes<\/span>:<\/span> true<\/span> \/\/ \u30b0\u30ed\u30fc\u30d0\u30eb\u30ea\u30bd\u30fc\u30b9\u3092\u542b\u3081\u308b<\/span>\r\n      },<\/span>\r\n      roleArn<\/span>:<\/span> configrole<\/span>.<\/span>roleArn<\/span>\r\n    });<\/span>\r\n\r\n    const<\/span> deliverychannel<\/span> =<\/span> new<\/span> config<\/span>.<\/span>CfnDeliveryChannel<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-cinfigdeliverychannel`<\/span>,<\/span> {<\/span>\r\n      name<\/span>:<\/span> name<\/span>,<\/span>\r\n      s3BucketName<\/span>:<\/span> s3<\/span>.<\/span>bucketName<\/span>,<\/span>\r\n      configSnapshotDeliveryProperties<\/span>:<\/span> {<\/span>deliveryFrequency<\/span>:<\/span> '<\/span>TwentyFour_Hours<\/span>'<\/span>},<\/span>\u3000<\/span>\/\/ 24\u6642\u9593\u6bce\u306b\u8a18\u9332\u60c5\u5831\u3092\u914d\u4fe1<\/span>\r\n      snsTopicArn<\/span>:<\/span> sns<\/span>.<\/span>topicArn<\/span>,<\/span>\r\n    });<\/span>\r\n  }<\/span>\r\n\r\n  \/\/ CloudTrail<\/span>\r\n  private<\/span> createCloudTrail<\/span>(<\/span>name<\/span>:<\/span> string<\/span>,<\/span> s3<\/span>:<\/span> s3<\/span>.<\/span>Bucket<\/span>):<\/span> void<\/span> {<\/span>\r\n\r\n    const<\/span> cloudtrail<\/span> =<\/span> new<\/span> trail<\/span>.<\/span>Trail<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>`<\/span>,<\/span> {<\/span>\r\n      trailName<\/span>:<\/span> name<\/span>,<\/span>\r\n      sendToCloudWatchLogs<\/span>:<\/span> true<\/span>,<\/span> \/\/ logs\u9001\u4fe1\u3092\u6709\u52b9<\/span>\r\n      enableFileValidation<\/span>:<\/span> true<\/span>,<\/span> \/\/ \u30ed\u30b0\u30d5\u30a1\u30a4\u30eb\u306e\u6574\u5408\u6027\u306e\u691c\u8a3c\u3092\u6709\u52b9<\/span>\r\n      bucket<\/span>:<\/span> s3<\/span>,<\/span>\r\n    });<\/span>\r\n  }<\/span>\r\n\r\n  \/\/ EventBridge<\/span>\r\n  private<\/span> createEvent<\/span>(<\/span>name<\/span>:<\/span> string<\/span>,<\/span> sns<\/span>:<\/span> sns<\/span>.<\/span>Topic<\/span>):<\/span> void<\/span> {<\/span>\r\n\r\n    \/\/ GuardDuty(\u8105\u5a01\u691c\u51fa\u306eEvent\u901a\u77e5)<\/span>\r\n    const<\/span> guardDutyRule<\/span> =<\/span> new<\/span> events<\/span>.<\/span>Rule<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-guardduty`<\/span>,<\/span> {<\/span>\r\n      eventPattern<\/span>:<\/span> {<\/span>\r\n        source<\/span>:<\/span> [<\/span>'<\/span>aws.guardduty<\/span>'<\/span>],<\/span>\r\n        detailType<\/span>:<\/span> [<\/span>'<\/span>GuardDuty Finding<\/span>'<\/span>],<\/span>\r\n        detail<\/span>:<\/span> {<\/span>\r\n          severity<\/span>:[{<\/span>numeric<\/span>:<\/span> [<\/span>\"<\/span>>=<\/span>\"<\/span>,<\/span> 7<\/span>]}]<\/span> \/\/\u3000\u91cd\u8981\u5ea6\uff1a\u9ad8\u3000\u4ee5\u4e0a\u3067\u901a\u77e5\u3002\u3000\u4f4e:0.1\u301c3.9,\u4e2d:4.0\u301c6.9,\u9ad8:7.0\u301c8.9<\/span>\r\n        }<\/span>\r\n      },<\/span>\r\n      ruleName<\/span>:<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-guardduty`<\/span>,<\/span>\r\n    });<\/span>\r\n    guardDutyRule<\/span>.<\/span>addTarget<\/span>(<\/span>new<\/span> targets<\/span>.<\/span>SnsTopic<\/span>(<\/span>sns<\/span>))<\/span> \r\n\r\n    \/\/ SecurityHub(\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u7d50\u679c\u306eEvent\u901a\u77e5)<\/span>\r\n    const<\/span> secrityHubRule<\/span> =<\/span> new<\/span> events<\/span>.<\/span>Rule<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-sechub`<\/span>,<\/span> {<\/span>\r\n      eventPattern<\/span>:<\/span> {<\/span>\r\n        source<\/span>:<\/span> [<\/span>'<\/span>aws.securityhub<\/span>'<\/span>],<\/span>\r\n        detailType<\/span>:<\/span> [<\/span>'<\/span>Security Hub Findings - Imported<\/span>'<\/span>],<\/span>\r\n        detail<\/span>:<\/span> {<\/span>\r\n          findings<\/span>:<\/span> {<\/span>\r\n            Compliance<\/span>:<\/span> {<\/span> Status<\/span>:<\/span> [<\/span>'<\/span>FAILED<\/span>'<\/span>,<\/span> '<\/span>WARNING<\/span>'<\/span>,<\/span> '<\/span>NOT_AVAILABLE<\/span>'<\/span>]},<\/span> \/\/\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30c1\u30a7\u30c3\u30af\u306b\"PASSED\"\u3057\u306a\u304b\u3063\u305f\u3082\u306e\u4ee5\u5916<\/span>\r\n            RecordState<\/span>:<\/span> [<\/span>'<\/span>ACTIVE<\/span>'<\/span>],<\/span>\r\n            Severity<\/span>:<\/span> {<\/span> Label<\/span>:<\/span> [<\/span>'<\/span>MEDIUM<\/span>'<\/span> ,<\/span>'<\/span>HIGH<\/span>'<\/span>,<\/span> '<\/span>CRITICAL<\/span>'<\/span>]},<\/span> \/\/\u3000\u91cd\u8981\u5ea6\u304cMEDIUM\u3001HIGH\u3001CRITICAL\u306e\u3082\u306e\u3092\u5bfe\u8c61<\/span>\r\n            Workflow<\/span>:<\/span> {<\/span> Status<\/span>:<\/span> [<\/span>'<\/span>NEW<\/span>'<\/span>]}<\/span> \/\/\u3000\u901a\u77e5\u6e08\u306e\u3082\u306e\u306f\u9664\u5916\u3057\u3066\u3001\u65b0\u898f\u306e\u3082\u306e\u3060\u3051<\/span>\r\n          }<\/span>\r\n        }<\/span>\r\n      },<\/span>\r\n      ruleName<\/span>:<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-sechub`<\/span>,<\/span>\r\n    });<\/span>\r\n    secrityHubRule<\/span>.<\/span>addTarget<\/span>(<\/span>new<\/span> targets<\/span>.<\/span>SnsTopic<\/span>(<\/span>sns<\/span>))<\/span>\r\n\r\n    \/\/ Config(\u30ea\u30bd\u30fc\u30b9\u5404\u7a2e\u306e\u8a2d\u5b9a\u5909\u66f4\u3067Event\u901a\u77e5)<\/span>\r\n    \/\/ \u203b\u901a\u77e5\u304c\u975e\u5e38\u306b\u591a\u304f\u306a\u308b\u306e\u3067\u5b9f\u969b\u306b\u306f\u5bfe\u8c61\u3092\u7d5e\u308b\u306a\u308a\u3059\u308b<\/span>\r\n    const<\/span> configRule<\/span> =<\/span> new<\/span> events<\/span>.<\/span>Rule<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-config`<\/span>,<\/span> {<\/span>\r\n      eventPattern<\/span>:<\/span> {<\/span>\r\n        source<\/span>:<\/span> [<\/span>'<\/span>aws.config<\/span>'<\/span>],<\/span>\r\n        detailType<\/span>:<\/span> [<\/span>'<\/span>Config Configuration Item Change<\/span>'<\/span>],<\/span>\r\n        detail<\/span>:<\/span> {<\/span>\r\n          messageType<\/span>:[<\/span>'<\/span>ConfigurationItemChangeNotification<\/span>'<\/span>]<\/span>\r\n        }<\/span>\r\n      },<\/span>\r\n      ruleName<\/span>:<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-config`<\/span>,<\/span>\r\n    });<\/span>\r\n    configRule<\/span>.<\/span>addTarget<\/span>(<\/span>new<\/span> targets<\/span>.<\/span>SnsTopic<\/span>(<\/span>sns<\/span>))<\/span>\r\n\r\n    \/\/ root login(root\u30e6\u30fc\u30b6\u306b\u3088\u308bAWS\u30b3\u30f3\u30bd\u30fc\u30eb\u30ed\u30b0\u30a4\u30f3\u3067Event\u901a\u77e5)<\/span>\r\n    const<\/span> rootloginRule<\/span> =<\/span> new<\/span> events<\/span>.<\/span>Rule<\/span>(<\/span>this<\/span>,<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-rootlogin`<\/span>,<\/span> {<\/span>\r\n      eventPattern<\/span>:<\/span> {<\/span>\r\n        detailType<\/span>:<\/span> [<\/span>'<\/span>AWS Console Sign In via CloudTrail<\/span>'<\/span>],<\/span>\r\n        detail<\/span>:<\/span> {<\/span>\r\n          userIdentity<\/span>:<\/span> {<\/span>\r\n            type<\/span>:<\/span> [<\/span>'<\/span>Root<\/span>'<\/span>]<\/span>\r\n          }<\/span>\r\n        }<\/span>\r\n      },<\/span>\r\n      ruleName<\/span>:<\/span> `<\/span>${<\/span>name<\/span>}<\/span>-rootlogin`<\/span>,<\/span>\r\n    });<\/span>\r\n    rootloginRule<\/span>.<\/span>addTarget<\/span>(<\/span>new<\/span> targets<\/span>.<\/span>SnsTopic<\/span>(<\/span>sns<\/span>))<\/span>\r\n  }<\/span>\r\n\r\n  constructor<\/span>(<\/span>scope<\/span>:<\/span> cdk<\/span>.<\/span>App<\/span>,<\/span> id<\/span>:<\/span> string<\/span>,<\/span> SnsStack<\/span>:<\/span> SnsStackProps<\/span>,<\/span> props<\/span>?:<\/span> cdk<\/span>.<\/span>StackProps<\/span>)<\/span> {<\/span>\r\n    super<\/span>(<\/span>scope<\/span>,<\/span> id<\/span>,<\/span> props<\/span>);<\/span>\r\n\r\n    const<\/span> prefix<\/span> =<\/span> this<\/span>.<\/span>node<\/span>.<\/span>tryGetContext<\/span>(<\/span>\"<\/span>prefix<\/span>\"<\/span>);<\/span> \/\/ Context\u3067\u6307\u5b9a\u3057\u305fprefix\u3092\u53d6\u5f97<\/span>\r\n\r\n    this<\/span>.<\/span>s3bucket<\/span> =<\/span> this<\/span>.<\/span>createS3Bucket<\/span>(<\/span>`<\/span>${<\/span>prefix<\/span>}<\/span>-s3bucket`<\/span>);<\/span>\r\n    this<\/span>.<\/span>createSecurityHub<\/span>(<\/span>`<\/span>${<\/span>prefix<\/span>}<\/span>-securityhub`<\/span>);<\/span>\r\n    this<\/span>.<\/span>createGuardDuty<\/span>(<\/span>`<\/span>${<\/span>prefix<\/span>}<\/span>-detector`<\/span>);<\/span>\r\n    this<\/span>.<\/span>createConfig<\/span>(<\/span>`<\/span>${<\/span>prefix<\/span>}<\/span>-config`<\/span>,<\/span> SnsStack<\/span>.<\/span>snsTopic<\/span>,<\/span> this<\/span>.<\/span>s3bucket<\/span>);<\/span>\r\n    this<\/span>.<\/span>createCloudTrail<\/span>(<\/span>`<\/span>${<\/span>prefix<\/span>}<\/span>-trail`<\/span>,<\/span>this<\/span>.<\/span>s3bucket<\/span>);<\/span>\r\n    this<\/span>.<\/span>createEvent<\/span>(<\/span>`<\/span>${<\/span>prefix<\/span>}<\/span>-event`<\/span>,<\/span> SnsStack<\/span>.<\/span>snsTopic<\/span>);<\/span>\r\n  }<\/span>\r\n}<\/span>\r\n<\/code><\/pre>\n
                    \u786e\u8ba4\u52a8\u4f5c\u901a\u8fc7Slack\u901a\u77e5<\/h2>\n
                    \u5b89\u5168\u4e2d\u5fc3<\/h3>\n
                    \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8_2022-03-22_1_04_35.png<\/div>\n
                    \u5b89\u5168\u536b\u58eb<\/h3>\n
                    \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8_2022-03-22_1_05_39.png<\/div>\n
                    \u914d\u7f6e<\/h3>\n
                    \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8_2022-03-22_1_05_03.png<\/div>\n
                    \u4e91\u8ff9\uff08RootLogin\uff09<\/h3>\n
                    \"\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8_2022-03-22_1_39_20.png<\/div>\n
                    \u6700\u540e<\/h2>\n
                    \u968f\u77402021\u5e74\u6625\u5b63\uff0cChatbot\u5728EventBridge\u4e0a\u5927\u5e45\u6269\u5c55\u4e86\u4e8b\u4ef6\u6a21\u5f0f\u7684\u652f\u6301\uff0c\u4ece\u800c\u4f7f\u5f97\u53ef\u4ee5\u5c06\u5404\u79cd\u4e8b\u4ef6\u8fdb\u884c\u534f\u4f5c\uff0c\u5e76\u4e14\u5b9e\u73b0\u4e86\u5bf9Slack\u7684\u901a\u77e5\u66f4\u52a0\u8f7b\u677e\u7684\u5b9e\u73b0\u3002AWS Chatbot\u901a\u8fc7Amazon EventBridge\u6269\u5c55\u4e86\u5bf9AWS\u670d\u52a1\u7684\u76d1\u63a7\u8303\u56f4\u3002<\/div>\n
                    \u4ee5\u524d\u6211\u4eec\u5fc5\u987b\u4f7f\u7528Lambda\u4e4b\u7c7b\u7684\u5de5\u5177\u6765\u8fdb\u884c\u4e00\u4e9b\u590d\u6742\u64cd\u4f5c\uff0c\u4f46\u7531\u4e8e\u8fd9\u4e2a\u539f\u56e0\uff0c\u73b0\u5728\u5373\u4f7f\u5728CDK\u4e2d\uff0c\u53ea\u8981\u5145\u5206\u5229\u7528EventBridge\uff0c\u6211\u4eec\u4e5f\u80fd\u57fa\u672c\u5b8c\u6210\uff0c\u611f\u89c9\u4e0aChatOps\u7684\u672a\u6765\u4f1a\u66f4\u987a\u5229\u3002<\/p>\n
                    \u6211\u770b\u8d77\u6765\u50cf\u4e00\u4e2a\u7ecf\u5e38\u4f7f\u7528CDK\u5c06\u901a\u77e5\u53d1\u9001\u5230Slack\u7684\u4eba\uff0c\u4f46\u7531\u4e8e\u5df2\u7ecf\u9002\u5e94\u4e86\uff0c\u6240\u4ee5\u4e0b\u6b21\u6211\u6253\u7b97\u5199\u70b9\u4e0d\u540c\u7684\u4e1c\u897f\uff01<\/p>\n
                    \u8bf7\u53c2\u8003<\/h2>\n
                    \u4ee5\u4e0b\u662f\u4e00\u4e9bAWS CDK\u4e2d\u4e0e\u5b89\u5168\u76f8\u5173\u7684\u6a21\u5757\u7684\u6587\u6863\u94fe\u63a5\uff1a<\/p>\n
                    1. AWS GuardDuty\u6a21\u5757\u6587\u6863\uff1ahttps:\/\/docs.aws.amazon.com\/cdk\/api\/v2\/docs\/aws-cdk-lib.aws_guardduty-readme.html<\/p>\n
                    2. AWS Config\u6a21\u5757\u6587\u6863\uff1ahttps:\/\/docs.aws.amazon.com\/cdk\/api\/v2\/docs\/aws-cdk-lib.aws_config-readme.html<\/p>\n
                    3. AWS SecurityHub\u6a21\u5757\u6587\u6863\uff1ahttps:\/\/docs.aws.amazon.com\/cdk\/api\/v2\/docs\/aws-cdk-lib.aws_securityhub-readme.html<\/p>\n
                    4. AWS CloudTrail\u6a21\u5757\u6587\u6863\uff1ahttps:\/\/docs.aws.amazon.com\/cdk\/api\/v2\/docs\/aws-cdk-lib.aws_cloudtrail-readme.html<\/p>\n","protected":false},"excerpt":{"rendered":"
                    \u9996\u5148 \u8fd9\u6b21\u6211\u7528CDK\u8bd5\u56fe\u5b9e\u73b0\u4e86\u5173\u4e8e\u5b89\u5168\u65b9\u9762\u7684Slack\u901a\u77e5\u3002\u4e0eChatbot\u6ca1\u6709\u76f4\u63a5\u96c6\u6210\u7684\u670d\u52a1\u5c06\u901a\u8fc7Event […]<\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-50642","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"yoast_head":"\n\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5 - Blog - Silicon Cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.silicloud.com\/zh\/blog\/\u3010cdk\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728slack\u4e0a\u7684\u901a\u77e5\/\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5\" \/>\n<meta property=\"og:description\" content=\"\u9996\u5148 \u8fd9\u6b21\u6211\u7528CDK\u8bd5\u56fe\u5b9e\u73b0\u4e86\u5173\u4e8e\u5b89\u5168\u65b9\u9762\u7684Slack\u901a\u77e5\u3002\u4e0eChatbot\u6ca1\u6709\u76f4\u63a5\u96c6\u6210\u7684\u670d\u52a1\u5c06\u901a\u8fc7Event […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.silicloud.com\/zh\/blog\/\u3010cdk\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728slack\u4e0a\u7684\u901a\u77e5\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog - Silicon Cloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-25T11:15:35+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-04-29T07:45:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d9310913a08637a6e57e1\/37-1.png\" \/>\n<meta name=\"author\" content=\"\u79d1, \u9896\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u79d1, \u9896\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"19 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/\",\"name\":\"\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5 - Blog - Silicon Cloud\",\"isPartOf\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\"},\"datePublished\":\"2023-03-25T11:15:35+00:00\",\"dateModified\":\"2024-04-29T07:45:02+00:00\",\"author\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/8ca01ba7f7362ad4edb7da206a12f29e\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/www.silicloud.com\/zh\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#website\",\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/\",\"name\":\"Blog - Silicon Cloud\",\"description\":\"\",\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/8ca01ba7f7362ad4edb7da206a12f29e\",\"name\":\"\u79d1, \u9896\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8a6fb3cc7ba2f69d2189ba532aec4633ea7ed75ac0af162ec367cb3abc0fb2af?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8a6fb3cc7ba2f69d2189ba532aec4633ea7ed75ac0af162ec367cb3abc0fb2af?s=96&d=mm&r=g\",\"caption\":\"\u79d1, \u9896\"},\"url\":\"https:\/\/www.silicloud.com\/zh\/blog\/author\/keying\/\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/#local-main-organization-logo\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Blog - Silicon Cloud\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5 - Blog - Silicon Cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.silicloud.com\/zh\/blog\/\u3010cdk\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728slack\u4e0a\u7684\u901a\u77e5\/","og_locale":"zh_CN","og_type":"article","og_title":"\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5","og_description":"\u9996\u5148 \u8fd9\u6b21\u6211\u7528CDK\u8bd5\u56fe\u5b9e\u73b0\u4e86\u5173\u4e8e\u5b89\u5168\u65b9\u9762\u7684Slack\u901a\u77e5\u3002\u4e0eChatbot\u6ca1\u6709\u76f4\u63a5\u96c6\u6210\u7684\u670d\u52a1\u5c06\u901a\u8fc7Event […]","og_url":"https:\/\/www.silicloud.com\/zh\/blog\/\u3010cdk\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728slack\u4e0a\u7684\u901a\u77e5\/","og_site_name":"Blog - Silicon Cloud","article_published_time":"2023-03-25T11:15:35+00:00","article_modified_time":"2024-04-29T07:45:02+00:00","og_image":[{"url":"https:\/\/cdn.silicloud.com\/blog-img\/blog\/img\/657d9310913a08637a6e57e1\/37-1.png"}],"author":"\u79d1, \u9896","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"\u79d1, \u9896","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"19 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/","url":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/","name":"\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5 - Blog - Silicon Cloud","isPartOf":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website"},"datePublished":"2023-03-25T11:15:35+00:00","dateModified":"2024-04-29T07:45:02+00:00","author":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/8ca01ba7f7362ad4edb7da206a12f29e"},"breadcrumb":{"@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.silicloud.com\/zh\/blog\/"},{"@type":"ListItem","position":2,"name":"\u3010CDK\u3011\u9a8c\u8bc1\u5b89\u5168\u76f8\u5173\u670d\u52a1\u5728Slack\u4e0a\u7684\u901a\u77e5"}]},{"@type":"WebSite","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#website","url":"https:\/\/www.silicloud.com\/zh\/blog\/","name":"Blog - Silicon Cloud","description":"","inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/8ca01ba7f7362ad4edb7da206a12f29e","name":"\u79d1, \u9896","image":{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8a6fb3cc7ba2f69d2189ba532aec4633ea7ed75ac0af162ec367cb3abc0fb2af?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8a6fb3cc7ba2f69d2189ba532aec4633ea7ed75ac0af162ec367cb3abc0fb2af?s=96&d=mm&r=g","caption":"\u79d1, \u9896"},"url":"https:\/\/www.silicloud.com\/zh\/blog\/author\/keying\/"},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.silicloud.com\/zh\/blog\/%e3%80%90cdk%e3%80%91%e9%aa%8c%e8%af%81%e5%ae%89%e5%85%a8%e7%9b%b8%e5%85%b3%e6%9c%8d%e5%8a%a1%e5%9c%a8slack%e4%b8%8a%e7%9a%84%e9%80%9a%e7%9f%a5\/#local-main-organization-logo","url":"","contentUrl":"","caption":"Blog - Silicon Cloud"}]}},"_links":{"self":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/50642","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/comments?post=50642"}],"version-history":[{"count":2,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/50642\/revisions"}],"predecessor-version":[{"id":86175,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/posts\/50642\/revisions\/86175"}],"wp:attachment":[{"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/media?parent=50642"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/categories?post=50642"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.silicloud.com\/zh\/blog\/wp-json\/wp\/v2\/tags?post=50642"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}