{"id":9186,"date":"2023-08-24T09:20:12","date_gmt":"2023-08-24T02:20:12","guid":{"rendered":"https:\/\/cmctelecomaws-final.demo6.servisense.agency\/?p=9186"},"modified":"2023-09-19T09:20:58","modified_gmt":"2023-09-19T02:20:58","slug":"toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws","status":"publish","type":"post","link":"https:\/\/aws.cmctelecom.vn\/en\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/","title":{"rendered":"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS"},"content":{"rendered":"<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a1111111-1073.jpg\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" \/><\/p>\n<p>Theo \u0111\u1ea1i di\u1ec7n CMC Telecom, khi c\u00e1c doanh nghi\u1ec7p tri\u1ec3n khai c\u00e1c d\u1ef1 \u00e1n chuy\u1ec3n \u0111\u1ed5i s\u1ed1 tr\u00ean AWS th\u00ec vi\u1ec7c \u0111\u1ea3m b\u1ea3o b\u1ea3o m\u1eadt v\u00e0 k\u1ebft n\u1ed1i an to\u00e0n v\u00e0o c\u00e1c t\u00e0i nguy\u00ean trong m\u00f4i tr\u01b0\u1eddng m\u1ea1ng ri\u00eang \u1ea3o t\u1eeb Internet l\u00e0 m\u1ed9t trong nh\u1eefng v\u1ea5n \u0111\u1ec1 \u01b0u ti\u00ean h\u00e0ng \u0111\u1ea7u. Th\u00f4ng th\u01b0\u1eddng, ch\u00fang ta s\u1ebd ph\u1ea3i k\u1ebft n\u1ed1i v\u1edbi Bastion Host c\u00f3 \u0111\u1ecba ch\u1ec9 IP public qua m\u1ed9t Internet Gateway (IGW) v\u00e0 t\u1eeb Bastion Host ti\u1ebfp t\u1ee5c truy c\u1eadp v\u00e0o c\u00e1c t\u00e0i nguy\u00ean trong private subnet b\u1eb1ng SSH ho\u1eb7c RDP.<\/p>\n<p>V\u00ec qu\u00e1 tr\u00ecnh k\u1ebft n\u1ed1i v\u00e0o private subnet y\u00eau c\u1ea7u nhi\u1ec1u t\u00e0i nguy\u00ean v\u00e0 c\u00e1c b\u01b0\u1edbc th\u1ee7 c\u00f4ng n\u00ean AWS \u0111\u00e3 cho ra m\u1eaft d\u1ecbch v\u1ee5 EIC Endpoint gi\u00fap kh\u00e1ch h\u00e0ng truy c\u1eadp v\u00e0o c\u00e1c t\u00e0i nguy\u00ean trong private subnet m\u00e0 kh\u00f4ng c\u1ea7n ph\u1ea3i qua b\u1ea5t k\u1ef3 \u1ee9ng d\u1ee5ng trung gian n\u00e0o. Ngo\u00e0i ra, EIC Endpoint c\u00f2n gi\u00fap doanh nghi\u1ec7p t\u1ed1i \u01b0u h\u00f3a \u0111\u1ea7u t\u01b0 b\u1ea3o m\u1eadt, y\u00ean t\u00e2m ph\u00e1t huy kh\u1ea3 n\u0103ng s\u00e1ng t\u1ea1o, t\u1eeb \u0111\u00f3 c\u00f3 th\u1ec3 ph\u1ea3n \u1ee9ng nhanh ch\u00f3ng tr\u01b0\u1edbc m\u1ecdi m\u1ed1i \u0111e d\u1ecda v\u00e0 lu\u00f4n \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 an to\u00e0n.<\/p>\n<p>Trong b\u00e0i vi\u1ebft d\u01b0\u1edbi \u0111\u00e2y, chuy\u00ean gia CMC Telecom cung c\u1ea5p cho doanh nghi\u1ec7p c\u00e1c th\u00f4ng tin v\u1ec1 d\u1ecbch v\u1ee5 n\u00e0y, c\u00f9ng c\u00e1ch thi\u1ebft l\u1eadp s\u1eed d\u1ee5ng Amazon EC2 Instance Connect (EIC) Endpoint \u0111\u1ec3 truy c\u1eadp v\u00e0o c\u00e1c t\u00e0i nguy\u00ean n\u1eb1m trong private subnet (trong b\u00e0i vi\u1ebft n\u00e0y l\u00e0 EC2 Instance).<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a2222-1074.jpg\" width=\"762\" height=\"350\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 762px; --smush-placeholder-aspect-ratio: 762\/350;\" \/><\/p>\n<p style=\"text-align: center;\"><em>K\u1ebft n\u1ed1i v\u00e0o EC2 instance trong private subnet th\u00f4ng qua Bastion Host<\/em><\/p>\n<p><strong>T\u1ed5ng quan v\u1ec1 Amazon EIC Endpoint<\/strong><\/p>\n<p>EIC Endpoint l\u00e0 m\u1ed9t d\u1ecbch v\u1ee5 cho ph\u00e9p truy c\u1eadp an to\u00e0n v\u00e0o c\u00e1c EC2 instances trong private subnet m\u00e0 kh\u00f4ng c\u1ea7n \u0111\u1ebfn Internet Gateway, Bastion Host hay \u0111\u1ecba ch\u1ec9 IP public. EIC Endpoint ho\u1ea1t \u0111\u1ed9ng v\u1edbi B\u1ea3ng \u0111i\u1ec1u khi\u1ec3n AWS, AWS CLI v\u00e0 c\u00e1c c\u00f4ng c\u1ee5 ph\u1ed5 bi\u1ebfn kh\u00e1c nh\u01b0 PuTTY v\u00e0 OpenSSH.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a333333-1075.jpg\" width=\"750\" height=\"427\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 750px; --smush-placeholder-aspect-ratio: 750\/427;\" \/><\/p>\n<p style=\"text-align: center;\">Ng\u01b0\u1eddi d\u00f9ng k\u1ebft n\u1ed1i v\u00e0o EC2 instance trong private subnet qua EIC Endpoint<\/p>\n<p>Theo chuy\u00ean gia CMC Telecom, EIC Endpoint mang l\u1ea1i cho doanh nghi\u1ec7p m\u1ed9t s\u1ed1 l\u1ee3i \u00edch nh\u1ea5t \u0111\u1ecbnh khi s\u1eed d\u1ee5ng. \u0110\u1ea7u ti\u00ean, EIC Endpoint kh\u00f4ng y\u00eau c\u1ea7u VPC c\u1ee7a doanh nghi\u1ec7p ph\u1ea3i c\u00f3 k\u1ebft n\u1ed1i Internet b\u1eb1ng vi\u1ec7c s\u1eed d\u1ee5ng d\u1ecbch v\u1ee5 Internet Gateway ho\u1eb7c NAT Gateway. Th\u1ee9 hai, doanh nghi\u1ec7p kh\u00f4ng c\u1ea7n c\u00e0i \u0111\u1eb7t th\u00eam b\u1ea5t c\u1ee9 \u1ee9ng d\u1ee5ng n\u00e0o tr\u00ean EC2 instance khi s\u1eed d\u1ee5ng EIC Endpoint \u0111\u1ec3 th\u1ef1c hi\u1ec7n vi\u1ec7c truy c\u1eadp. V\u00e0 cu\u1ed1i c\u00f9ng, doanh nghi\u1ec7p c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng IAM v\u00e0 Security Group \u0111\u1ec3 ki\u1ec3m so\u00e1t quy\u1ec1n truy c\u1eadp.<\/p>\n<p><strong>N\u00e2ng cao b\u1ea3o m\u1eadt<\/strong><\/p>\n<p>Ngo\u00e0i nh\u1eefng l\u1ee3i \u00edch tr\u00ean, EIC Endpoint c\u00f2n gi\u00fap doanh nghi\u1ec7p t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt b\u1eb1ng c\u00e1ch k\u1ebft h\u1ee3p x\u00e1c th\u1ef1c v\u00e0 \u1ee7y quy\u1ec1n d\u1ef1a tr\u00ean danh t\u00ednh v\u1edbi c\u00e1c \u0111i\u1ec1u khi\u1ec3n theo chu\u1ea9n m\u1ea1ng truy\u1ec1n th\u1ed1ng, cung c\u1ea5p ki\u1ec3m so\u00e1t truy c\u1eadp chi ti\u1ebft, logging, gi\u00e1m s\u00e1t v\u00e0 ph\u00f2ng th\u1ee7 \u0111a l\u1edbp.<\/p>\n<p>C\u1ee5 th\u1ec3, EIC Endpoint ki\u1ec3m so\u00e1t truy c\u1eadp d\u1ef1a tr\u00ean danh t\u00ednh: c\u00e1c IAM policies x\u00e1c \u0111\u1ecbnh ai c\u00f3 th\u1ec3 t\u1ea1o v\u00e0 truy c\u1eadp EIC Endpoint, th\u1ef1c thi c\u00e1c v\u1ea5n \u0111\u1ec1 v\u1ec1 x\u00e1c th\u1ef1c (authentication) v\u00e0 \u1ee7y quy\u1ec1n (authorization). Ngo\u00e0i ra, d\u1ecbch v\u1ee5 n\u00e0y c\u00f2n gi\u00fap doanh nghi\u1ec7p ki\u1ec3m so\u00e1t theo chu\u1ea9n m\u1ea1ng: c\u00e1c Security Groups li\u00ean k\u1ebft v\u1edbi c\u00e1c t\u00e0i nguy\u00ean trong VPC \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 cho ph\u00e9p ho\u1eb7c t\u1eeb ch\u1ed1i quy\u1ec1n k\u1ebft n\u1ed1i. Kh\u00f4ng ch\u1ec9 th\u1ebf, EIC Endpoint c\u00f3 th\u1ec3 t\u00e1ch bi\u1ec7t c\u00e1c \u0111\u1eb7c quy\u1ec1n: s\u1ef1 t\u00e1ch bi\u1ec7t gi\u1eefa control-plane v\u00e0 data-plane \u0111\u1ea3m b\u1ea3o r\u1eb1ng qu\u1ea3n tr\u1ecb vi\u00ean &#8211; ng\u01b0\u1eddi d\u00f9ng c\u00f3 \u0111\u1eb7c quy\u1ec1n ri\u00eang bi\u1ec7t trong vi\u1ec7c t\u1ea1o v\u00e0 s\u1eed d\u1ee5ng endpoint. Cu\u1ed1i c\u00f9ng l\u00e0 auditing v\u00e0 logging. C\u00e1c APIs khi \u0111\u01b0\u1ee3c g\u1ecdi \u0111\u1ebfn EIC Endpoint, t\u1ea5t c\u1ea3 \u0111\u1ec1u \u0111\u01b0\u1ee3c ghi l\u1ea1i trong AWS CloudTrail. \u0110i\u1ec1u n\u00e0y gi\u00fap doanh nghi\u1ec7p th\u1ea5y m\u1ed9t c\u00e1i nh\u00ecn t\u1ed5ng quan v\u1ec1 c\u00e1c ho\u1ea1t \u0111\u1ed9ng c\u1ee7a endpoint v\u00e0 ki\u1ec3m tra c\u00e1c v\u1ea5n \u0111\u1ec1 v\u1ec1 b\u1ea3o m\u1eadt hi\u1ec7u qu\u1ea3 h\u01a1n.<\/p>\n<p><strong>C\u00e1ch t\u1ea1o v\u00e0 s\u1eed d\u1ee5ng EIC Endpoint \u0111\u1ec3 k\u1ebft n\u1ed1i v\u00e0o EC2 Instance trong Private Subnet<\/strong><\/p>\n<p>M\u1ed7i VPC ch\u1ec9 c\u00f3 m\u1ed9t EIC Endpoint. \u0110\u1ec3 t\u1ea1o hay \u0111i\u1ec1u ch\u1ec9nh m\u1ed9t endpoint v\u00e0 k\u1ebft n\u1ed1i v\u00e0o EC2 instance, doanh nghi\u1ec7p ph\u1ea3i c\u00f3 c\u00e1c quy\u1ec1n IAM, v\u00e0 c\u00e1c Security Group li\u00ean k\u1ebft v\u1edbi EC2 instance ph\u1ea3i c\u00f3 quy\u1ec1n truy c\u1eadp. Doanh nghi\u1ec7p c\u00f3 th\u1ec3 tham kh\u1ea3o c\u00e1ch c\u1ea5u h\u00ecnh Security Groups v\u00e0 c\u00e1ch t\u1ea1o c\u00e1c quy\u1ec1n IAM trong t\u00e0i li\u1ec7u c\u1ee7a AWS.<\/p>\n<p>Sau khi \u0111\u00e3 t\u1ea1o xong c\u00e1c Security Groups v\u00e0 c\u00e1c quy\u1ec1n IAM c\u1ea7n thi\u1ebft, doanh nghi\u1ec7p c\u00f3 th\u1ec3 l\u00e0m theo c\u00e1c b\u01b0\u1edbc sau \u0111\u00e2y \u0111\u1ec3 t\u1ea1o k\u1ebft n\u1ed1i \u0111\u1ebfn EC2 instance th\u00f4ng qua EIC Endpoint:<\/p>\n<p><em>B\u01b0\u1edbc 1:\u00a0<\/em>T\u1ea1o EIC Endpoint: v\u00e0o giao di\u1ec7n VPC, sau \u0111\u00f3 ch\u1ecdn Endpoints v\u00e0 ch\u1ecdn Create endpoint.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a444444-1076.png\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" \/><\/p>\n<p>Ti\u1ebfp theo, \u1edf trang Create endpoint, c\u1ea7n \u0111i\u1ec1n t\u00ean cho endpoint \u1edf ph\u1ea7n Name tag, ch\u1ecdn EC2 Instance Connect Endpoint.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a55555555-1077.jpg\" width=\"757\" height=\"571\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 757px; --smush-placeholder-aspect-ratio: 757\/571;\" \/><\/p>\n<p>Sau \u0111\u00f3 ch\u1ecdn VPC, ch\u1ecdn Security groups \u0111\u00e3 t\u1ea1o tr\u01b0\u1edbc \u0111\u00f3, ch\u1ecdn Subnet t\u1ea1o EIC Endpoint, r\u1ed3i \u1ea5n ch\u1ecdn Create endpoint.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a6666666-1078.jpg\" width=\"770\" height=\"567\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 770px; --smush-placeholder-aspect-ratio: 770\/567;\" \/><\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a77777-1079.png\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" \/><\/p>\n<p><em>B\u01b0\u1edbc 2:\u00a0<\/em>K\u1ebft n\u1ed1i v\u00e0o EC2 instance: v\u00e0o giao di\u1ec7n EC2, ch\u1ecdn Instances, nh\u1ea5n v\u00e0o instance mu\u1ed1n k\u1ebft n\u1ed1i, ch\u1ecdn Connect.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a88888-1080.png\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" \/><\/p>\n<p>Sau \u0111\u00f3, ch\u1ecdn Connect using EC2 Instance Connect Endpoint, \u1edf m\u1ee5c EC2 Instance Connect Endpoint ch\u1ecdn endpoint v\u1eeba t\u1ea1o, r\u1ed3i ch\u1ecdn Connect.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a999999-1081.jpg\" width=\"797\" height=\"592\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 797px; --smush-placeholder-aspect-ratio: 797\/592;\" \/><\/p>\n<p>Sau \u0111\u00f3 ch\u00fang ta s\u1ebd \u0111\u01b0\u1ee3c chuy\u1ec3n \u0111\u1ebfn trang k\u1ebft n\u1ed1i v\u1edbi EC2 instance.<\/p>\n<p><img decoding=\"async\" data-src=\"https:\/\/static-images.vnncdn.net\/files\/publish\/2023\/8\/24\/a10000-1082.jpg\" width=\"765\" height=\"402\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" class=\"lazyload\" style=\"--smush-placeholder-width: 765px; --smush-placeholder-aspect-ratio: 765\/402;\" \/><\/p>\n<p>\u201cCh\u00fang t\u00f4i \u0111\u00e1nh gi\u00e1 r\u1eb1ng Amazon EC2 Instance Connect Endpoint cung c\u1ea5p m\u1ed9t gi\u1ea3i ph\u00e1p k\u1ebft n\u1ed1i an to\u00e0n \u0111\u1ebfn c\u00e1c t\u00e0i nguy\u00ean v\u00e0 d\u1ecbch v\u1ee5 \u0111\u01b0\u1ee3c \u0111\u1eb7t trong c\u00e1c private subnet b\u1eb1ng SSH ho\u1eb7c RDP m\u00e0 kh\u00f4ng c\u1ea7n s\u1eed d\u1ee5ng \u0111\u1ebfn Internet Gateway, \u0111\u1ecba ch\u1ec9 IP public v\u00e0 Bastion Host. B\u1eb1ng c\u00e1ch c\u1ea5u h\u00ecnh m\u1ed9t EIC Endpoint cho VPC, doanh nghi\u1ec7p c\u00f3 th\u1ec3 k\u1ebft n\u1ed1i m\u1ed9t c\u00e1ch an to\u00e0n b\u1eb1ng c\u00e1c c\u00f4ng c\u1ee5 s\u1eb5n c\u00f3 (PuTTY, OpenSSH, \u2026) ho\u1eb7c Console\/AWS CLI. Ch\u00fang t\u00f4i hy v\u1ecdng r\u1eb1ng b\u00e0i vi\u1ebft h\u1eefu \u00edch cho c\u00e1c doanh nghi\u1ec7p\u201d, \u0111\u1ea1i di\u1ec7n CMC Telecom b\u00e0y t\u1ecf.<\/p>\n<p>CMC Telecom hi\u1ec7n l\u00e0 \u0111\u1ed1i t\u00e1c d\u1ecbch v\u1ee5 c\u1ea5p cao c\u1ee7a AWS t\u1ea1i Vi\u1ec7t Nam. \u0110\u1ea7u n\u0103m 2023, doanh nghi\u1ec7p \u0111\u00e3 nh\u1eadn \u0111\u01b0\u1ee3c 2 gi\u1ea3i th\u01b0\u1edfng danh gi\u00e1 c\u1ee7a Asian Telecom Awards 2023 v\u1ec1 \u201cCloud s\u00e1ng t\u1ea1o c\u1ee7a n\u0103m\u201d v\u00e0 \u201cH\u1ea1 t\u1ea7ng s\u00e1ng t\u1ea1o c\u1ee7a n\u0103m\u201d.<\/p>","protected":false},"excerpt":{"rendered":"<p>V\u1eeba qua, CMC Telecom chia s\u1ebb th\u00f4ng tin chuy\u00ean s\u00e2u v\u1ec1 Amazon EC2 Instance Connect (EIC) Endpoint &#8211; d\u1ecbch v\u1ee5 cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng k\u1ebft n\u1ed1i \u0111\u1ebfn m\u1ea1ng con \u1ea3o kh\u00f4ng \u0111\u1ecbnh tuy\u1ebfn m\u1ed9t c\u00e1ch an to\u00e0n m\u00e0 kh\u00f4ng c\u1ea7n th\u00f4ng qua Bastion Host, IGW hay \u0111\u1ecba ch\u1ec9 IP public.<\/p>","protected":false},"author":4,"featured_media":9187,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9186","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ctelers-blogs"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS | CMC Telecom<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/aws.cmctelecom.vn\/en\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS | CMC Telecom\" \/>\n<meta property=\"og:description\" content=\"V\u1eeba qua, CMC Telecom chia s\u1ebb th\u00f4ng tin chuy\u00ean s\u00e2u v\u1ec1 Amazon EC2 Instance Connect (EIC) Endpoint - d\u1ecbch v\u1ee5 cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng k\u1ebft n\u1ed1i \u0111\u1ebfn m\u1ea1ng con \u1ea3o kh\u00f4ng \u0111\u1ecbnh tuy\u1ebfn m\u1ed9t c\u00e1ch an to\u00e0n m\u00e0 kh\u00f4ng c\u1ea7n th\u00f4ng qua Bastion Host, IGW hay \u0111\u1ecba ch\u1ec9 IP public.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/aws.cmctelecom.vn\/en\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/\" \/>\n<meta property=\"og:site_name\" content=\"CMC Telecom\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/CMCTelecomOfficial\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-24T02:20:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-09-19T02:20:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1286\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Phuong Ngo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Phuong Ngo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/\"},\"author\":{\"name\":\"Phuong Ngo\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/#\/schema\/person\/eeb1438a86642221ed8558b32aa3eb32\"},\"headline\":\"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS\",\"datePublished\":\"2023-08-24T02:20:12+00:00\",\"dateModified\":\"2023-09-19T02:20:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/\"},\"wordCount\":1495,\"publisher\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/#organization\"},\"image\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg\",\"articleSection\":[\"Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/\",\"url\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/\",\"name\":\"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS | CMC Telecom\",\"isPartOf\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg\",\"datePublished\":\"2023-08-24T02:20:12+00:00\",\"dateModified\":\"2023-09-19T02:20:58+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#primaryimage\",\"url\":\"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg\",\"contentUrl\":\"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg\",\"width\":2560,\"height\":1286},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Trang ch\u1ee7\",\"item\":\"https:\/\/aws.cmctelecom.vn\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blogs\",\"item\":\"https:\/\/aws.cmctelecom.vn\/en\/danh-muc-tin-tuc\/ctelers-blogs\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/#website\",\"url\":\"https:\/\/aws.cmctelecom.vn\/\",\"name\":\"CMC Telecom\",\"description\":\"\u0110\u1ed1i t\u00e1c D\u1ecbch v\u1ee5 C\u1ea5p cao c\u1ee7a AWS t\u1ea1i Vi\u1ec7t Nam\",\"publisher\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/#organization\"},\"alternateName\":\"AWS Advanced Partner in Vietnam\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/aws.cmctelecom.vn\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/#organization\",\"name\":\"CMC Telecom\",\"alternateName\":\"CMC Telecom\",\"url\":\"https:\/\/aws.cmctelecom.vn\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/07\/cmc-telecom-logo.png\",\"contentUrl\":\"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/07\/cmc-telecom-logo.png\",\"width\":400,\"height\":96,\"caption\":\"CMC Telecom\"},\"image\":{\"@id\":\"https:\/\/aws.cmctelecom.vn\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/CMCTelecomOfficial\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/aws.cmctelecom.vn\/#\/schema\/person\/eeb1438a86642221ed8558b32aa3eb32\",\"name\":\"Phuong Ngo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/acb27009527d4b45ba7747b1ffe153348d1b5a24b1958c47d4d71ec09effb94c?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/acb27009527d4b45ba7747b1ffe153348d1b5a24b1958c47d4d71ec09effb94c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/acb27009527d4b45ba7747b1ffe153348d1b5a24b1958c47d4d71ec09effb94c?s=96&d=mm&r=g\",\"caption\":\"Phuong Ngo\"},\"url\":\"https:\/\/aws.cmctelecom.vn\/en\/author\/phuong-nq\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS | CMC Telecom","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/aws.cmctelecom.vn\/en\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/","og_locale":"en_US","og_type":"article","og_title":"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS | CMC Telecom","og_description":"V\u1eeba qua, CMC Telecom chia s\u1ebb th\u00f4ng tin chuy\u00ean s\u00e2u v\u1ec1 Amazon EC2 Instance Connect (EIC) Endpoint - d\u1ecbch v\u1ee5 cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng k\u1ebft n\u1ed1i \u0111\u1ebfn m\u1ea1ng con \u1ea3o kh\u00f4ng \u0111\u1ecbnh tuy\u1ebfn m\u1ed9t c\u00e1ch an to\u00e0n m\u00e0 kh\u00f4ng c\u1ea7n th\u00f4ng qua Bastion Host, IGW hay \u0111\u1ecba ch\u1ec9 IP public.","og_url":"https:\/\/aws.cmctelecom.vn\/en\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/","og_site_name":"CMC Telecom","article_publisher":"https:\/\/www.facebook.com\/CMCTelecomOfficial","article_published_time":"2023-08-24T02:20:12+00:00","article_modified_time":"2023-09-19T02:20:58+00:00","og_image":[{"width":2560,"height":1286,"url":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg","type":"image\/jpeg"}],"author":"Phuong Ngo","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Phuong Ngo","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#article","isPartOf":{"@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/"},"author":{"name":"Phuong Ngo","@id":"https:\/\/aws.cmctelecom.vn\/#\/schema\/person\/eeb1438a86642221ed8558b32aa3eb32"},"headline":"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS","datePublished":"2023-08-24T02:20:12+00:00","dateModified":"2023-09-19T02:20:58+00:00","mainEntityOfPage":{"@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/"},"wordCount":1495,"publisher":{"@id":"https:\/\/aws.cmctelecom.vn\/#organization"},"image":{"@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#primaryimage"},"thumbnailUrl":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg","articleSection":["Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/","url":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/","name":"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS | CMC Telecom","isPartOf":{"@id":"https:\/\/aws.cmctelecom.vn\/#website"},"primaryImageOfPage":{"@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#primaryimage"},"image":{"@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#primaryimage"},"thumbnailUrl":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg","datePublished":"2023-08-24T02:20:12+00:00","dateModified":"2023-09-19T02:20:58+00:00","breadcrumb":{"@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#primaryimage","url":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg","contentUrl":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/09\/a1111111-1073-scaled.jpg","width":2560,"height":1286},{"@type":"BreadcrumbList","@id":"https:\/\/aws.cmctelecom.vn\/2023\/08\/24\/toi-uu-bao-mat-ket-noi-chuyen-biet-tren-dam-may-aws\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Trang ch\u1ee7","item":"https:\/\/aws.cmctelecom.vn\/"},{"@type":"ListItem","position":2,"name":"Blogs","item":"https:\/\/aws.cmctelecom.vn\/en\/danh-muc-tin-tuc\/ctelers-blogs\/"},{"@type":"ListItem","position":3,"name":"T\u1ed1i \u01b0u b\u1ea3o m\u1eadt, k\u1ebft n\u1ed1i chuy\u00ean bi\u1ec7t tr\u00ean \u0111\u00e1m m\u00e2y AWS"}]},{"@type":"WebSite","@id":"https:\/\/aws.cmctelecom.vn\/#website","url":"https:\/\/aws.cmctelecom.vn\/","name":"CMC Telecom","description":"CMC Telecom holds the position of a Advanced Tier Service Partner of AWS in Vietnam and has closely","publisher":{"@id":"https:\/\/aws.cmctelecom.vn\/#organization"},"alternateName":"AWS Advanced Partner in Vietnam","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/aws.cmctelecom.vn\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/aws.cmctelecom.vn\/#organization","name":"CMC Telecom","alternateName":"CMC Telecom","url":"https:\/\/aws.cmctelecom.vn\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aws.cmctelecom.vn\/#\/schema\/logo\/image\/","url":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/07\/cmc-telecom-logo.png","contentUrl":"https:\/\/aws.cmctelecom.vn\/wp-content\/uploads\/2023\/07\/cmc-telecom-logo.png","width":400,"height":96,"caption":"CMC Telecom"},"image":{"@id":"https:\/\/aws.cmctelecom.vn\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/CMCTelecomOfficial"]},{"@type":"Person","@id":"https:\/\/aws.cmctelecom.vn\/#\/schema\/person\/eeb1438a86642221ed8558b32aa3eb32","name":"Phuong Ngo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/acb27009527d4b45ba7747b1ffe153348d1b5a24b1958c47d4d71ec09effb94c?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/acb27009527d4b45ba7747b1ffe153348d1b5a24b1958c47d4d71ec09effb94c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/acb27009527d4b45ba7747b1ffe153348d1b5a24b1958c47d4d71ec09effb94c?s=96&d=mm&r=g","caption":"Phuong Ngo"},"url":"https:\/\/aws.cmctelecom.vn\/en\/author\/phuong-nq\/"}]}},"_links":{"self":[{"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/posts\/9186","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/comments?post=9186"}],"version-history":[{"count":0,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/posts\/9186\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/media\/9187"}],"wp:attachment":[{"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/media?parent=9186"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/categories?post=9186"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aws.cmctelecom.vn\/en\/wp-json\/wp\/v2\/tags?post=9186"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}