Upgrade to Pro — share decks privately, control downloads, hide ads and more …

[日本語]Amazon CloudFront with AWS Certificate Manager

[日本語]Amazon CloudFront with AWS Certificate Manager

CDNでコンテンツの配信を高速化
SSL証明書の管理を自動化

More Decks by Amimoto - Flexible Cloud WordPress Hosting

Other Decks in How-to & DIY

Transcript

  1. Amazon CloudFront
    with
    AWS Certificate Manager
    @Amimoto_Ami
    ja.amimoto-ami.com

    View Slide

  2. ΞʔΩςΫνϟ

    View Slide

  3. Amazon CloudFront
    AWS Certificate Manager
    w $%/Ͱίϯςϯπͷ഑৴Λߴ଎Խ
    w 44-ূ໌ॻͷ؅ཧΛࣗಈԽ
    ࣮ݱ͢Δ͜ͱ

    View Slide

  4. SSLূ໌ॻͷऔಘ
    Workflow
    ४උ

    View Slide

  5. ४උ

    View Slide

  6. ɾ[email protected]_domain
    ɾ[email protected]_domain
    ɾ[email protected]_domain
    ɾ[email protected]_domain
    ɾ[email protected]_domain
    υϝΠϯೝূ༻ϝʔϧΞυϨε

    View Slide

  7. ͢ͰʹυϝΠϯೝূ༻ϝʔϧΞυϨεͰ
    ϝʔϧͷड৴͕Մೳͳ৔߹͸ɺ
    ͜ΕҎ߱ͷ߲໨͸εΩοϓ͍ͯͩ͘͠͞
    υϝΠϯೝূ༻ϝʔϧΞυϨε

    View Slide

  8. υϝΠϯೝূ༻ϝʔϧΞυϨε͕࢖༻Ͱ
    ͖ͳ͍৔߹͸ AWS SES Ͱϝʔϧड৴͢
    ΔઃఆΛߦ͍·͢ɻ
    υϝΠϯೝূ༻ϝʔϧΞυϨε

    View Slide

  9. Amazon SES ઃఆ
    Workflow
    S3όέοτͷ४උ
    ߏஙલͷ
    ४උ

    View Slide

  10. Amazon SES ઃఆ
    Workflow
    S3όέοτͷ४උ
    ߏஙલͷ
    ४උ

    View Slide

  11. Amazon S3
    w "NB[PO4*NQMF4UPSBHF4FSWJDF
    w Πϯλʔωοτ༻ͷετϨʔδ
    w 4&4Ͱड৴ͨ͠ϝʔϧΛ֨ೲ͢ΔͨΊʹ࢖༻
    "NB[PO4

    View Slide

  12. όέοτϙϦγʔͷઃఆ
    Workflow
    S3όέοτͷ࡞੒

    View Slide

  13. όέοτϙϦγʔͷઃఆ
    Workflow
    S3όέοτͷ࡞੒

    View Slide

  14. View Slide

  15. Create Bucket ΛΫϦοΫ͠·͢

    View Slide

  16. Bucket Name, Region Λೖྗ͠ Create

    View Slide

  17. όέοτϙϦγʔͷઃఆ
    Workflow
    S3όέοτͷ࡞੒

    View Slide

  18. Properties - Permissions - Add bucket policy

    View Slide

  19. Bucket Policy Λઃఆ͠ Save

    View Slide

  20. Bucket Policy
    https://docs.aws.amazon.com/ses/latest/DeveloperGuide/
    receiving-email-permissions.html

    View Slide

  21. Amazon SES ઃఆ
    Workflow
    S3όέοτͷ४උ
    ߏஙલͷ
    ४උ

    View Slide

  22. Amazon SES
    w "NB[PO4*NQMF&NBJM4FSWJDF
    w &NBJMͷૹड৴Λ࣮ߦ͢ΔαʔϏε
    w $MPVE'SPOUͷೝূϝʔϧड৴ʹ࢖༻
    "NB[PO4&4

    View Slide

  23. ϝʔϧड৴ςετ
    Workflow
    ϧʔϧηοτͷ࡞੒

    View Slide

  24. View Slide

  25. Email Receiving - Rule Sets - Create a Receipt Rule

    View Slide

  26. Recipient ʹϝʔϧυϝΠϯ໊Λೖྗͯ͠ Add Recipient

    View Slide

  27. දࣔ͞ΕͨઃఆΛ DNS αʔόʹͯઃఆ
    Route53 Λ࢖༻͍ͯ͠Δ৔߹͸ Use Route53

    View Slide

  28. Route53 Λ࢖༻͍ͯ͠Δ৔߹͸͜ͷը໘͕දࣔ͞ΕΔͷͰ
    ͢΂ͯνΣοΫͯ͠ Create Record Sets

    View Slide

  29. ࣄલ४උͰ࡞੒ͨ͠ S3 Bucket Λબ୒ͯ͠ Next Step

    View Slide

  30. Rule Name Λೖྗͯ͠ Next Step

    View Slide

  31. ઃఆ಺༰Λ֬ೝͯ͠ Create Rule Set

    View Slide

  32. DNS มߋ͕׬ྃͯ͠ೝূ͕औΕΔͱ Status ͕ Enabled ʹͳΔ

    View Slide

  33. ϝʔϧड৴ςετ
    Workflow
    ϧʔϧηοτͷ࡞੒

    View Slide

  34. ϝʔϧΫϥΠΞϯτ͔ΒϝʔϧΛૹ৴ͯ͠ΈΔ

    View Slide

  35. S3όέοτʹʮAMAZON_SES_SETUP_NOTIFICATIONʯҎ֎
    ͷϑΝΠϧ͕อଘ͞Ε͍ͯΕ͹ϝʔϧૹ৴͸ਖ਼ৗʹߦΘΕ͍ͯΔ

    View Slide

  36. SSLূ໌ॻͷ
    औಘ

    View Slide

  37. CloudFront
    Workflow
    Certificate Manager

    View Slide

  38. CloudFront
    Workflow
    Certificate Manager

    View Slide

  39. AWS Certificate
    Manager
    •AWS͕ఏڙ͢ΔSSLূ໌ॻ
    •CloudFront, ELB Ͱ࢖༻Մೳ
    •ແྉͰ࢖༻Մೳ
    •SSLূ໌ॻ͸ࣗಈͰߋ৽͞ΕΔ
    "84$FSUJpDBUF.BOBHFS

    View Slide

  40. View Slide

  41. Get started

    View Slide

  42. Domain name Λೖྗͯ͠ Review and request

    View Slide

  43. ೖྗ಺༰Λ֬ೝͯ͠ Confirm and request

    View Slide

  44. Continue

    View Slide

  45. ೝূ଴ͪυϝΠϯͷҰཡ͕දࣔ͞ΕΔ

    View Slide

  46. ड৴ϝʔϧΛ֬ೝͯ͠ೝূ༻URLΛϒϥ΢βͰදࣔ

    View Slide

  47. ೝূ༻URLΛදࣔ͠ I Approve ΛΫϦοΫ

    View Slide

  48. Success!

    View Slide

  49. AWSίϯιʔϧͰ΋ೝূ͞Εͨ͜ͱ͕֬ೝͰ͖Δ

    View Slide

  50. CloudFront
    Workflow
    Certificate Manager

    View Slide

  51. Amazon CloudFront
    •AWSͷϗετ͢ΔCDNαʔϏε
    •αΠτͷߴ଎Խͱෛՙ࡟ݮΛ࣮ݱ
    •ো֐࣌ͷϑΣΠϧΦʔόʔʹ΋ରԠ
    "NB[PO$MPVE'SPOU

    View Slide

  52. View Slide

  53. Distributions ͔Βઃఆର৅ͷ distribution Λબ୒

    View Slide

  54. General λϒͷ Edit ΛΫϦοΫ

    View Slide

  55. Custom SSL Certificate Ͱઌ΄Ͳ࡞੒ͨ͠ূ໌ॻΛબ୒

    View Slide

  56. ͠͹Β͘͢ΔͱSSLূ໌ॻ͕ઃఆ͞Ε͍ͯΔ͜ͱ͕֬ೝͰ͖·͢

    View Slide

  57. http://ja.amimoto-ami.com/slack/
    ࣭͝໰͸͓ؾܰʹ:

    View Slide

  58. @Amimoto_Ami
    ja.amimoto-ami.com
    THANK YOU!
    Amazon CloudFront + AWS Certificate Manager

    View Slide