[日本語]Amazon CloudFront with AWS Certificate Manager

CDNでコンテンツの配信を高速化
SSL証明書の管理を自動化

Transcript

1. Amazon CloudFront
   with
   AWS Certificate Manager
   @Amimoto_Ami
   ja.amimoto-ami.com
   

   View Slide

2. ΞʔΩςΫνϟ
   

   View Slide

3. Amazon CloudFront
   AWS Certificate Manager
   w $%/Ͱίϯςϯπͷ഑৴Λߴ଎Խ
   w 44-ূ໌ॻͷ؅ཧΛࣗಈԽ
   ࣮ݱ͢Δ͜ͱ
   

   View Slide

4. SSLূ໌ॻͷऔಘ
   Workflow
   ४උ
   

   View Slide

5. ४උ
   

   View Slide

6. ɾadministrator@your_domain
   ɾhostmaster@your_domain
   ɾpostmaster@your_domain
   ɾwebmaster@your_domain
   ɾadmin@your_domain
   υϝΠϯೝূ༻ϝʔϧΞυϨε
   

   View Slide

7. ͢ͰʹυϝΠϯೝূ༻ϝʔϧΞυϨεͰ
   ϝʔϧͷड৴͕Մೳͳ৔߹͸ɺ
   ͜ΕҎ߱ͷ߲໨͸εΩοϓ͍ͯͩ͘͠͞
   υϝΠϯೝূ༻ϝʔϧΞυϨε
   

   View Slide

8. υϝΠϯೝূ༻ϝʔϧΞυϨε͕࢖༻Ͱ
   ͖ͳ͍৔߹͸ AWS SES Ͱϝʔϧड৴͢
   ΔઃఆΛߦ͍·͢ɻ
   υϝΠϯೝূ༻ϝʔϧΞυϨε
   

   View Slide

9. Amazon SES ઃఆ
   Workflow
   S3όέοτͷ४උ
   ߏஙલͷ
   ४උ
   

   View Slide

10. Amazon SES ઃఆ
    Workflow
    S3όέοτͷ४උ
    ߏஙલͷ
    ४උ
    

    View Slide

11. Amazon S3
    w "NB[PO4*NQMF4UPSBHF4FSWJDF
    w Πϯλʔωοτ༻ͷετϨʔδ
    w 4&4Ͱड৴ͨ͠ϝʔϧΛ֨ೲ͢ΔͨΊʹ࢖༻
    "NB[PO4
    

    View Slide

12. όέοτϙϦγʔͷઃఆ
    Workflow
    S3όέοτͷ࡞੒
    

    View Slide

13. όέοτϙϦγʔͷઃఆ
    Workflow
    S3όέοτͷ࡞੒
    

    View Slide

14. View Slide

15. Create Bucket ΛΫϦοΫ͠·͢
    

    View Slide

16. Bucket Name, Region Λೖྗ͠ Create
    

    View Slide

17. όέοτϙϦγʔͷઃఆ
    Workflow
    S3όέοτͷ࡞੒
    

    View Slide

18. Properties - Permissions - Add bucket policy
    

    View Slide

19. Bucket Policy Λઃఆ͠ Save
    

    View Slide

20. Bucket Policy
    https://docs.aws.amazon.com/ses/latest/DeveloperGuide/
    receiving-email-permissions.html
    

    View Slide

21. Amazon SES ઃఆ
    Workflow
    S3όέοτͷ४උ
    ߏஙલͷ
    ४උ
    

    View Slide

22. Amazon SES
    w "NB[PO4*NQMF&NBJM4FSWJDF
    w &NBJMͷૹड৴Λ࣮ߦ͢ΔαʔϏε
    w $MPVE'SPOUͷೝূϝʔϧड৴ʹ࢖༻
    "NB[PO4&4
    

    View Slide

23. ϝʔϧड৴ςετ
    Workflow
    ϧʔϧηοτͷ࡞੒
    

    View Slide

24. View Slide

25. Email Receiving - Rule Sets - Create a Receipt Rule
    

    View Slide

26. Recipient ʹϝʔϧυϝΠϯ໊Λೖྗͯ͠ Add Recipient
    

    View Slide

27. දࣔ͞ΕͨઃఆΛ DNS αʔόʹͯઃఆ
    Route53 Λ࢖༻͍ͯ͠Δ৔߹͸ Use Route53
    

    View Slide

28. Route53 Λ࢖༻͍ͯ͠Δ৔߹͸͜ͷը໘͕දࣔ͞ΕΔͷͰ
    ͢΂ͯνΣοΫͯ͠ Create Record Sets
    

    View Slide

29. ࣄલ४උͰ࡞੒ͨ͠ S3 Bucket Λબ୒ͯ͠ Next Step
    

    View Slide

30. Rule Name Λೖྗͯ͠ Next Step
    

    View Slide

31. ઃఆ಺༰Λ֬ೝͯ͠ Create Rule Set
    

    View Slide

32. DNS มߋ͕׬ྃͯ͠ೝূ͕औΕΔͱ Status ͕ Enabled ʹͳΔ
    

    View Slide

33. ϝʔϧड৴ςετ
    Workflow
    ϧʔϧηοτͷ࡞੒
    

    View Slide

34. ϝʔϧΫϥΠΞϯτ͔ΒϝʔϧΛૹ৴ͯ͠ΈΔ
    

    View Slide

35. S3όέοτʹʮAMAZON_SES_SETUP_NOTIFICATIONʯҎ֎
    ͷϑΝΠϧ͕อଘ͞Ε͍ͯΕ͹ϝʔϧૹ৴͸ਖ਼ৗʹߦΘΕ͍ͯΔ
    

    View Slide

36. SSLূ໌ॻͷ
    औಘ
    

    View Slide

37. CloudFront
    Workflow
    Certificate Manager
    

    View Slide

38. CloudFront
    Workflow
    Certificate Manager
    

    View Slide

39. AWS Certificate
    Manager
    •AWS͕ఏڙ͢ΔSSLূ໌ॻ
    •CloudFront, ELB Ͱ࢖༻Մೳ
    •ແྉͰ࢖༻Մೳ
    •SSLূ໌ॻ͸ࣗಈͰߋ৽͞ΕΔ
    "84$FSUJpDBUF.BOBHFS
    

    View Slide

40. View Slide

41. Get started
    

    View Slide

42. Domain name Λೖྗͯ͠ Review and request
    

    View Slide

43. ೖྗ಺༰Λ֬ೝͯ͠ Confirm and request
    

    View Slide

44. Continue
    

    View Slide

45. ೝূ଴ͪυϝΠϯͷҰཡ͕දࣔ͞ΕΔ
    

    View Slide

46. ड৴ϝʔϧΛ֬ೝͯ͠ೝূ༻URLΛϒϥ΢βͰදࣔ
    

    View Slide

47. ೝূ༻URLΛදࣔ͠ I Approve ΛΫϦοΫ
    

    View Slide

48. Success!
    

    View Slide

49. AWSίϯιʔϧͰ΋ೝূ͞Εͨ͜ͱ͕֬ೝͰ͖Δ
    

    View Slide

50. CloudFront
    Workflow
    Certificate Manager
    

    View Slide

51. Amazon CloudFront
    •AWSͷϗετ͢ΔCDNαʔϏε
    •αΠτͷߴ଎Խͱෛՙ࡟ݮΛ࣮ݱ
    •ো֐࣌ͷϑΣΠϧΦʔόʔʹ΋ରԠ
    "NB[PO$MPVE'SPOU
    

    View Slide

52. View Slide

53. Distributions ͔Βઃఆର৅ͷ distribution Λબ୒
    

    View Slide

54. General λϒͷ Edit ΛΫϦοΫ
    

    View Slide

55. Custom SSL Certificate Ͱઌ΄Ͳ࡞੒ͨ͠ূ໌ॻΛબ୒
    

    View Slide

56. ͠͹Β͘͢ΔͱSSLূ໌ॻ͕ઃఆ͞Ε͍ͯΔ͜ͱ͕֬ೝͰ͖·͢
    

    View Slide

57. http://ja.amimoto-ami.com/slack/
    ࣭͝໰͸͓ؾܰʹ:
    

    View Slide

58. @Amimoto_Ami
    ja.amimoto-ami.com
    THANK YOU!
    Amazon CloudFront + AWS Certificate Manager
    

    View Slide