いまさら聞けないAWS

20211028 AStudy+
speaker: maki tokumura

Transcript

1. By maki tokumura
   ͍·͞Βฉ͚ͳ͍AWS
   

   View Slide

2. ಙଜ ਅथ
   ͱ͘ΉΒ · ͖
   ICTιϦϡʔγϣϯ Ϋϥ΢υετϥΫνϟʔνʔϜ
   ˌtimes_tokumura
   AWS৮Γ͸͡Ίͯ8ϲ݄໨
   

   View Slide

3. ࠓ೔ͷ໨త
   AWSͷ༻ޠʢαʔϏεʣ
   Λͬ͘͟Γ஌Ζ͏ʂ
   

   View Slide

4. ࠓ೔ͷ࿩͸
   ͋͘·ͰAWS΁ͷಋೖ
   ͨͩ͘͠ɺৄ͘͠ɺ஌Γ͍ͨ࣌͸ͪ͜Β
   AWSαʔϏεผࢿྉ
   https://aws.amazon.com/jp/aws-jp-introduction/aws-jp-webinar-service-cut/
   

   View Slide

5. αʔϏεج൫ɺ
   ωοτϫʔΫ·ΘΓ
   

   View Slide

6. Regions
   AWSͷ஍Ҭͷ۠੾Γ
   20Ҏ্ͷ஍Ҭʹ෼͔Ε͍ͯΔ
   ೔ຊʹ͸̎ͭ͋Δ
   Ϧʔδϣϯίʔυ ໊લ
   BQOPSUIFBTU ΞδΞύγϑΟοΫ ౦ژ
   
   BQOPSUIFBTU ΞδΞύγϑΟοΫ େࡕ
   
   

   View Slide

7. Ϧʔδϣϯ͸׬શʹ෼཭͞Ε͍ͯͯ
   ͦΕͧΕಠཱ͍ͯ͠Δ
   us-east-2
   ถࠃ౦෦ (ΦϋΠΦ)
   ap-northeast-1
   ΞδΞύγϑΟοΫ (౦ژ)
   eu-west-3
   Ԥभ (ύϦ)
   

   View Slide

8. Ͳ͔͜ͷϦʔδϣϯͰো֐͕ىͬͯ͜΋େৎ෉
   →ϚϧνϦʔδϣϯରԠ
   us-east-2
   ถࠃ౦෦ (ΦϋΠΦ)
   ap-northeast-1
   ΞδΞύγϑΟοΫ (౦ژ)
   eu-west-3
   Ԥभ (ύϦ)
   ো֐ൃੜ
   ❌ͭͳ͕Βͳ͍ ✅େৎ෉Ͱ͢ʂ ✅େৎ෉Ͱ͢ʂ
   

   View Slide

9. AZ(Availability Zone)
   ̍Ϧʔδϣϯͷ಺Ͱͷ͞Βʹখ͞ͳ۠੾Γ
   ̍AZ͸̍ͭҎ্ͷσʔληϯλʔͰߏங
   ౦ژϦʔδϣϯ͸3ͭͷAZ͕͋Δ
   ɾap-northeast-1-a
   ɾap-northeast-1-c
   ɾap-northeast-1-d
   

   View Slide

10. AZ΋׬શʹ෼཭͞Ε͍ͯͯ
    Ϧʔδϣϯ಺ͰͦΕͧΕ͕ಠཱ͍ͯ͠Δ
    ap-northeast-1
    ΞδΞύγϑΟοΫ (౦ژ)
    ap-northeast-1-a ap-northeast-1-c ap-northeast-1-d
    Region
    

    View Slide

11. Ͳ͔͜ͷAZͰো֐͕ىͬͯ͜΋େৎ෉
    →ϚϧνAZରԠ
    ap-northeast-1
    ΞδΞύγϑΟοΫ (౦ژ)
    ap-northeast-1-a ap-northeast-1-c ap-northeast-1-d
    Region
    ো֐ൃੜ
    ❌ͭͳ͕Βͳ͍ ✅େৎ෉Ͱ͢ʂ ✅େৎ෉Ͱ͢ʂ
    

    View Slide

12. Ͳ͔͜Ͱো֐͕ىͬͨ͜ͱͯ͠΋
    γεςϜ͕μ΢ϯ͠ͳ͍ՄೳੑΛ
    ߴΊΔʢ୯Ұো֐఺Λͳ͘͢ʣ
    →ߴՄ༻ੑΛ࣮ݱ͢Δ
    

    View Slide

13. VPC (Virtual Private Cloud)
    AWS্ʹ࡞੒Ͱ͖Δ
    ϓϥΠϕʔτԾ૝ωοτϫʔΫۭؒ
    ಛఆͷωοτϫʔΫͷശͷΑ͏ͳ΋ͷ
    ͜ͷശͷதʹEC2΍DB΍ECS͕
    ஔ͍ͯ͋ΔΠϝʔδ
    

    View Slide

14. ηΩϡϦςΟ
    

    View Slide

15. IAM (Identity and Access Management)
    AWSͷαʔϏεͰʮೝূʯͱʮೝՄʯͷ
    ઃఆΛߦ͏͜ͱ͕Ͱ͖ΔαʔϏε
    ΞΧ΢ϯτ΍ͦͷݖݶ؅ཧ͍ͯ͠Δ
    ೝূ ɿ ૬ख͕୭ʢԿʣͳͷ͔֬ೝ͢Δ͜ͱ
    ೝՄ ɿϦιʔε΁ͷΞΫηεݖݶΛ༩͑Δ͜ͱ
    

    View Slide

16. IAMϢʔβʔ
    ਓʢϢʔβʔʣʹ༩͑ΒΕΔID
    Ϣʔβʔ໊ͱύεϫʔυ͕෇༩͞Εɺ
    AWSΞΧ΢ϯτʹϩάΠϯ͢Δࡍʹ
    ඞཁͱͳΔ
    ̍ͭͷAWSΞΧ΢ϯτͷதʹෳ਺ͷϢʔ
    βʔΛ࡞Δ͜ͱ͕Ͱ͖Δ
    

    View Slide

17. ↓͜Ε
    

    View Slide

18. IAMϙϦγʔ
    ʮAWSͷԿʹରͯ͠ʯ
    ʮͲͷΑ͏ͳૢ࡞Λʯ
    ʮͰ͖ΔʢͰ͖ͳ͍ʣʯ
    ͱ͍͏ݖݶΛఆΊͨ΋ͷ
    IAMϢʔβʔɾIAMϩʔϧʢޙड़ʣʹ
    ඥ͚ͮͯ࢖͏
    

    View Slide

19. S3ReadOnlyʢݟΔ͚ͩʣΛڐՄ͢ΔϙϦγʔ
    

    View Slide

20. S3ʹϑϧΞΫηεΛڐՄ͢ΔϙϦγʔ
    

    View Slide

21. IAMϩʔϧ
    ໾ׂΛఆ͍ٛͯ͠Δ΋ͷ
    IAMϙϦγʔΛଋͶͯɺ֓೦తͳ໊લΛ
    ෇͚Δ͜ͱ͕Ͱ͖Δ
    IAMϢʔβʔͱࣅͯΔ͕ɺ
    IAMϩʔϧ͸࢖༻͢Δଆ͕ਓʹݶΒͳ͍
    

    View Slide

22. ʮITEM-APIʯ ϩʔϧΛ࡞੒͠
    ʮAmazonS3FullAccessʯϙϦγʔ
    Λඥ͚ͮΔɺΈ͍ͨͳ͜ͱΛ͠·͢
    ITEM-API
    ECS
    S3
    ϑΝΠϧΛPUTɾGET͍ͨ͠
    

    View Slide

23. IAM·ͱΊ
    ɾIAMϙϦγʔ
    Ͱ͖Δ͜ͱ/Ͱ͖ͳ͍͜ͱ Λఆٛ͠ɺ
    Ϣʔβʔ΍ϩʔϧʹඥ͚ͮͯ࢖͏
    ɾIAMϢʔβʔ
    ϙϦγʔΛඥ෇͚ͯɺϢʔβʔ͕Ͱ͖Δ͜ͱΛఆٛ͢Δ
    ɾIAMϩʔϧ
    ϙϦγʔΛඥ෇͚ͯɺ
    ୭͔/AWSͷαʔϏε ͕Ͱ͖Δ͜ͱΛఆٛ͢Δ
    

    View Slide

24. ίϯϐϡʔςΟϯά
    

    View Slide

25. EC2 (Elastic Compute Cloud)
    OSΛ৐ͤͨԾ૝؀ڥΛΫϥ΢υ্ʹ࡞੒
    Ͱ͖ΔαʔϏε
    ༻్ʹԊͬͯOSɾεϖοΫʢCPU΍ϝϞ
    ϦʣΛબͼࣗಈతʹαʔόʔͷ্ཱͪ͛
    ͔ΒΠϯετʔϧ·Ͱͯ͘͠ΕΔ
    

    View Slide

26. ECS (Elastic Container Service)
    DokerίϯςφΞϓϦέʔγϣϯΛAWS
    ্Ͱಈ͔ͯ͘͠ΕΔαʔϏε
    ίϯςφͷ࣮ߦɺอޢɺεέʔϧΛAWS
    ଆͰ΍ͬͯ͘ΕΔͷͰ࢖͏ଆ͕ҙࣝ͢Δ
    ͜ͱ͕͘͢ͳͯ͘͢Ή
    

    View Slide

27. EC2΍ECSͷ͍͍ͱ͜Ζ
    ɾ؆୯ͳεϖοΫมߋ
    ɾ৑௕Խ͕؆୯
    ɹˠ஄ྗੑ͕͋Δ
    ɾैྔ՝ۚʹΑΔίετϝϦοτ
    

    View Slide

28. ELB(Elastic Load Balancer)
    ELBʹ͸ɺ3ͭͷϩʔυόϥϯαʔ͕͋
    Γɺ༻్ʹ߹Θͤͯબ୒Ͱ͖Δɻ
    ɾCLB (Classic Load Balancer)
    ɾNLB (Network Load Balancer)
    ɾALB (Application Load Balancer)
    

    View Slide

29. ALBͰͰ͖Δ͜ͱ
    ͦͷᶃෛՙ͕෼ࢄͰ͖Δ
    ALB
    ECS
    ECS
    

    View Slide

30. ALBͰͰ͖Δ͜ͱ
    ͦͷᶄURLͰৼΓ෼͚ઌΛઃఆͰ͖Δ
    API༻ALB
    AAA-api
    ECS
    https://ʓʓ.com/AAA/…
    https://ʓʓ.com/BBB/…
    BBB-api
    ECS
    ※ύεϕʔεɺϗετϕʔεɺHTTPϔομϕʔε΍ΫΤϦจࣈϕʔε…৭ʑͳنଇͰઃఆͰ͖·͢
    

    View Slide

31. ALBͰͰ͖Δ͜ͱ
    ͦͷᶅτϥϑΟοΫͷ੍ݶ͕Ͱ͖Δ
    ALB
    ※VPCͷར༻͕લఏͰ͢
    ✅ΞΫηε0,
    ❌ΞΫηε/(
    ECS
    

    View Slide

32. ετϨʔδ΍DB
    

    View Slide

33. S3 (Simple Storage Service)
    Ϋϥ΢υܕͷΦϒδΣΫτετϨʔδ
    ྨࣅαʔϏεɿDropBoxɾOneDrive
    ετϨʔδʢ༰ྔʣ͕ࣗಈతʹ֦ுɾॖ
    খ͞ΕΔɻࣄલʹਖ਼֬ͳ༰ྔΛܭࢉͨ͠
    Γɺ༨෼ʹϦιʔεΛ֬อ͓ͯ͘͠ඞཁ͕
    ͳ͍
    

    View Slide

34. S3ͷ͍͍ͱ͜Ζ
    ͦͷᶃϥΠϑαΠΫϧ
    ࢦఆͨ͠ظ͕ؒܦաͨ͠΋ͷΛ࡟আ͠
    ͨΓɺΑΓ௿Ձ֨ͳετϨʔδʹҠಈ
    ͨ͠ΓͰ͖Δ
    ྫɿ90೔ܦաͨ͠ϩάϑΝΠϧ͸࡟আ
    

    View Slide

35. S3ͷ͍͍ͱ͜Ζ
    ͦͷᶄόʔδϣχϯά
    ΦϒδΣΫτ͝ͱʹੈ୅؅ཧΛ༗ޮʹ
    ͢Δ͜ͱͰ͖Δ
    ྫɿޡͬͯಉ͡ϑΝΠϧ໊Ͱ্ॻ͖ͯ͠͠·ͬ
    ͯ΋ɺલͷόʔδϣϯʹ໭͢͜ͱ͕Ͱ͖Δ
    

    View Slide

36. S3ͷ͍͍ͱ͜Ζ
    ͦͷᶅϩάه࿥
    ΦϒδΣΫτʹର͢ΔϩάΛ࢒͢͜ͱ
    ͕Ͱ͖Δ
    ྫɿ୭͕͜ͷϑΝΠϧΛ࡟আ͔ͨ͠ʁมߋͨ͠
    ͔ʁΛḷΔ͜ͱ͕Ͱ͖Δ
    

    View Slide

37. S3ͷ͍͍ͱ͜Ζ
    ͦͷᶆΞΫηεݖݶ
    ઃఆ͞ΕͨϢʔβʔͷΈૢ࡞ΛڐՄ͢
    ΔͳͲɺࡉ͔͘ΞΫηεݖݶΛઃఆͰ
    ͖Δ
    ྫɿΞΧ΢ϯτA͸ΞοϓϩʔυͷΈՄೳ
    ɹɹΞΧ΢ϯτB͸μ΢ϯϩʔυͷΈՄೳ
    

    View Slide

38. S3ͷ͍͍ͱ͜Ζ
    ͦͷᶇ҉߸Խ
    ΦϒδΣΫτΛ҉߸Խ͓ͯ͘͜͠ͱ͕
    Ͱ͖Δ
    αʔόʔαΠυɺΫϥΠΞϯταΠυ
    ͦΕͧΕͷ҉߸ԽʹରԠ
    

    View Slide

39. RDS (Relation Database Service)
    σʔλϕʔεͷΠϯετʔϧ΍όοΫ
    ΞοϓͳͲͷઃఆΛ͠ͳͯ͘΋ɺσʔλ
    ϕʔε͕ར༻Ͱ͖ΔαʔϏε
    6ͭͷRDBMS͔Βબ୒Մೳ
    Amazon AuroraɾPostgre SQLɾMySQL
    MariaσʔλϕʔεɾOracleɾSQL Server
    

    View Slide

40. RDSͷ͍͍ͱ͜Ζ
    ɾϚϧνAZʹΑΔՄ༻ੑ
    ɾιϑτ΢ΣΞͷࣗಈύον࡞ۀ
    ɾΦʔτεέʔϦϯά
    ɾϦʔυϨϓϦΧ
    ɹɹˠಡΈࠐΈઐ༻ͷσʔλϕʔε
    ɹɹಉ͡σʔλ͕ෳ਺ଘࡏ͢ΔͨΊσʔλͷ҆શੑ͕ߴ·Δ
    ɹɹ·ͨɺDBʹ͔͔ΔෛՙΛ෼ࢄͤ͞Δ͜ͱ͕Ͱ͖Δ
    

    View Slide

41. ͓ΘΓʹ
    Ϋϥ΢υͷ͜ͱɾAWSͷ͜ͱ
    ஌͓͍ͬͯͯଛ͸ͳ͍ʂ
    Ұॹʹษڧ͍͖ͯ͠·͠ΐ͏
    

    View Slide