AWS上に構築し数年経過したシステムの見直しポイント Developers.IO 2019 in Sapporo

2019/10/19 Developers.IO 2019 in Sapporo での発表資料となります。

Transcript

1. "84্ʹߏங͠਺೥ܦաͨ͠γεςϜͷݟ௚͠ϙΠϯτ "84ࣄۀຊ෦ɹίϯαϧςΟϯά෦
   )JSPZVLJ
   ,BKJ
2. ࣗݾ঺հ  ֿɹߒ޾ʢ)JSPZVLJ
   ,BKJʣ
   5XJUUFSɿ!DPDBDPMB
   "84؀ڥͷߏஙɺίϯαϧςΟϯά
   σϦόϦʔνʔϜϦʔμʢΤϯδχΞҭ੒ʣ
   ܦྺ
   ɾωοτϫʔΫػثϝʔΧ4&
   ɾηΩϡϦςΟؔ࿈اۀͷ঎༻γεςϜӡ༻ऀ
   ɾ೥
   Ϋϥεϝιου
   ࡳຈΦϑΟεೖࣾ
   ڵຯؔ৺
   ɾ/FUXPSLɺ4FDVSJUZ
   ɾϙʔλϒϧΦʔσΟΦɺήʔϜ
3. ࣭໰  AWSར༻ͯ͠2೥Ҏ্ʁ
4. ໨࣍  &$ؔ࿈
   3%4ؔ࿈
   ӡ༻ؔ࿈
   ηΩϡϦςΟؔ࿈
5.  &$ؔ࿈
6. &$ؔ࿈  ࣭໰ Amazon Linux 2Λར༻͍ͯ͠Δํʁ Amazon LinuxΛ࢖͍ͬͯΔํʁ
7. &$ؔ࿈  Amazon Linux 2΁Ҡߦ
8. "NB[PO
   -JOVY
   
   ΁ͷҠߦ  ެࣜϖʔδʹهࡌ͕͋Δ௨Γɺ೥݄೔ʹ "NB[PO
   -JOVY
   ͷηΩϡϦςΟߋ৽ఏڙ͕ऴྃ
   "NB[PO
   -JOVY
   Λ·ͩར༻͍ͯ͠Δํ͸
   "NB[PO
   -JOVY
   
   ΁ͷҠߦݕ౼͕Φεεϝ
   Α͋͘Δ࣭໰
   "NB[PO
   -JOVY
   ".*
   c
   "84
9. "NB[PO
   -JOVY
   ΁ͷҠߦϝϦοτ  w 17Πϯελϯε͔Β)7.Πϯελϯε΁Ҡߦ
   w )%% TUBOEBSE
   ˠ
   44% HQ
   w ৽ੈ୅Πϯελϯε ND ར༻Մೳ
   ߹ΘͤͯҎԼΛ࢖͏ͱศརʹɾɾɾ
   w 44. "84
   4ZTUFNT
   .BOBHFS ͷ"HFOUΠϯετʔϧࡁΈ
   w $MPVEXBUDI
   "HFOUߋ৽ʢϝϞϦɺσΟεΫ࢖༻཰औಘʣ
10. "NB[PO
    -JOVY
    ΁ͷҠߦϝϦοτ  "84
    4ZTUFNT
    .BOBHFSʹ׳ΕΔֶशίετ͕ඞཁ
    Ͱ͕͢౿Έ୆αʔό͕ෆཁʹ
    "84
    4ZTUFNT
    .BOBHFS
    ηογϣϯϚωʔδϟʔͰ 44)ɾ4$1Ͱ͖ΔΑ͏ʹͳΓ·ͨ͠
    ʛ
    %FWFMPQFST*0
    "84
    4ZTUFN
    .BOBHFSηογϣϯϚωʔδϟʔͰϙʔ τϑΥϫʔυ͢Δ
    ʛ
    %FWFMPQFST*0
11. "NB[PO
    -JOVY
    ΁ͷҠߦ͢ΔͨΊʹ࣮ࢪ͢Δ͜ͱ  w Ҡߦ͢ΔͨΊͷ༧ࢉ֬อ
    w ର৅αʔόͷચ͍ग़͠
    w ϦβʔϒυΠϯελϯεʢ3*ʣͷ֬ೝ
12. "NB[PO
    -JOVY
    ΁ͷҠߦ͢ΔͨΊʹ࣮ࢪ͢Δ͜ͱ  w Өڹൣғ֬ೝ
    w ΞϓϦέʔγϣϯɾϛυϧ΢ΣΞ
    w +%,
    w ߏ੒؅ཧπʔϧ
13. "NB[PO
    -JOVY
    ΁ͷҠߦ͢ΔͨΊʹ࣮ࢪ͢Δ͜ͱ  w Πϯελϯεੈ୅ʢN DͳͲ͔Β৽ੈ୅NͳͲʣ
    w ݕূ
    w Ҡߦεέδϡʔϧ
14. "NB[PO
    -JOVY
    ΁ͷҠߦ͢ΔͨΊʹ࣮ࢪ͢Δ͜ͱ  ৄࡉ͸ͪ͜Β
    "NB[PO
    -JOVY
    ͔Β
    "NB[PO
    -JOVY
    
    ΁ͷΞοϓά ϨʔυΛܭը͠Α͏
    ʛ
    %FWFMPQFST*0
15. &$ؔ࿈  ࣭໰ CLBʢClassic Load BalancerʣΛ ར༻͍ͯ͠Δํʁ
16. &$ؔ࿈  ALBʢApplication Load Balancerʣ ͷར༻ݕ౼
17. "QQMJDBUJPO
    -PBE
    #BMBODFSʢ"-#ʣҠߦϝϦοτ  w ར༻ྉۚͷܭࢉࣜͷҧ͍ʹΑΔίετϝϦοτ
    w ༗ࣄͷࡍʹ"84
    8"'Λ௥ՃՄೳ
    w ύϑΥʔϚϯεͷվળʢ)551ରԠʣ
    w )551)5514Ҏ֎ͷ৔߹͸ɺ/-#Λݕ౼
18. "QQMJDBUJPO
    -PBE
    #BMBODFSʢ"-#ʣҠߦϝϦοτ  w $-#
    w ࣌ؒ͋ͨΓͷྉۚ
    
    σʔλసૹྔʹԠͯ͡՝ۚ
    w "-#
    w ࣌ؒ͋ͨΓͷྉۚ
    
    ΩϟύγςΟʔϢχοτ -$6 ʹΑΔྉۚͰ՝ۚ
    w $-#Ͱσʔλసૹྔ͕ଟ͍৔߹͸ɺ"-#ʹมߋ͢Δ͚ͩͰίε τϝϦοτͷՄೳੑ͋Γ
    w ΩϟύγςΟʔϢχοτ -$6 ͸$MPVEXBUDIͰݟੵ
19. &$ؔ࿈  ࣭໰ EC2ΠϯελϯεΛͲͷΑ͏ʹ όοΫΞοϓ͍ͯ͠·͔͢ʁ
20. &$ؔ࿈  Amazon Data Lifecycle Manager (Amazon DLM)ͱAWS Backup
21. "NB[PO
    %-."84
    #BDLVQͷϝϦοτ  w ҎલͳΒɾɾɾ
    w #BDLVQόονॲཧ༻ͷ&$͔ΒόοΫΞοϓ࣮ߦ
    w $MPVEXBUDI
    &WFOU͔Β-BNCEBͰόοΫΞοϓ࣮ߦ
    w ͳͲͳͲɾɾɾ
    w ࠓͳΒ"84
    #BDLVQ΍"NB[PO
    %BUB
    -JGFDZDMF
    .BOBHFS
    "NB[PO
    %-. ͷϚωʔδυαʔϏεΛ ར༻Մೳ
22. ϥΠϑαΠΫϧ؅ཧ  w "NB[PO
    %-.
    ͸εφοϓγϣοτΛԿݸ࢒͔͢ SFUBJO ࢦఆ
    w "84
    #BDLVQ͸֤εφοϓγϣοτΛͲΕ͚ͩͷظ ؒ࢒͔͢ FYQJSF ࢦఆ
23. "NB[PO
    %-.  w ର৅αʔϏε
    w "NB[PO
    &#4
    w ྉۚ
    w ແྉ
    w ผ్&#4΍εφοϓγϣοτͷྉۚ͸ൃੜ
24. "NB[PO
    %-.  ৄࡉ͸ͪ͜Β
    ʲ৽αʔϏεʳ&#4εφοϓγϣοτͷϥΠϑαΠΫϧ ΛࣗಈԽ͢Δ"NB[PO
    %-.͕ొ৔ʂ
    ʛ
    %FWFMPQFST*0
    
    "NB[PO
    %-.͕౦ژʹ্཮ͯ͠&#4ͷϥΠϑαΠΫϧ ؅ཧ͕؆୯ʹͳΓ·ͨ͠
    ʛ
    %FWFMPQFST*0
25. "84
    #BDLVQ  w ର৅αʔϏε
    w "NB[PO
    &#4
    w "NB[PO
    3%4 "VSPSBҎ֎
    w "NB[PO
    %ZOBNP%#
    w "NB[PO
    &'4
    w "NB[PO
    4UPSBHF
    (BUFXBZ
26. "84
    #BDLVQ  w ྉۚ
    w ֤αʔϏε͝ͱͷόοΫΞοϓʢ&#4εφοϓγϣοτɺ %#εφοϓγϣοτͳͲʣʹ͔͔Δඅ༻͕ͦͷ··"84
    #BDLVQͷྉۚͱͳΔ
    w &'4ʹ͍ͭͯ͸(#͋ͨΓͷಠࣗͷඅ༻͕͔͔Δɻ
27. "84
    #BDLVQ  λΠϓ ΢ΥʔϜετϨʔδ ίʔϧυετϨʔδ ಛهࣄ߲ "NB[PO
    &'4
    'JMF
    4ZTUFN
    #BDLVQ 
    QFS
    (# .POUI 
    QFS
    (# .POUI ಠࣗͷྉۚମܥ "NB[PO
    &#4
    7PMVNF
    4OBQTIPU 
    QFS
    (# .POUI  "NB[PO
    4
    ʹର͢Δ
    "NB[PO
    &#4
    εφοϓγϣοτͷֹۚ "NB[PO
    3%4
    %BUBCBTF
    4OBQTIPU 
    QFS
    (# .POUI  %#εφοϓγϣοτ͸Ұ཯͜ͷֹۚ "NB[PO
    %ZOBNP%#
    5BCMF
    #BDLVQ 
    QFS
    (# .POUI  ΦϯσϚϯυόοΫΞοϓͷྉۚ "84
    4UPSBHF
    (BUFXBZ
    7PMVNF
    #BDLVQ 
    QFS
    (# .POUI  "NB[PO
    4
    ʹର͢Δ
    "NB[PO
    &#4
    εφοϓγϣοτͷֹۚ
28. "84
    #BDLVQ  ৄࡉ͸ͪ͜Β
    "84࠶ೖ໳ϒϩάϦϨʔ
    "84
    #BDLVQฤ
    ʛ
    %FWFMPQFST*0
29. PQTXJUDI 
30. &$ؔ࿈  ࣭໰ NATΠϯελϯεΛར༻͍ͯ͠Δํʁ
31. &$ؔ࿈  NAT Gateway
32. /"5
    (BUFXBZ  w ຊ൪؀ڥͰ/"5Πϯελϯεʢ&$Πϯελϯεʣ Λར༻͍ͯ͠ΔํʹΦεεϝɻ
    w ৑௕Խ΍&$ϝϯςφϯε͕৺഑ͳΒஔ͖׵͑ਪ঑
    w /"5
    (BUFXBZ͸";ʹͭ഑ஔ͢ΔඞཁɻͦͷͨΊ ͪΐͬͱߴΊ
    w ݕূ؀ڥͳͲ͸ɺ&$
    /"5ΠϯελϯεΛͦͷ·· ར༻Ͱ0,ʢίετ௿ݮʣ
33. &$ؔ࿈  ͦͷଞ
34. &$
    PO
    99͔ΒϚωʔδυαʔϏε΁ͷҠߦ  Ҡߦ͢Δ͜ͱͰϚωʔδυαʔϏεͷͨΊɺαʔϏεϨ ϕϧΛ͋͛Δ͜ͱ͕Մೳ
    w &$
    PO
    4'51
    ˠ
    "84
    5SBOTGFS
    GPS
    4'51
    w &$
    PO
    /'4
    ˠ
    "NB[PO
    &'4
    w &$
    PO
    ϦϞʔτΞΫηε71/੡඼
    ˠ
    $MJFOU
    71/
35.  3%4ؔ࿈
36. 3%4ؔ࿈  ࣭໰ RDSͷϩάऔಘ͍ͯ͠·͔͢ʁ
37. 3%4ؔ࿈  RDS Cloudwatch logsϩάग़ྗ
38. 3%4
    $MPVEXBUDI
    MPHTϩάग़ྗ  3%4ͷओཁϩάΛ$MPVE8BUDI
    -PHT΁ग़ྗ
    ग़ྗʹ͸ɺόʔδϣϯࢦఆ͕͋Γ
39. 3%4
    $MPVEXBUDI
    MPHTϩάग़ྗ  .Z42-.BSJB%#
    w "VEJU
    -PH
    w &SSPS
    -PH
    w (FOFSBM
    -PH
    w 4MPX
    2VFSZ
    -PH
40. 3%4
    $MPVEXBUDI
    MPHTϩάग़ྗ  1PTUHSF42-
    w 1PTUHSF42-
    ϩά
    w ΞοϓάϨʔυϩά
    0SBDMF
    w Ξϥʔτϩά
    w ؂ࠪϩά
    w Ϧεφʔϩά
    w τϨʔεϩά
41. 3%4
    4MPX
    2VFSZ
    -PH
    ϩάग़ྗ 
42. 3%4
    $MPVEXBUDI
    MPHTϩάग़ྗ  3%4ͷ.Z42-.BSJB%#ͰϩάΛ$MPVE8BUDI
    -PHT΁ग़ྗՄೳʹͳΓ·ͨ͠
    ʛ
    %FWFMPQFST*0
    <৽ػೳ>
    3%4
    GPS
    0SBDMF
    ͕
    $MPVE8BUDI
    -PHT
    ΁ ͷϩάग़ྗΛαϙʔτ͠·ͨ͠
    ʛ
    %FWFMPQFST*0
    <Ξοϓσʔτ>3%4
    GPS
    1PTUHSF42-ͷϩάΛ $MPVE8BUDI
    -PHTʹग़ྗͰ͖ΔΑ͏ʹͳΓ·ͨ͠
    ʛ
    %FWFMPQFST*0
43. 3%4ؔ࿈  ࣭໰ RDSύϑΥʔϚϯε஗͍࣌ ͲͷΑ͏ʹௐ͍ࠪͯ͠·͔͢ʁ
44. ࢲݸਓͷ৔߹ɾɾɾ  .Z42-ͷ৔߹ɺslow query logΛग़ྗ͠ϑΝΠϧΛ mysqldumpslow
    ίϚϯυͰ෼ੳ
    w ฏۉϩοΫλΠϜͷ௕͍ॱ
    w ฏۉ࣮ߦ࣌ؒͷ௕͍ॱ
    w ฏۉߦ਺ͷଟ͍ॱ
    ͳͲͳͲɾɾɾ
45. 3%4ؔ࿈  RDS Performance Insight
46. 3%4
    1FSGPSNBODF
    *OTJHIU  3%4ʹͯੑೳӨڹΛ֬ೝ͠ͳ͕ΒͰ͖Δ͚ͩ 1FSGPSNBODF
    *OTJHIUTΛ༗ޮԽ
    1FSGPSNBODF
    *OTJHIUTͷμογϡϘʔυͰ͕͔࣌ؒ ͔͍ͬͯΔΫΤϦ౳͕෼͔Δ
    w Ұ෦ͷ%#ΤϯδϯͰόʔδϣϯࢦఆ͋Γ
47. 3%4
    1FSGPSNBODF
    *OTJHIU  ྉۚ
    wܧଓ͢Δ
    ೔ؒͷύϑΥʔϚϯεσʔλཤྺΛແྉͰఏڙ
    wύϑΥʔϚϯεΠϯαΠτͷμογϡϘʔυҎ֎͔Βͷ"1*ίʔϧ ສճ෼΋ؚΉ
    wผ్ྉۚ
    w௕ظؒͷύϑΥʔϚϯεσʔλཤྺΛอଘՄೳʢ࠷௕Ͱ
    
    ೥෼ɺW$16͋ͨ Γʣ
    w 
    ϦΫΤετ͋ͨΓ
    64%
48. 3%4
    1FSGPSNBODF
    *OTJHIU  ύϑΥʔϚϯεΠϯαΠτΛར༻ͯ͠8PSE1SFTTͷ%#ෛՙΛ෼ੳͯ͠ Έͨ
    ʛ
    %FWFMPQFST*0
49.  ӡ༻ؔ࿈
50. ӡ༻ؔ࿈  ࣭໰ CloudWatchར༻͍ͯ͠·͔͢ʁ
51. ӡ༻ؔ࿈  CloudWatch Dashboard
52. $MPVE8BUDI
    %BTICPBSE  Α͘νΣοΫ͢Δ߲໨ΛҰཡͰάϥϑࢀরͰ͖Δ
    ʢผ్ɺ؂ࢹγεςϜΛར༻͍ͯ͠Δํ͸ର৅֎ʣ
    w&-#ϦΫΤετ਺ɺΤϥʔ਺ͳͲ
    w&$
    $16
    6UJMJ[BUJPOɺ/FUXPSL*O/FUXPSL0VUͳͲ
    w3%4
    $16
    6UJMJ[BUJPOɺ%BUBCBTF
    $POOFDUJPOTɺ -BUFODZɺ%#-PBEͳͲ
53. $MPVE8BUDI
    %BTICPBSE  ྉۚ
    wμογϡϘʔυ͋ͨΓ
    64%݄
    wຖ݄࠷େݸͷϝτϦΫεରԠμογϡϘʔυݸ·Ͱແྉ
    
54. $MPVE8BUDI
    %BTICPBSE  ৄࡉ͸ͪ͜Β
    $MPVE8BUDIͷ"VUPNBUJD
    %BTICPBSETʹΑΓɺओཁͳ "84ϦιʔεͷՔಇঢ়گΛҰཡ֬ೝͰ͖ΔΑ͏ʹͳΓ·͠ ͨ
    ʛ
    %FWFMPQFST*0
    $MPVE8BUDIμογϡϘʔυΛར༻ͯ͠Φʔτεέʔϧ؀ ڥͷՔಇঢ়ଶΛՄࢹԽͯ͠Έͨ
    ʛ
    %FWFMPQFST*0
    $MPVE'PSNBUJPOΛར༻ͯ͠$MPVE8BUDIμογϡϘʔ υΛઃஔͯ͠Έͨ
    ʛ
    %FWFMPQFST*0
55. ӡ༻ؔ࿈  S3 Intelligent-Tiering
56. 4
    *OUFMMJHFOU5JFSJOH  w 4
    *OUFMMJHFOU5JFSJOH͸ίετͷҟͳΔ௿ස౓ΞΫη εߴස౓ΞΫηεͷͭͷ5JFS͋ΓΦϒδΣΫτผʹΞ Ϋηεස౓ʹԠͯࣗ͡ಈͰ5JFSΛҠಈ
    w ೔ؒΞΫηε͕ͳ͍ΦϒδΣΫτΛ௿ස౓ΞΫηε΁ Ҡಈ
    w ΞΫηε͕͋Δͱࣗಈతʹߴස౓ΞΫηεʹҠಈ
    w ௿ස౓ΞΫηε5JFSʹҠಈޙɺετϨʔδ݄
    64%(#
57. 4
    *OUFMMJHFOU5JFSJOH  ʲΞοϓσʔτʳ4ʹ৽͍͠ετϨʔδΫϥ εz*OUFMMJHFOU5JFSJOHz͕ొ৔͠·ͨ͠
    SFJOWFOU
    ʛ
    %FWFMPQFST*0
    
58.  ηΩϡϦςΟؔ࿈
59. ηΩϡϦςΟؔ࿈  ࣭໰ IAMͱSecurity Group ୨Էͯ͠·͔͢ʁ
60. ར༻͍ͯ͠ͳ͍4FDVSJUZ
    (SPVQ  ར༻͍ͯ͠ͳ͍4FDVSJUZ
    (SPVQ͸ҎԼ
    ʲ5JQTʳ࢖༻͍ͯ͠ͳ͍ηΩϡϦςΟάϧʔϓΛચ͍ग़͍ͨ͠ʂʂʂ
    ʛ
    %FWFMPQFST*0
    ීஈ͸ηΩϡϦςΟάϧʔϓΛ࢖Θͳ͍͚Ͳɺͨ·ʹ࢖͏Մೳੑ͕͋ΔαʔϏ ε΋͋ΔͷͰ஫ҙ
    w "VUP
    4DBMJOH
    w %BUB
    1JQMJOF
    w "84
    #BUDI
    w -BNCEBͳͲ
61. ηΩϡϦςΟؔ࿈  Trusted Advisor
62. 5SVTUFE
    "EWJTPS  "84
    5SVTUFE
    "EWJTPS͸ɺҎԼͷͭͷ؍఺͔Βɺར༻ऀͷ"84 ؀ڥΛ"84͕ࣗಈͰਫ਼ࠪ͠ɺਪ঑ઃఆͷ͓஌ΒͤΛͯ͘͠ΕΔػೳ
    w ίετ࠷దԽ
    w ύϑΥʔϚϯε
    w ϑΥʔϧττϨʔϥϯεʢ଱ো֐ੑʣ
    w ηΩϡϦςΟ
    w αʔϏε੍ݶ
63. 5SVTUFE
    "EWJTPS  ֤؂߲ࠪ໨νΣοΫ͸̏ஈ֊ͷεςʔλεͰঢ়ଶ
    μογϡϘʔυ্ͰҰ໨Ͱ൑ผ͕͠΍͍͢Α͏ʹ৭෼͚
    w /P
    QSPCMFNT
    EFUFDUFEʲ྘ʳ
    
    ໰୊͕ݕग़͞Εͳ͔ͬͨ
    w *OWFTUJHBUJPO
    SFDPNNFOEFEʲԫʳ
    
    ௐ͕ࠪਪ঑͞ΕΔ
    w "DUJPO
    SFDPNNFOEFEʲ੺ʳ
    
    ଈ࣌ରԠ͕ਪ঑͞ΕΔ
    w /PU
    "WBJMBCMFʲʳ
    
    ඇදࣔ
64. 5SVTUFE
    "EWJTPS
    ίετ࠷దԽ  w "NB[PO
    &$
    ϦβʔϒυΠϯελϯεͷ࠷దԽ
    w ௿Քಇ཰ͷ
    "NB[PO
    &$
    Πϯελϯε
    w ΞΠυϧঢ়ଶͷϩʔυόϥϯαʔ
    w ࢖༻཰ͷ௿͍
    "NB[PO
    &#4
    7PMVNFT
    w ؔ࿈෇͚ΒΕ͍ͯͳ͍
    &MBTUJD
    *1
    ΞυϨε
    w "NB[PO
    3%4
    ͷΞΠυϧঢ়ଶͷ
    %#
    Πϯελϯε
    w "NB[PO
    3PVUF
    
    ϨΠςϯγʔϦιʔεϨίʔυηοτ
    w "NB[PO
    &$
    3FTFSWFE
    *OTUBODF
    -FBTF
    &YQJSBUJPO
    w ࢖༻཰ͷ௿͍
    "NB[PO
    3FETIJGU
    Ϋϥελʔ
65. 5SVTUFE
    "EWJTPS
    ηΩϡϦςΟ  w ηΩϡϦςΟάϧʔϓ
    r
    ੍ݶ͞Εͳ͍ಛఆͷϙʔτ
    w ηΩϡϦςΟάϧʔϓ
    r
    ແ੍ݶΞΫηε
    w *".
    6TF
    w "NB[PO
    4
    όέοτͷΞΫηεڐՄ
    w ϧʔτΞΧ΢ϯτͰͷ
    .'"
    w *".
    ύεϫʔυϙϦγʔ
    w "NB[PO
    3%4
    ηΩϡϦςΟάϧʔϓͷΞΫηεϦ εΫ
    w "84
    $MPVE5SBJM
    ϩάه࿥
    w "NB[PO
    3PVUF
    
    .9
    ͓Αͼ
    41'
    ͷϦιʔε Ϩίʔυηοτ
    w &-#
    ϦεφʔͷηΩϡϦςΟ w &-#
    ηΩϡϦςΟάϧʔϓ
    w *".
    ূ໌ॻετΞ಺ͷ
    $MPVE'SPOU
    ಠࣗ
    44-
    ূ໌ॻ
    w ΦϦδϯαʔόʔͷ
    $MPVE'SPOU
    44-
    ূ໌ॻ
    w *".
    ΞΫηεΩʔͷߋ৽
    w ެ։͞ΕͨΞΫηεΩʔ
    w "NB[PO
    &#4
    ύϒϦοΫεφοϓγϣοτ
    w "NB[PO
    3%4
    ύϒϦοΫεφοϓγϣοτ
66. 5SVTUFE
    "EWJTPS
    ଱ো֐ੑ  w "NB[PO
    &#4
    4OBQTIPUT
    w "NB[PO
    &$
    "WBJMBCJMJUZ
    ;POF
    #BMBODF
    w ϩʔυόϥϯαʔͷ࠷దԽ
    w 71/
    τϯωϧ৑௕ੑ
    w "VUP
    4DBMJOH
    άϧʔϓͷϦιʔε
    w "NB[PO
    3%4
    όοΫΞοϓ
    w "NB[PO
    3%4
    Ϛϧν
    ";
    w "VUP
    4DBMJOH
    άϧʔϓͷϔϧενΣοΫ
    w "NB[PO
    4
    όέοτϩΪϯά
    w "NB[PO
    3PVUF
    
    ωʔϜαʔόʔͷσϦήʔγϣϯ
    w "NB[PO
    3PVUF
    
    ߴ
    55-
    ϦιʔεϨίʔυηοτ
    w "NB[PO
    3PVUF
    
    ϑΣΠϧΦʔόʔϦιʔεϨίʔυηο τ
    w "NB[PO
    3PVUF
    
    ͷ࡟আ͞ΕͨϔϧενΣοΫ w &-#
    $POOFDUJPO
    %SBJOJOH
    w &-#
    Ϋϩεκʔϯෛՙ෼ࢄ
    w "NB[PO
    4
    όέοτͷόʔδϣχϯά
    w "84
    %JSFDU
    $POOFDU
    ઀ଓͷ৑௕ੑ
    w "84
    %JSFDU
    $POOFDU
    ϩέʔγϣϯͷ৑௕ੑ
    w "84
    %JSFDU
    $POOFDU
    Ծ૝ΠϯλʔϑΣΠεͷ৑௕ੑ
    w "NB[PO
    "VSPSB
    %#
    ΠϯελϯεΞΫηγϏϦςΟ
    w &$
    8JOEPXT
    Πϯελϯε༻ͷ
    &$$POpH
    αʔϏ ε
    w &$
    8JOEPXT
    Πϯελϯεͷ
    17
    υϥΠόόʔδϣϯ
67. 5SVTUFE
    "EWJTPS
    ύϑΥʔϚϯε  w ߴՔಇ཰ͷ
    "NB[PO
    &$
    Πϯελϯε
    w "NB[PO
    &#4
    ͷϓϩϏδϣϯυ
    *014
    44%
    ϘϦϡʔϜͷΞλονϝϯτઃఆ
    w &$
    ηΩϡϦςΟάϧʔϓͷϧʔϧ਺ͷաଟ
    w Πϯελϯεʹద༻͞ΕΔ
    &$
    ηΩϡϦςΟάϧʔϓͷϧʔϧͷ਺ͷաଟ
    w "NB[PO
    3PVUF
    
    ΤΠϦΞεϦιʔεϨίʔυηοτ
    w ࢖༻཰͕ߴա͗Δ
    "NB[PO
    &#4
    ϚάωςΟοΫϘϦϡʔϜ
    w "NB[PO
    $MPVE'SPOU
    ίϯςϯπ഑৴ͷ࠷దԽ
    w $MPVE'SPOU
    ϔομʔͷసૹͱΩϟογϡώοτ཰
    w "NB[PO
    &$
    ͔Β
    &#4
    ΁ͷεϧʔϓοτ࠷దԽ
    w $MPVE'SPOU
    ୅ସυϝΠϯ໊
68. 5SVTUFE
    "EWJTPS
    αʔϏεͷ੍ݶ  αʔϏεͷ࢖༻ྔ͕αʔϏεͷ੍ݶͷΛ௒͍͑ͯ ͳ͍͔ɺνΣοΫ͠·͢ɻ
    ඞཁʹԠ্ͯ͡ݶ؇࿨ਃ੥Λʂʂ
69. ηΩϡϦςΟؔ࿈  ࣭໰ ໎࿭Ϙοτ΍໎࿭ΫϩʔϥΞΫηεͰ ແବͳϦιʔεফඅ͍ͯ͠·ͤΜ͔ʁ
70. ηΩϡϦςΟؔ࿈  AWS WAF +AWS WAF Managed Rule
71. "84
    8"'  8"'ʢ8FC
    "QQMJDBUJPO
    'JSFXBMMʣ͸ɺ8FCαΠτ ͷΞϓϦέʔγϣϯ͕ɺ߈ܸ͞ΕͨΓɺσʔλ͕ྲྀग़͠ ͳ͍Α͏௿ݮ͢Δରࡦ
    $MPVEGSPOU·ͨ͸"-#ͷར༻લఏ
72. "84
    8"'
    .BOBHFE
    3VMF  "84
    8"'
    ϚωʔδυϧʔϧΛซ༻ͰɺηΩϡϦςΟ اۀͷݫબ͞ΕͨϧʔϧΛൺֱత҆Ձʹར༻Մೳ
    ֹ݄
    ʙ64%ʴϦΫΤετ਺՝ۚ ສSFR୯Ґ
73. "84
    8"'
    .BOBHFE
    3VMFʢҰ෦Λൈਮʣ  ϕϯμ ϧʔϧ໊ ༻్ Ձ֨ ' '
    3VMFT
    GPS
    "84
    8"'
    
    #PU
    1SPUFDUJPO
    3VMFT ࣗಈԽ͞Εͨ߈ܸ͔ΒอޢϘοτอޢϧʔϧ͸
    "84
    8"'
    ͷͨΊͷύʔτφʔ͕؅ཧ͢ΔϧʔϧͰɺ੬ ऑੑεΩϟφʔɺ΢ΣϒεΫϨʔύʔɺ%%P4
    πʔϧɺϑΥʔϥϜεύϜπʔϧͳͲͷଟذʹΘͨΔѱ ҙ͋ΔϘοτͷಈ͖Λ৯͍ࢭΊ·͢ɻ ݄  ສSFR ' '
    3VMFT
    GPS
    "84
    8"'
    
    $PNNPO
    7VMOFSBCJMJUJFT
    BOE
    &YQPTVSFT
    $7& Α͋͘Δ੬ऑੑͱ๫࿐
    $7&
    ͔Βอޢɻ"84
    8"'
    ͷ$7&ϧʔϧ͸ɺ࣍ͷγεςϜΛλʔήοτͱ͢ ΔΑ͘஌ΒΕͨ
    $7&
    ʹର͢ΔอޢΛ͠·͢
    "QBDIFɺ"QBDIF
    4USVUTɺ#BTIɺ&MBTUJDTFBSDIɺ**4ɺ +#PTTɺ+41ɺ+BWBɺ+PPNMBɺ.Z42-ɺ/PEFKTɺ1)1ɺ1)1.Z"ENJOɺ1FSMɺ3VCZ
    0O
    3BJMTɺ 8PSE1SFTTɻ ݄  ສSFR ' '
    3VMFT
    GPS
    "84
    8"'
    
    8FC
    FYQMPJUT
    08"41
    3VMFT ΢Σϒͷऑ఺Λอޢɻ'
    ΢Σϒ͸"84
    8"'
    ʹର͢Δ
    08"41
    ϧʔϧΛ׆༻͠ɺ08"41
    τοϓ
     ࠷΋ॏେͳ΢ΣϒΞϓϦέʔγϣϯϦεΫτοϓ
    ʹؚ·ΕΔ΢Σϒ߈ܸʹରͯ͠อޢ͠·͢ɻ͜ Εʹ͸
    42-Jɺ944ɺίϚϯυΠϯδΣΫγϣϯɺ/P42-J
    ΠϯδΣΫγϣϯɺܦ࿏τϥόʔαϧɺ༧ଌ తϦιʔεͳͲ͕͋Γ·͢ɻ ݄  ສSFR $4$ $ZCFS
    4FDVSJUZ
    $MPVE
    .BOBHFE
    3VMFT
    GPS
    "84
    8"' ೔ຊͷαΠόʔηΩϡϦςΟΫϥ΢υࣾͷϚωʔδυϧʔϧͰ͢ɻαΠόʔڴҖΠϯςϦδΣϯεΛ࢖༻ ͯ͠࠷৽ͷڴҖΞϥʔτΛؚΉΑ͏ʹఆظతʹߋ৽͞ΕΔϧʔϧηοτΛఏڙ͠·͢ɻ͜ΕΒͷϧʔϧη οτ͸ɺ08"41ͷτοϓ
    8FCΞϓϦέʔγϣϯڴҖϦετʹؚ·ΕΔ΋ͷ͢΂ͯΛؚΊɺ੬ऑੑΛ ܰݮ͠·͢ɻ1$*%44ͳͲͷηΩϡϦςΟن֨ʹ४ڌ͢ΔͨΊʹ8FCΞϓϦέʔγϣϯͷηΩϡϦςΟ ཁ݅Λຬͨ͢͜ͱ͕Ͱ͖·͢ɻίʔυΠϯδΣΫγϣϯٕज़ʢ42-Jɺ/P42-Jɺ04ίϚϯυͳͲʣɺ 944ɺσΟϨΫτϦτϥόʔαϧɺ͓Αͼ"QBDIF
    4USVUT
    
    
    "QBDIF
    5PNDBU
    
    0SBDMF
    8FC-PHJD
    
    8PSE1SFTTͳͲͷςΫϊϩδΛ࢖༻ͨ͠8FCΞϓϦέʔγϣϯʹؔ͢Δط஌ͷΤΫεϓϩΠτͳͲͷҰ ൠతͳ੬ऑੑΛඪతͱ͢Δ؅ཧϧʔϧ͕ଟ਺ؚ·Ε͍ͯ·͢
    %SVQBM
    
    +PPNMBʂͦͯ͠.BMJDJPVT
    #PUT ͷϧʔϧηοτͱͳΓ·͢ɻ ݄  ສSFR
74. "84
    8"'
    .BOBHFE
    3VMF  '
    #PU
    %FUFDUJPO
    4JHOBUVSFT
    'PS
    "84
    8"'Λར ༻ͯ͠8FCαʔόʔετϨεπʔϧͷΞΫηεΛϒϩο Ϋ
    ʛ
    %FWFMPQFST*0
    
    ࠃ࢈8"'ϕϯμʔ$4$͔Β৽͍͠"84
    8"'Ϛωʔδ υϧʔϧ͕ϦϦʔε͞ΕͨͷͰ࢖ͬͯΈͨ
    ʛ
    %FWFMPQFST*0
75. ηΩϡϦςΟؔ࿈  ࣭໰ GuardDutyΛ஌͍ͬͯΔํʁ GuardDutyΛར༻͍ͯ͠Δํʁ
76. ηΩϡϦςΟؔ࿈  GuardDuty
77. (VBSE%VUZͱ͸  (VBSE%VUZΛ༗ޮԽ͢Δ͚ͩͰɺ&$΍"-#ͳͲͷ ӡ༻͍ͯ͠ΔαʔϏε΁ͷ߈ܸ΍"84ΞΧ΢ϯτࣗମ ΁ͷ߈ܸΛݕ஌
    ख͍ؒΒͣʂʢ&$΁Πϯετʔϧෆཁʣ
    ۩ମతʹ͸࣍ทͷ΋ͷΛݕ஌
78. (VBSE%VUZݕ஌಺༰  w ίΠϯϚΠχϯά
    w TTI3%1ϒϧʔτϑΥʔεΞλοΫʢ૯౰ͨΓ߈ܸʣ
    w *".
    6TFSͷෆਖ਼ϩάΠϯ
    w ίϚϯυˍίϯτϩʔϧʢ$$ʣαʔό΁ͷ௨৴
    w ϙʔτεΩϟϯ
    w ࿙Ӯͨ͠ΫϨσϯγϟϧར༻
79. ݕग़ྫ  44)ϒϧʔτϑΥʔε
80. ݕग़ྫ  ϙʔτεΩϟϯ
81. (VBSE%VUZྉۚ  w ແྉͰ೔ؒར༻Ͱ͖·͢ɻ
    w ແྉ࿮ར༻ͷؒʹ࣮ࡍ͍͘Β͔͔Δͷ͔Θ͔Γ·͢ʂ
    
    w "84ར༻අશମͷ͏ͪɺҎ্ͷΞΧ΢ϯτͰ ҎԼͷྉۚͰར༻ՄೳʢΫϥεϝιουௐ΂ʣ
82. (VBSE%VUZ  ৄࡉ͸ͪ͜Β
    ʲશһඞਢʳ(VBSE%VUZ͕ίεύ࠷ڧͷڴҖݕ஌αʔ ϏεͰ͋Δ͜ͱΛূ໌ͯ͠Έͨ
    ʛ
    %FWFMPQFST*0
    
83. ηΩϡϦςΟؔ࿈  ࣭໰ ΞϓϦέʔγϣϯ΁ σʔλϕʔε઀ଓ৘ใΛ ϋʔυίʔτ͍ͯ͠Δํʁ
84. ηΩϡϦςΟؔ࿈  AWS Systems Manager ύϥϝʔλετΞ AWS Secrets Manager
85. AWS SSMύϥϝʔλετΞ/Secrets Manager ϝϦοτ  ΞϓϦέʔγϣϯ͕ར༻͢Δػີ৘ใϋʔυίʔυෆཁʹ
    ΞϓϦέʔγϣϯߋ৽࣌ʹݕ౼Λʂʂ
    ػີ৘ใͷߋ৽ͷखؒ΋ܰݮ
86. "84
    44.ύϥϝʔλετΞ4FDSFUT
    .BOBHFS
    ϝϦοτ  w ଟ༷ͳػີ৘ใΛ֨ೲՄೳ
    w ϩʔςʔγϣϯػೳͷ࣮૷ 4FDSFUT
    .BOBHFSͷΈ
    w ઃఆ஋΍ύεϫʔυΛूதతʹ؅ཧ͢Δ֊૚ܕετ Ϩʔδ
    w ΞΫηε੍ޚʗ҉߸Խ͕Մೳ
    w ଞͷαʔϏε͔Βͷࢀর͕༰қ
87. ར༻ઌ
    &$  w ݖݶ͸*".
    3PMFʢΠϯελϯεϓϩϑΝΠϧʣܦ༝
    w ༷ʑͳλΠϛϯάͰύϥϝʔλʔΛऔಘ
    w Πϯελϯεͷىಈ࣌ʢϢʔβʔσʔλʣ
    w ϓϩηεͷىಈ࣌ʢ".*࡞ΓࠐΈʗσϓϩΠ࣌ʹઃఆʣ
    w ͦͷଞʢΞϓϦέʔγϣϯͰ೚ҙͷλΠϛϯάʹʣ
88. ར༻ઌ
    "NB[PO
    &MBTUJD
    $POUBJOFS
    4FSWJDF &$4  w ݖݶ͸*".
    3PMFʢλεΫϩʔϧʣܦ༝Ͱ෇༩
    w ؀ڥม਺ͱͯ͠ύϥϝʔλʔετΞΛࢦఆՄೳ
89. ར༻ઌ
    "84
    -BNCEB  w ݖݶ͸*".
    3PMFܦ༝Ͱ෇༩
    w ೚ҙͷλΠϛϯάͰऔಘ
    w ࠓ͸-BNCEBؔ਺ʹ؀ڥม਺͕͋Δ
    w ूத؅ཧ͍ͨ͠৔߹͸ύϥϝʔλʔετΞΛҾ͖ଓ͖ ར༻
    ʢ-BNCEBؔ਺͕ଟ͍৔߹ͳͲʣ
90. ར༻ઌ
    ͦͷଞ  w "84
    $PEF#VJME
    ˠ
    #VJME4QFDZNM಺Ͱऔಘ
    w "84
    $PEF%FQMPZ
    ˠ
    "QQ4QFDZNM಺Ͱऔಘ
91. "84
    44.ύϥϝʔλετΞͱ4FDSFUT
    .BOBHFSҧ͍͸ʁ  w ϩʔςʔγϣϯͰ͖ϥϯμϜจࣈྻͷੜ੒͕Ͱ͖Δ
    w ύϥϝʔλʔετΞ͸4FDSFU
    .BOBHFSͷύεε ϧʔαʔϏεͱͯ͠ػೳ͢Δ
    w lBXTSFGFSFODFTFDSFUTNBOBHFSzΛ໊લͷઌ ಄ʹ෇༩͢Δͱɺ
    4FDSFU.BOBHFSΛࢀর͢Δ
    w ύϥϝʔλετΞΛར༻͢ΔΑ͏ʹΞϓϦΛ࡞ΓࠐΜ Ͱ͍Δ৔߹Ͱ΋ɺ໊લΛमਖ਼͢Ε͹Ҡߦ͸ൺֱత༰қ
92. "84
    44.ύϥϝʔλετΞͱ4FDSFUT
    .BOBHFSͷྉۚ  4ZTUFNT
    .BOBHFS
    ύϥϝʔλετΞ
    
    w ελϯμʔυ͸ແྉɻ
    w εϧʔϓοτ্ݶΛ૿Ճ΍ɺΞυόϯεύϥϝʔλͷ৔߹͸༗ྉɻ 
    ճͷ
    "1*
    ίʔϧ͋ͨΓ64%ɻ
    w ·ͨɺ҉߸Խʹར༻͞ΕΔ,.4ʹͯ$., ΧελϚʔϚελʔΩʔɻϢʔβଆͰੜ੒͠ ͨΩʔ Λར༻͢Δ৔߹ɺ,.4ͷ"1*ݺͼग़͠ྉ͕ۚඞཁɻ
    4FDSFUT
    .BOBHFS
    w ༗ྉɻγʔΫϨοτ݅͋ͨΓ
    64%݄ɻ 
    ճͷ"1*ίʔϧ͋ͨΓ64%ɻ
    w ߋʹύϥϝʔλετΞͱಉ༷ɺ,.4ͷ҉߸Խʹ$.,Λར༻͢Δ৔߹ɺ,.4ͷ"1*ݺͼग़ ͠ྉ͕ۚඞཁ
    ʢ೔ؒͷτϥΠΞϧظؒ͋Γɻʣ
93. ৄࡉ  ࣾ಺ษڧձͰύϥϝʔλʔετΞʹ͍ͭͯൃද͠·ͨ͠
    ʛ
    %FWFMPQFST*0
94.  ·ͱΊ
95. ·ͱΊ  γεςϜͷݟ௚͠ϙΠϯτ
    w ৽αʔϏεɾ৽ػೳͷऔΓࠐΈܧଓతͳվળ
    w "84ͷϚωʔδυαʔϏεΛ࠷େݶʹར༻
    w ݟ௚࣮͠ࢪ͢ΔͨΊͷఆظతͳγεςϜϩʔυϚοϓ ࡞੒ͱ༧ࢉ֬อ