Amazon VPC and Amazon EC2

Amazon VPC and Amazon EC2

Transcript

1. 1 0 1 # 1 0
2. U K O W ( S L G P P J - 07120 ( - -07 0 A ( - - ) 0 )
3. 
   19 2 1 / 0 3 1/ 3
5. CE / / A 5
7. d I A V C e P a A6 7
8. )( / e P W i SD R 1 P 0 ) ) / e t 0 rSWN ec P 0N P D ec N3/. 7 65 98865 W NT I C DAV o 0 I 3/. W . 2 I / e W AV P n 8
9. PN D R I C R D 9 https://docs.aws.amazon.com/ja_jp/vpc/latest/userguide/VPC_Subnets.html
11. ( ) 11
12. 12 https://aws.amazon.com/jp/about-aws/global-infrastructure/
13. . a stze C uhfdn mp a S ri )( : : : / : . . - :. .: cb j a w a voG C A l RC gb - a ri W 13
14. ( ( ) A Z 14
15. 15 https://aws.amazon.com/jp/about-aws/global-infrastructure/      
16. / 16 
    
17. .10 ./ ./. 10 17 6 VPC
18. ./0 01 010 6 . 18 01 010 6 . 01 010 6 . 01 010 6 . 01 010 6 .   
    
19. 
     19
20. ( ) )( V P S e C S N t I b V P n P u V P S V P V P I N n 20
21. 041 21 A /23/0232 . 41 /23/0232 . 41 /23/0232 . 41 6 041 6 041 6 041 /23/0232 . 41 6 041
22. 
      22
23. 
      23 () P P I R I Deo P PD bV T a C PP I l I P P P P u I I P PD l C P P t
24. 
      24 ) R T R T N R T R T ( e  NP D ( R T ob N R T T PR NP CA N PR R I l V R R I R I a
25. . 0 6 / / 1 25 C / / 10.0.0.0/16 local / /
26. 
         26
27. 
     27
28. 28 - - - d UV ) l d d G d G i n CP) da d tGg ot w dW - d UV e d UV G P d O n ) l Os n CPp rIyoo G E ( - U I
29. 2 2 - /23 SVC PCRV 29 Z C T 2 23 1 2 23 1 0 3 0 3 C / 00000000 0 . 3 G I VC PCRV 2 2 6 AAAAAAAA 2 4 . - .
30. 
     30
31. 
     A I I I A W 6 W T PNT I A T S I I 31
32. U L M b G i Pk N u L E P U / ST CIL 5 DCIop E y s Nop E Mw r l eA/ 4 Mt N y 4 5 Mt Nr c a Me eL / ST 32
33. V 9 0 9V P C , D 5 9 33 https://docs.aws.amazon.com/ja_jp/vpc/latest/userguide/vpc-nat-gateway.html
34. TO T d _ S_ E T AOjh _ S_ S li :: 2 . : . : . _ S_ E _ _ Ce A N a A N E _ S_ g c :: - 2 2 :. : . / -. : : 34
36. 36 A 4 - oa mad c_ i oa ) / h nc_P - oa evR a a Sgcep _ j a wz I - S l e a a a aW r A 4 -W a a Sgcep _ j a wz I P tsU r r L S . W A( A# E #4 : 64 4 6 A 42 -2 oa
37. wz C: /dv p P s s L Iv C: /d p tu L Uc s Ienghnga . C: /d s Uc s Ienghnga . s C: /d v ULUc _ C: / do r t N W N P _ njleni m )- d tUcS v US P CC # # G # (2 ) C C A : C: : A : # C : : A E A: 37
39. 39 ( ) NP L P LP P PV N L P L C A k k C P k w Cr e k to NP ( ) to ( ) NP to
40. . A ) - 40 P ( ) 2 2 C 1 ) 0/ ) Z I G N V .. . .. . e . A ) - L 2 A2C 6A 2 4 *02/10/2 4 L ( IPv4 I) H CHTTP/HTTPS 8 8C3 S P4P P4P H T e A
41. . A ) - 41 V IP ( ) 2 2 C 1 ) 0/ ) N N a Z b .. . .. . . A ) - G L 2 A2C 6A 2 4 *02/10/2 N N a Z/b 100 Custom . TCP 49152- 65535 0.0.0.0/0 * ALL ALL ALL 0.0.0.0/0 . A ) - G G L 3I A AC C H TP L3L 8 L3L AC C H 4 S
43. 43 2 / Se P c R C R R G P B C R ou oury G I R ou G R R ou G r G L R R ou oury r t GV ED i t R G R R G u 2 / 2 / p CGou
44. 06 8 - 44 Z ( A 89 4898 2 6 1/ 4 6 G N V S N 00 1 / 11/0 1 / 5 69 - ./ -/2 - ./ 06 8 - G P 1/. - 6 A CCCCCCCC 8 6 3 VPC 8 469SSHC HTTPC ping () (
45. 06 8 - 45 Z V ( A 89 4898 2 6 1/ 4 6 N S S a 00 1 / 11/0 1 / 4 56 - ./ -/2 - ./ 06 8 - P 1/. - 6 A CCCCCCCC 8 6 VPC 38 ping9 G () ( N S S a 4 56 ICMP – IPv4 ICMP 0-65535 192.168.0.0/16 06 8 - P
46. 46 Network ACL Security Group   
     +(,*%(& 
     +( %(& 
     
     !'  # $)" !'   )"
47. 
     47
48. 
     48 H AC A PN D A
49. 
     49 A PA N A V PA W P A P P N S
50. 
     50 V V c V om V W hnA j P :rp P N S : SV P a c ig . / . /
51. 
      51 
    
52. 
      52 
    
53. 
     53 / : / : t U A S A S W r _ a sDGu W a c C tn a weC / : / : a u / : / : im j od lh p :: . . / : / : :/ : / ./ / / :
55. 
     55 : : c b A PWV S H P C S Na / .
57. 
     57 EN 2 W A 2 EN 2 P V E C S a 2
58. 
     
     58
59. 
     59
60. 
     60 C P
61. 
     61 
       
    
        
62. 
     62 - - /
63. 
     63 
          
       
65. l l l l l l / l l / l C l A C 65
67. VA ( L L WS I PR A CM E LR A ALC I / 2 ( 2 ( / 2 (( ( ) / 67
69. S A 69
70. 2 DC F AE 2 2 2 2 2 2 2 2 2 70
71. ( ) 71
72. ) ( M M M M M M A M M M M M S M W 3 I 72
73. ) ( rp p rp W th a a _ A mj MS Ua l IS Ua igG E Cso : / . . . / .- : . . 2 . p du mj I Mw Cso n c e so : / . . . / .- : . :. . 73
74. ( ) A M I 74
75. 
     75
76. 
            
     76
77. 
     U I t C m U U c e C I r 3 P O p f Ix U c p 2 2 4 4 c i U I U e p / / f d e i U U P O 1 i I g f U 77
78. 
     G G SU C E G G SUC / - 2 . . : -. . . . . / 2 W ASU E 78
79.   
        %5+35-"5()5( SA"5()5(; <=YHFW 4'0-"5()5( 7B=TK@ "5()5( 6UND\: (2*,"5()5( :XQ:X8M G>M9 [PND ME@RJ V@1(,.-#$!VL"5()5( V@I?&/ "5()5( SA V@1(,1(,"5()5(HOCZ RJ 79
80.   
          
     80
81.   
       d d a d d _ A u W U m r w zCt E S d d aCslES c U Wd h c p ae d d a p j ae h G w h in d d A d d o r / - 2 . . : -. . . . . / 2 81
82. 
     G I IAU G C SWA E 2 . - - / /: ./ :/ -/ 2 2 . - - / . ./ /- . -/ 2 82
83. 
    83
84. 
    C U 2W U E U W A P A P E A E A 84
85. 
    e up Ca d a dtj W _tj W rztj lN n UgTSE ws 2 / . - - - . - - : / .: 2 / - .2 C U hGSE cA o ws - Umj i GSE ws 2 / . - - - . - - / - .2 - : -: 2- / - 2 85
86. 
      86
87. 
      ) 2 A I P ) 2 E N C E ) 2 ) 2 ( P ) 2 ) 87
88. 2 / / -2 iiw L / H e W o S ()( / (( a cAL eH x E i / -2 H e c c - / / 2 SH U nAL i tALE d um s r 88
89. 2 2 . znl hCg w I jA C W Go W t w I SE . ch I aeG W I j d CMI A W Ut ur hCg urI d C smIAur p . hCg w 3 : / . . . / . : . 2 3 . GznI U j hCg w i_ eo E 89
90. 6 l E A ) a M ) ) ) ) ) ) 4 a ) a PCI ( i E I c 90
91. b P P Iae G NU P_ # 2 / / /C : /. - / 2 : : A/ / P Pd I N S Ec W S c 91
92. 
     92
93. 
     2 ( ( 2 ) 93
94. pOomaieW T wOh U S 44 / P (5 W_ yOigOiV s hz o 12 4 44 E / P (5 mO tOi Oe Oo i Osln 0 HI / P (5 l mO mO cd pci rOnu O EB 0 H / P (5 eji mO i Osln II ) E H : H :C: ED EC A: A 4. B:I HI 6H G/ . 4 EB C 5 H ICB 94
95. S a 3 E 3 B 95
96. z E a S d e W Ci _ g Isn W Uc Uh h A m E t jpl wnG u or C . : : ( /: :/ 2./ : /( / 96
97. 
     97
98. 
     A I EC CD A A A 2a 2 98
99. 
     99
100. 
      / / / 2 100
101. 2 / / i i j pu A xmL r z _ e Ui R h aS Rvw rto rEC G LnlRch U s Wedi_R / .: - : - - . - - : : 2/ 2 :. / .: - : - - . - - : 2 / : 2/ 2 / : :. 101
102. G G A GE CA W S E : 2 / / .2 . 102
103. Enk L_hSC jGuo F C j w ps wl Gh C j j aheCc / : iC_ L g h MWCj / 2/: / L_hSC j / : / LgCc / P cd h z rm t /A / /B : /. / 2 : A 2 /:/ 2 2: / 103
104. 
      
105. 
       105 m snlPw k h de rhPN P t / A C . 2C E C : AA E Vg Gc a GaW V ui P z P G Vg g o P Pp jSL A A F 2 C AC A C I sn O T f Pyn
106. 
         106
107. 
         107 https://aws.amazon.com/jp/compliance/shared-responsibility-model/ A A W A S
108. 
         108 https://aws.amazon.com/jp/compliance/shared-responsibility-model/
109. 
      109
110. 
      A S S W : . / . / . . 110
111.   
      111
112.   
      WV a A T S C P 112
113. zlA D_ iAt rjw oh lA h p mA iAt _ dc o gnatna dc o gnatna dc o es h u z g _ PS W K IS_ p w o / . - - - . - - . / :-3 - : 3/ . / :-3 : 3/ 113
114. 2 d Vp V o L a i V 2 d Wsm :DDA C C 3 A D CD A B E B C EB B B :D CEAA BD B C EB C . # / S 2 d Vp wI rI r - g tn NR Id Rhj e lv Pzu _ c f :DDA C C 3 A D CD A B E 2: D C :D :DDAC C A BD D 114
115.    
      / SebcnI o f I_ pK U clf b W jgaj u E C m LVU E lIhPt UPrw Wrz E CSm W- t - s G : C:C : C P G C : C P :3 s d kioc A C FC G A G / C .C E: F C 115
116. / 0 0. / .0 N A LS Gc eP G C I A 116
117. P W V C U 117
118. 
      118
119. 
      G I A u t G I C t A N P c r C O I P e p GL C r C o t S PAi k c G I A 119
120. 
       120
121. 
       A C 2 2 A A S / 2 W A A A E CE W 121
122. 
       2 E 2 / C / C 122
123. 
       2 / 2 C E 123
124. 
       2 A 124
125. 
      125
126. 
      AU : SW : R L ca . / . . . / 126
127. 
      D W D 5 D 4 3 C V 1 2 D 1. 2I2 / 1 / 5 2N D A0 / 1 A0 / 1 2 S2 P D 127
128. 
      SLh_ S ecR ong b__s U C Lb_ i dj L m ec i S B p S E a Rlt :: . - - -- : 2 2 :/ : : - : - : : 128