AWS Summit Tokyo の思ひ出/Memories_of_AWS_Summit_Tokyo_2017

26c17d2f70a57a8fd9a70885682fcd74?s=47 Yohei Kawahara
July 13, 2017
63

AWS Summit Tokyo の思ひ出/Memories_of_AWS_Summit_Tokyo_2017

JAWS-UG 福岡@集団山見せと AWS Summit Tokyo 振り返ら Night#5

26c17d2f70a57a8fd9a70885682fcd74?s=128

Yohei Kawahara

July 13, 2017
Tweet

Transcript

  1. AWS Summit Tokyo ͷ ࢥͻग़ JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo

    ৼΓฦΒ Night#5 1 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  2. ͋Μͨ୭Ͷʁ • ઒ݪ ༸ฏ(ʮ͔ͬͺʯͱݺΜͰͶ ! ) • iret גࣜձࣾ cloudpack

    ࣄۀ෦ • Github : inokappa • twitter : @inokara • Facebook : inokappa • Blog : http:/ /inokara.hateblo.jp 2 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  3. ࣮͸... 3 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  4. AWS GameDay 2016 ༏উϝϯόʔ Ͱ͢ 4 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit

    Tokyo ৼΓฦΒ Night#5
  5. ΞδΣϯμ 1. AWS Summit Tokyo ͷࢥ͍ग़ΛࡾߦͰ 2. ηογϣϯৼΓฦΓ ʙ DevSecOps

    on AWS - Policy in Code ʙ 5 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  6. AWS Summit Tokyo ͷ ࢥ͍ग़ΛࡾߦͰ 6 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit

    Tokyo ৼΓฦΒ Night#5
  7. ࡾߦ • ձ৔͕େ͖͍ • ͱʹ͔͘ਓ͕ଟ͍ • ৭ΜͳҙຯͰ೤͍ʢॵ͍ʣ 7 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ

    AWS Summit Tokyo ৼΓฦΒ Night#5
  8. ձ৔͕େ͖͍ • άϥϯυϓϦϯεϗςϧ৽ߴྠͱ඼઒ ϓϦϯεϗςϧΛି͠੾ͬͯࣥΓߦΘ Εͨ • ϗςϧΛೋͭି͠੾ΔύϫʔΛೋͭͷ ϗςϧΛߦ͖དྷ͠ͳ͕Βײͨ͡ 8 JAWS-UG

    ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  9. ͱʹ͔͘ਓ͕ଟ͍ • ࢀՃऀ΋͞Δ͜ͱͳ͕Βɺ܎һͷਓ͕ͨͪଟ͔ͬͨ • ͓ӄ༷Ͱ΄ͱΜͲ໎͏͜ͱͳ͘໨తͷձ৔·ͰḷΓண͚Δͨ 9 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit

    Tokyo ৼΓฦΒ Night#5
  10. ৭ΜͳҙຯͰ೤͍ʢॵ͍ʣ • ਓ͕ଟ͍ͷͰ౰વ...ώʔτΞΠϥϯυ • ίϯύχΦϯͷ͓࢞ͪΌΜʹυΪϚΪͯ͠৺ഥ਺΋্͕ͬͯମ Թ΋্͕Δ 10 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS

    Summit Tokyo ৼΓฦΒ Night#5
  11. ͜ΕΒ͸࣮ࡍʹࢀՃ͠ ͨਓʹ͔͠ղΒͳ͍͚ ͲɺͲʔͰ΋ΠΠࣄͰ ͟͝Δʢ׼ʣ 11 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo

    ৼΓฦΒ Night#5
  12. ͦͯ͠ɺࢀՃग़དྷͳͯ͘΋... 12 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  13. 13 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  14. 14 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  15. ΄΅΄΅ʢ˞ʣࢿྉ΋ ಈը΋ެ։͞Ε͍ͯ Δʂ͋Γ͕ͨ΍ɺ͋Γ ͕ͨ΍ ※ ࢿྉͷΈಈըඇެ։ͱ͍͏ύλʔϯ΋͋Δ 15 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS

    Summit Tokyo ৼΓฦΒ Night#5
  16. ͱ͍͏͜ͱͰɺࢀՃ͠ ͨηογϣϯͷৄ͍͠ ಺༰͸ׂѪʂͤͯ͞௖ ͖·͢ͷͰ... ※ ಈը΍ࢿྉΛޚཡ͍ͩ͘͞ʂ! 16 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS

    Summit Tokyo ৼΓฦΒ Night#5
  17. ऴΘΓʂ 17 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  18. 18 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  19. ͑ɺ ΋͏ऴΘΓʂʁ 19 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  20. ࣗओن੍ 20 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  21. ͱ͍͏͜ͱͰ... 21 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

  22. ࢀՃͨ͠ηογϣϯ͔ Β໘ന͍σϞΛ΍ͬͯ ͍ͨηογϣϯΛৼΓ ฦͬͯΈ·͢ 22 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo

    ৼΓฦΒ Night#5
  23. ࣗ෼͕ࢀՃͨ͠ηογϣϯ 1. DevSecOps on AWS - Policy in Code 2.

    [ϝϧΧϦ] Cloud connect the world as a Glue 3. [Intelligence] ΦϯϓϨ͔ΒҠߦ͢ΔͷͰɺAmazon ECS Ͱίϯς φԽͱ Terraform ͰΠϯϑϥίʔυԽͨ͠࿩ 23 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  24. ࡾͭͷத͔Β DevSecOps on AWS - Policy in Code Λͬ͘͟ Γ঺հ͠·͢

    24 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  25. DevSecOps on AWS - Policy in Code 25 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ

    AWS Summit Tokyo ৼΓฦΒ Night#5
  26. DevSecOps on AWS - Policy in Code ʢུʣεϞʔϧελʔτ͸ AWS Ϋϥ΢υͷྑ͞Ͱ͕͢ɺن໛͕େ

    ͖͘ͳΔʹ࿈Εɺ։ൃ͕ෳ਺ͷ AWS ΞΧ΢ϯτʹ·͕ͨͬͨΓɺ ΑΓηΩϡϦςΟɾΨόφϯεͷڧԽΛٻΊΒΕΔ͜ͱ͕͋Γ· ͢ɻຊηογϣϯͰ͸ɺσϕϩούʔͷօ͞Μ͕ར༻͢Δ AWS Ϋ ϥ΢υ؀ڥ؅ཧΛ೗ԿʹࣗಈԽͤ͞ɺ։ൃʹूதͰ͖Δ؀ڥΛσ ϓϩΠ͢Δ͔ʹ͍ͭͯσϞΛަ͓͑࿩ͤͯ͞௖͖·͢ʢུʣ 26 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  27. ͦ΋ͦ΋ɺDevSecOps ͬͯ • ձ৔Ͱ͸ʮԶ͸ DevSecOps ஌ͬͯΔͥʯͬͯਓ͸Ұׂ͘Β͍ • DevOps (Developer:։ൃ ͱ

    Operation:ӡ༻͕࿈ܞͯ͠ڠྗ͢Δ։ ൃٕ๏) ͷ֤޻ఔͷதͰ Security ΋௥Ճͯࣗ͠ಈԽΛਤΔࢥ૝ • ࣗಈԽʢSecurity AutomationʣΛ DevOps ͱҰॹʹӡ༻͢Δͷ͸ ೉͍͠ • ͦ΋ͦ΋ηΩϡϦςΟϧʔϧͷӡ༻ࣗମ͕োนͱͳΓ͏Δ 27 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  28. AWS ͳΒ֤αʔϏεΛ ૊Έ߹Θͤͯɺ؆୯ʹ Security Automation Λ ӡ༻ग़དྷΔʂ 28 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ

    AWS Summit Tokyo ৼΓฦΒ Night#5
  29. Security Automation • Security Control • Proactive Monitoring 29 JAWS-UG

    ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  30. Security Control • ͍ΘΏΔݖݶ؅ཧ • IAM Role ͱ STS Λར༻ͨ͠Ұ࣌తͳೝূ৘ใ͕ॏཁ

    • STS Λར༻͢Δ͜ͱͰҰ࣌తͳೝূ৘ใͷൃߦ͕ՄೳʢAssume Role ͢Δʣ • ݖݶ͕ߜΒΕ͍ͯΔͷͰɺ։ൃऀ͕࢖͍͍ͨαʔϏεΛ௚͙ʹ ར༻ग़དྷͳ͍৔߹͕͋Δ 30 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  31. Proactive Monitoring • ͋Β͔͡Ί؇ΊͷݖݶΛ༩͓͍͑ͯͯɺ֤छΠϕϯτΛ؂ࢹ͠ ͯɺͦΕʹԠͯ͡ΞΫγϣϯΛى͜͢࢓૊ΈΛ࣮૷͢Δ • ؔ࿈͢ΔαʔϏε • CloudTrailʢAPI ૢ࡞ͷϩΪϯάʣ

    • CloudWatch Eventsʢ֤छΠϕϯτΛݕ஌ͯ͠ΞΫγϣϯʣ • Configʢมߋ؅ཧʣ 31 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  32. Proactive Monitoring ͷσϞ 32 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ

    Night#5
  33. Proactive Monitoring ͷσϞ 33 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ

    Night#5
  34. ࢀߟ URL • https:/ /www.youtube.com/watch?v=s5JD82594uY ! • https:/ /d0.awsstatic.com/events/jp/2017/summit/devday/ D3T7-2.pdf

    ! • http:/ /qiita.com/sgp/items/07a9d1a40870b3faf75f ! • http:/ /dev.classmethod.jp/cloud/aws-summit-2017-report-dev- day-d3t7-2/ ! • https:/ /www.fsz.co.jp/?press=aws-summit-dev-day-2017-tokyo- 34 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
  35. ͓ΘΓ 35 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5