AWS Summit Tokyo の思ひ出/Memories_of_AWS_Summit_Tokyo_2017

JAWS-UG 福岡@集団山見せと AWS Summit Tokyo 振り返ら Night#5

Transcript

1. AWS Summit Tokyo ͷ ࢥͻग़ JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5 1 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
2. ͋Μͨ୭Ͷʁ • ઒ݪ ༸ฏ(ʮ͔ͬͺʯͱݺΜͰͶ ! ) • iret גࣜձࣾ cloudpack ࣄۀ෦ • Github : inokappa • twitter : @inokara • Facebook : inokappa • Blog : http:/ /inokara.hateblo.jp 2 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
3. ࣮͸... 3 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
4. AWS GameDay 2016 ༏উϝϯόʔ Ͱ͢ 4 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
5. ΞδΣϯμ 1. AWS Summit Tokyo ͷࢥ͍ग़ΛࡾߦͰ 2. ηογϣϯৼΓฦΓ ʙ DevSecOps on AWS - Policy in Code ʙ 5 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
6. AWS Summit Tokyo ͷ ࢥ͍ग़ΛࡾߦͰ 6 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
7. ࡾߦ • ձ৔͕େ͖͍ • ͱʹ͔͘ਓ͕ଟ͍ • ৭ΜͳҙຯͰ೤͍ʢॵ͍ʣ 7 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
8. ձ৔͕େ͖͍ • άϥϯυϓϦϯεϗςϧ৽ߴྠͱ඼઒ ϓϦϯεϗςϧΛି͠੾ͬͯࣥΓߦΘ Εͨ • ϗςϧΛೋͭି͠੾ΔύϫʔΛೋͭͷ ϗςϧΛߦ͖དྷ͠ͳ͕Βײͨ͡ 8 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
9. ͱʹ͔͘ਓ͕ଟ͍ • ࢀՃऀ΋͞Δ͜ͱͳ͕Βɺ܎һͷਓ͕ͨͪଟ͔ͬͨ • ͓ӄ༷Ͱ΄ͱΜͲ໎͏͜ͱͳ͘໨తͷձ৔·ͰḷΓண͚Δͨ 9 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
10. ৭ΜͳҙຯͰ೤͍ʢॵ͍ʣ • ਓ͕ଟ͍ͷͰ౰વ...ώʔτΞΠϥϯυ • ίϯύχΦϯͷ͓࢞ͪΌΜʹυΪϚΪͯ͠৺ഥ਺΋্͕ͬͯମ Թ΋্͕Δ 10 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
11. ͜ΕΒ͸࣮ࡍʹࢀՃ͠ ͨਓʹ͔͠ղΒͳ͍͚ ͲɺͲʔͰ΋ΠΠࣄͰ ͟͝Δʢ׼ʣ 11 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
12. ͦͯ͠ɺࢀՃग़དྷͳͯ͘΋... 12 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
13. 13 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
14. 14 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
15. ΄΅΄΅ʢ˞ʣࢿྉ΋ ಈը΋ެ։͞Ε͍ͯ Δʂ͋Γ͕ͨ΍ɺ͋Γ ͕ͨ΍ ※ ࢿྉͷΈಈըඇެ։ͱ͍͏ύλʔϯ΋͋Δ 15 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
16. ͱ͍͏͜ͱͰɺࢀՃ͠ ͨηογϣϯͷৄ͍͠ ಺༰͸ׂѪʂͤͯ͞௖ ͖·͢ͷͰ... ※ ಈը΍ࢿྉΛޚཡ͍ͩ͘͞ʂ! 16 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
17. ऴΘΓʂ 17 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
18. 18 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
19. ͑ɺ ΋͏ऴΘΓʂʁ 19 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
20. ࣗओن੍ 20 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
21. ͱ͍͏͜ͱͰ... 21 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
22. ࢀՃͨ͠ηογϣϯ͔ Β໘ന͍σϞΛ΍ͬͯ ͍ͨηογϣϯΛৼΓ ฦͬͯΈ·͢ 22 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
23. ࣗ෼͕ࢀՃͨ͠ηογϣϯ 1. DevSecOps on AWS - Policy in Code 2. [ϝϧΧϦ] Cloud connect the world as a Glue 3. [Intelligence] ΦϯϓϨ͔ΒҠߦ͢ΔͷͰɺAmazon ECS Ͱίϯς φԽͱ Terraform ͰΠϯϑϥίʔυԽͨ͠࿩ 23 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
24. ࡾͭͷத͔Β DevSecOps on AWS - Policy in Code Λͬ͘͟ Γ঺հ͠·͢ 24 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
25. DevSecOps on AWS - Policy in Code 25 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
26. DevSecOps on AWS - Policy in Code ʢུʣεϞʔϧελʔτ͸ AWS Ϋϥ΢υͷྑ͞Ͱ͕͢ɺن໛͕େ ͖͘ͳΔʹ࿈Εɺ։ൃ͕ෳ਺ͷ AWS ΞΧ΢ϯτʹ·͕ͨͬͨΓɺ ΑΓηΩϡϦςΟɾΨόφϯεͷڧԽΛٻΊΒΕΔ͜ͱ͕͋Γ· ͢ɻຊηογϣϯͰ͸ɺσϕϩούʔͷօ͞Μ͕ར༻͢Δ AWS Ϋ ϥ΢υ؀ڥ؅ཧΛ೗ԿʹࣗಈԽͤ͞ɺ։ൃʹूதͰ͖Δ؀ڥΛσ ϓϩΠ͢Δ͔ʹ͍ͭͯσϞΛަ͓͑࿩ͤͯ͞௖͖·͢ʢུʣ 26 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
27. ͦ΋ͦ΋ɺDevSecOps ͬͯ • ձ৔Ͱ͸ʮԶ͸ DevSecOps ஌ͬͯΔͥʯͬͯਓ͸Ұׂ͘Β͍ • DevOps (Developer:։ൃ ͱ Operation:ӡ༻͕࿈ܞͯ͠ڠྗ͢Δ։ ൃٕ๏) ͷ֤޻ఔͷதͰ Security ΋௥Ճͯࣗ͠ಈԽΛਤΔࢥ૝ • ࣗಈԽʢSecurity AutomationʣΛ DevOps ͱҰॹʹӡ༻͢Δͷ͸ ೉͍͠ • ͦ΋ͦ΋ηΩϡϦςΟϧʔϧͷӡ༻ࣗମ͕োนͱͳΓ͏Δ 27 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
28. AWS ͳΒ֤αʔϏεΛ ૊Έ߹Θͤͯɺ؆୯ʹ Security Automation Λ ӡ༻ग़དྷΔʂ 28 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
29. Security Automation • Security Control • Proactive Monitoring 29 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
30. Security Control • ͍ΘΏΔݖݶ؅ཧ • IAM Role ͱ STS Λར༻ͨ͠Ұ࣌తͳೝূ৘ใ͕ॏཁ • STS Λར༻͢Δ͜ͱͰҰ࣌తͳೝূ৘ใͷൃߦ͕ՄೳʢAssume Role ͢Δʣ • ݖݶ͕ߜΒΕ͍ͯΔͷͰɺ։ൃऀ͕࢖͍͍ͨαʔϏεΛ௚͙ʹ ར༻ग़དྷͳ͍৔߹͕͋Δ 30 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
31. Proactive Monitoring • ͋Β͔͡Ί؇ΊͷݖݶΛ༩͓͍͑ͯͯɺ֤छΠϕϯτΛ؂ࢹ͠ ͯɺͦΕʹԠͯ͡ΞΫγϣϯΛى͜͢࢓૊ΈΛ࣮૷͢Δ • ؔ࿈͢ΔαʔϏε • CloudTrailʢAPI ૢ࡞ͷϩΪϯάʣ • CloudWatch Eventsʢ֤छΠϕϯτΛݕ஌ͯ͠ΞΫγϣϯʣ • Configʢมߋ؅ཧʣ 31 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
32. Proactive Monitoring ͷσϞ 32 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
33. Proactive Monitoring ͷσϞ 33 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
34. ࢀߟ URL • https:/ /www.youtube.com/watch?v=s5JD82594uY ! • https:/ /d0.awsstatic.com/events/jp/2017/summit/devday/ D3T7-2.pdf ! • http:/ /qiita.com/sgp/items/07a9d1a40870b3faf75f ! • http:/ /dev.classmethod.jp/cloud/aws-summit-2017-report-dev- day-d3t7-2/ ! • https:/ /www.fsz.co.jp/?press=aws-summit-dev-day-2017-tokyo- 34 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5
35. ͓ΘΓ 35 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5