暇だしDevSecOpsやってみた - CodePipeline Now and Then

スタートアップは崖から飛び降りながら飛行機を組み立てると言いますが、金融機関でそれをするとはどういうことかについて実践と解説。

Transcript

1. Ջͩ͠%FW4FD0QT΍ͬͯΈͨ
   AWS Startup Tech Meetup Online #9 - 2021/11/09
   1
   $PEF1JQFMJOF/PXBOE5IFO
   

   View Slide

2. ౰ࣾαʔϏε։ൃ։࢝ʙϦϦʔε·Ͱͷ$PEF1JQFMJOFͷมભ
   ՝୊
   ຊηογϣϯͷ಺༰
   2
   

   View Slide

3. "CPVU6T
   3
   

   View Slide

4. ໊લླ໦ݚޗ !LFOTDBM
   
   ݸਓͷ׆ಈ
   िץʮ๩͍͠ਓͷͨΊͷηΩϡϦςΟɾΠϯ
   ςϦδΣϯεʯ
   1PE$BTUʮ4FDVSF-JBJTPOʯ
   ॻ੶
   0`3FJMMZʮ;FSP5SVTU/FUXPSLʯ؂༁
   ଞ
   ൃදऀ
   4
   

   View Slide

5. -BZFS9
   5
   

   View Slide

6. View Slide

7. View Slide

8. View Slide

9. ʮ຾ΕΔમʯΛɺActivateͤΑ
   9
   

   View Slide

10. View Slide

11. ظؒd
    ମ੍ʢશࣾਓதʜʣ
    1E.Y
    σβΠφY
    ΤϯδχΞ
    ϑϧλΠϜY
    ݉೚Y
    ։ൃମ੍
    11
    

    View Slide

12. ٕज़ελοΫ
    12
    

    View Slide

13. ελʔτΞοϓͱ
    ηΩϡϦςΟ
    13
    ϓϩμΫτΛ࡞Δ
    

    View Slide

14. KVNQJOHPGGBDMJGGBOE
    BTTFNCMJOHBQMBOF
    POUIFXBZEPXO
    14
    

    View Slide

15. ʮ֑͔Βඈͼ߱Γɺམ͍ͪͯ͘
    ్தͰඈߦػΛ૊ΈཱͯΔΑ͏
    ͳ΋ͷʯGSPNୈষϚωδϝϯτͷΠϊϕʔγϣϯ
    
    ϒϦοπεέʔϦϯά
    15
    

    View Slide

16. ʮ֑͔Βඈͼ߱Γɺམ͍ͪͯ͘
    ్தͰඈߦػΛ૊ΈཱͯΔΑ͏
    ͳ΋ͷʯGSPNୈষϚωδϝϯτͷΠϊϕʔγϣϯ
    
    ϒϦοπεέʔϦϯά
    16
    ڧ౓ŋߏ଄ŋੑೳʹ͍ͭͯͷج४
    ૽Իͷج४
    ൃಈػͷഉग़෺ͷج४
    ܕࣜূ໌
    

    View Slide

17. ʮ֑͔Βඈͼ߱Γɺམ͍ͪͯ͘
    ్தͰඈߦػΛ૊ΈཱͯΔΑ͏
    ͳ΋ͷʯGSPNୈষϚωδϝϯτͷΠϊϕʔγϣϯ
    
    ϒϦοπεέʔϦϯά
    17
    ڧ౓ŋߏ଄ŋੑೳʹ͍ͭͯͷج४
    ૽Իͷج४
    ൃಈػͷഉग़෺ͷج४
    ܕࣜূ໌
    

    View Slide

18. ʮ֑͔Βඈͼ߱Γɺམ͍ͪͯ͘
    ్தͰඈߦػΛ૊ΈཱͯΔΑ͏
    ͳ΋ͷʯGSPNୈষϚωδϝϯτͷΠϊϕʔγϣϯ
    
    ϒϦοπεέʔϦϯά
    18
    ڧ౓ŋߏ଄ŋੑೳʹ͍ͭͯͷج४
    ૽Իͷج४
    ൃಈػͷഉग़෺ͷج४
    ܕࣜূ໌
    

    View Slide

19. ؂ಜࢦ਑΍'*4$ʹैͬͨશମతͳ4P3ઃܭɾεέδϡʔϧ࡞੒ɾ࣮૷
    ϓϩμΫτͷίʔυ΁ͷίϛοτ΍৘γεͬΆ͍ٕज़తͳ͜ͱ
    εϓϦϯτ಺ʹ͓͚Δࢪࡦʹ͓͚ΔϦεΫ؍఺ͷࢦఠɾରҊɾ࣮૷
    ্هʹ͸ඞཁʹԠͯ͡ϙϦγʔ΍ΨΠυϥΠϯɺϫʔΫϑϩͷ࡞੒΋ؚΉ
    ྫຊਓ֬ೝʢ਎ݩ֬ೝຊਓೝূʣͷཁ݅ͱ൓ऩ๏ɺϦϦʔεϑϩʔͷ࡞੒
    δϣΠϕϯʹର͢Δ-BZFS9ͷؔΘΓํͷ૊৫తͳ൑அ
    ग़޲ʹ͢Δ͔ɺҕୗͷ··ʹ͢Δ͔
    ʮͪΌΜͱͨ͠ʯඈߦػΛ࡞Δ্Ͱଞʹͨ͜͠ͱ
    19
    

    View Slide

20. ؂ಜࢦ਑΍'*4$ʹैͬͨશମతͳ4P3ઃܭɾεέδϡʔϧ࡞੒ɾ࣮૷
    ϓϩμΫτͷίʔυ΁ͷίϛοτ΍৘γεͬΆ͍ٕज़తͳ͜ͱ
    εϓϦϯτ಺ʹ͓͚Δࢪࡦʹ͓͚ΔϦεΫ؍఺ͷࢦఠɾରҊɾ࣮૷
    ্هʹ͸ඞཁʹԠͯ͡ϙϦγʔ΍ΨΠυϥΠϯɺϫʔΫϑϩͷ࡞੒΋ؚΉ
    ྫຊਓ֬ೝʢ਎ݩ֬ೝຊਓೝূʣͷཁ݅ͱ൓ऩ๏ɺϦϦʔεϑϩʔͷ࡞੒
    δϣΠϕϯʹର͢Δ-BZFS9ͷؔΘΓํͷ૊৫తͳ൑அ
    ग़޲ʹ͢Δ͔ɺҕୗͷ··ʹ͢Δ͔
    ʮͪΌΜͱͨ͠ʯඈߦػΛ࡞Δ্Ͱଞʹͨ͜͠ͱ
    20
    ʢݴ͍ํͱͯ͠͸޷ΈͰ͸ͳ͍͕ʣ্ྲྀ͔ΒԼྲྀ·Ͱɺઃܭ͔Βӡ
    ༻·Ͱશ޻ఔʹίϛοτ͢Δ
    ηΩϡϦςΟόΠσβΠϯʁ%FW4FD0QT
    ઐ໳ʹ෼ذ͢Δͷ͸ɺڪΒ͘ઌɻd೥͸ͳ͍ͱࢥ͏
    

    View Slide

21. 21
    ։ൃ͔ΒϢʔβʔՁ஋΁
    

    View Slide

22. 22
    $*$%
    

    View Slide

23. 23
    IUUQTXXXOPUJPOTPLFOTDBMCEBEBBEEFBCFBFD
    QCCCBDFCBGBBCGBB
    ·ͱΊ
    8BUDIPVUGPSTFDVSJUZ
    

    View Slide

24. 0VS$*$%
    24
    

    View Slide

25. /PX
    25
    ϑϩϯτΤϯυ
    όοΫΤϯυ
    Πϯϑϥ
    

    View Slide

26. /PX
    26
    ϑϩϯτΤϯυ
    όοΫΤϯυ
    Πϯϑϥ
    

    View Slide

27. ॳظߏ૝
    %FW
    4UH
    1BE
    

    View Slide

28. ॳظߏ૝
    %FW
    4UH
    1BE
    
    લఏ
    ΫϩεΞΧ΢ϯτ͸
    ઃܭ΋ӡ༻΋
    ໘౗ष͍
    

    View Slide

29. ॳظߏ૝
    %FW
    4UH
    1BE
    ϝϦ
    (JU)VC$POUBJOFS3FHJTUSZͰҰݩ؅ཧͰ͖Δ
    (JU)VCͷϒϥϯνઓུͱ૬ੑ͕͍͍
    ίϯςφʹରͯ͠.FSHFલʹςετ͕Մೳ
    σϝ
    ౰࣌͸
    "84Ͱ*".6TFSͷ࡞੒ɾΫϨσϯγϟϧͷ෷ग़͕͠ඞཁ
    (JU)VCͷ͠ΐ΅͍ΞΫηε؅ཧΛ3PPUPG5SVTUʹ͠ͳ͚Ε͹ͳΒͳ͍
    લఏ
    ΫϩεΞΧ΢ϯτ͸
    ઃܭ΋ӡ༻΋
    ໘౗ष͍
    

    View Slide

30. ࣍఺
    

    View Slide

31. ࣍఺
    ϝϦ
    ઌ΄Ͳͱಉ͡
    "84Λʢ"84*".ͱ͍͏ҙຯͰͷʣ3PPUPG5SVTUʹͰ͖Δ
    σϝ
    (JU)VCͷ͠ΐ΅͍τʔΫϯػߏʹґଘ͢Δඞཁ͕͋Δ
    ίϯςφ͕ϨδετϦʹQVTI͞ΕΔλΠϛϯάͱɺσϓϩΠλΠϛϯά͕ͣ
    ΕΔՄೳੑ͕͋Δ
    લఏ
    ΫϩεΞΧ΢ϯτ͸
    ઃܭ΋ӡ༻΋
    ໘౗ष͍
    

    View Slide

32. /PX
    

    View Slide

33. /PX
    ϝϦ
    ઌ΄Ͳͱಉ͡
    τʔΫϯ؅ཧ͸શͯ"84.BOHFEͰ׌ͭ454ʹͳΔ
    %FQMPZલͷ"SUJGBDUੜ੒͕อূ
    Ұ୴ଥڠͨ͠
    ୯Ұͷ3FHJTUSZͰ੒Ռ෺Λूத؅ཧɾӡ༻͢Δ͜ͱ
    ίϯςφʹରͯ͠.FSHFલʹςετ͕Մೳ
    લఏ
    ΫϩεΞΧ΢ϯτ͸
    ઃܭ΋ӡ༻΋
    ໘౗ष͍
    

    View Slide

34. ूத؅ཧ͞ΕͨίϯςφϨδετϦ
    "SUJGBDUʹର͢Δςετ
    $POUJOVPVT%FQMPZNFOU
    4PGUXBSF4VQQMZ$IBJO
    /FYU4UFQT
    34
    

    View Slide

35. ूத؅ཧ͞ΕͨίϯςφϨδετϦ
    "SUJGBDUʹର͢Δςετ
    $POUJOVPVT%FQMPZNFOU
    4PGUXBSF4VQQMZ$IBJO
    /FYU4UFQT
    35
    

    View Slide

36. Ԡื
    36
    $50ࣨ ,FOͱͷ͍ܰ໘ஊ
    'JOUFDIࣄۀ෦
    IUUQTMBZFSYQBHFMJOLKPCT
    fi
    OUFDI
    IUUQTMBZFSYQBHFMJOLKPCT
    $50ࣨ
    IUUQTNFFUZOFUNBUDIFT4VO+0EW#,.S5
    

    View Slide

37. 5IBOLZPV
    37
    

    View Slide