やはりタグ。タグは全てを解決する

Transcript

1. ΍͸Γλάɹλά͸શͯΛղܾ͢Δ
   
   1
   BXTEFWEBZ
   

   View Slide

2. ໊લླ໦ݚޗ !LFOTDBM
   
   ॴଐ
   -BZFS9גࣜձࣾ$50ࣨ
   ࡾҪ෺࢈σδλϧΞηοτɾϚωδϝϯτग़޲
   དྷྺ
   ূ݊޲͚.BOBHFE4FDVSJUZ4FSWJDFɺՈܭ฽ɾΫϥ΢υձܭɺূ݊ձࣾ
   ݸਓͷ׆ಈ
   ಉਓʮ4FDVSFཱྀஂʯʹͯ1PEDBTUʮ4FDVSF-JBJTPOʯ΍ಉਓࢽ࡞੒
   िץʮ๩͍͠ਓͷͨΊͷηΩϡϦςΟɾΠϯςϦδΣϯεʯൃߦ
   1PE$BTUʮ4FDVSF-JBJTPOʯΛʢ΄΅ʣ8FFLMZͰϦϦʔε
   ॻ੶
   0`3FJMMZʮ;FSP5SVTU/FUXPSLʯ؂༁
   ΠϯϓϨε3%ʮΞΠσϯςΟςΟ͸ͩΕͷ΋ͷʁ)ZQFSMFEHFS*OEZ"SJFTͰ࣮ݱ͢Δ෼ࢄΞΠσϯςΟςΟʯஶ࡞
   ॴଐઌ঺հࣗݾ঺հ
   2
   

   View Slide

3. Ϧετ
   Ϧετ
   Ϧετ
   Ϧετͷڧௐจࣈ
   Ϧετ
   ݟग़͠
   3
   

   View Slide

4. ϒϩοΫνΣʔϯͷձࣾ
   Ͱ͸ͳ͍Ͱ͢
   4
   IUUQTOPUFDPNGVLLZZOOGFECD
   

   View Slide

5. ॴଐઌͦͷᶃ
   5
   

   View Slide

6. Ϧετ
   Ϧετ
   Ϧετ
   Ϧετͷڧௐจࣈ
   Ϧετ
   ݟग़͠
   6
   

   View Slide

7. Ϧετ
   Ϧετ
   Ϧετ
   Ϧετͷڧௐจࣈ
   Ϧετ
   ݟग़͠
   7
   

   View Slide

8. ॴଐઌͦͷᶄ
   8
   

   View Slide

9. ॴଐઌͦͷᶄ
   9
   

   View Slide

10. ॴଐઌͦͷᶄ
    10
    

    View Slide

11. ॴଐઌͦͷᶄ
    11
    

    View Slide

12. ຊ೔ͷ͓࿩
    12
    $50ࣨ԰୆ࠎΤϯδχΞ
    

    View Slide

13. ຊ೔ͷ͓࿩
    13
    $50ࣨ԰୆ࠎΤϯδχΞ
    ࢿ࢈؅ཧ
    

    View Slide

14. ຊ೔ͷ͓࿩
    14
    $50ࣨ԰୆ࠎΤϯδχΞ
    ࢿ࢈؅ཧ
    "84
    

    View Slide

15. ຊ೔ͷ͓࿩
    15
    $50ࣨ԰୆ࠎΤϯδχΞ
    ࢿ࢈؅ཧ
    "84
    λά
    

    View Slide

16. ຊ೔ͷ͓࿩
    16
    $50ࣨ԰୆ࠎΤϯδχΞ
    ࢿ࢈؅ཧ
    "84
    λά
    

    View Slide

17. ຊ೔ͷ͓࿩
    17
    $50ࣨ԰୆ࠎΤϯδχΞ
    ࢿ࢈؅ཧ
    "84
    λά
    

    View Slide

18. ࿩͢͜ͱ
    ౰ࣾͷλά؅ཧͷมભ
    ࿩͞ͳ͍͜ͱ
    ౰ࣾͷλάΛ׆༻ͨ͠ӡ༻
    ࿩͞ͳ͍͜ͱ
    18
    

    View Slide

19. 8IZλά؅ཧ
    ౰ࣾͷλά؅ཧ
    5BHWFS
    5BHWFS
    5BHWFS
    5BHWFS ະདྷͷ࿩ʣ
    ΞδΣϯμ
    19
    

    View Slide

20. 8IZλά؅ཧ
    20
    

    View Slide

21. ʢ͍͖ͳΓ୤ઢʣθϩτϥετ
    21
    

    View Slide

22. ୈࡾͷࢦ਑͸ɺθϩτϥετͷ֓೦
    ͸ɺอޢର৅ͷγεςϜͱσʔλͷ૊
    ৫తՁ஋ʹ͋Θͤͯద༻͢Δඞཁ͕͋
    Δͱ͍͏͜ͱͰ͢
    22
    θϩτϥετΞʔΩςΫνϟ"84ͷࢹ఺
    

    View Slide

23. ୈࡾͷࢦ਑͸ɺθϩτϥετͷ֓೦
    ͸ɺอޢର৅ͷγεςϜͱσʔλͷ૊
    ৫తՁ஋ʹ͋Θͤͯద༻͢Δඞཁ͕͋
    Δͱ͍͏͜ͱͰ͢
    23
    θϩτϥετΞʔΩςΫνϟ"84ͷࢹ఺
    อޢର৅ͷ
    γεςϜͱσʔλʹ͍ͭͯ
    Կ΋Θ͔ΒΜ৔߹͸ʁ
    

    View Slide

24. ࢿ࢈؅ཧ
    ༧࣮؅ཧ
    ΞΫηε؅ཧ
    ʢฏ࣌ͷʣϦεΫ؅ཧ
    ΠϯγσϯτରԠ
    ࣗಈԽ
    ର৅͕ط஌Ͱͳ͍ͱͰ͖ͳ͍͜ͱ
    24
    

    View Slide

25. UPNPWFUP;5" BOFOUFSQSJTFNVTUIBWFB
    TZTUFNUPEJTDPWFSBOESFDPSEQIZTJDBMBOE
    WJSUVBMBTTFUTUPDSFBUFBVTBCMFJOWFOUPSZ
    /*4541ʮθϩτϥετɾΞʔΩςΫνϟʯ
    25
    

    View Slide

26. ֤Ϧιʔεʹ෇༩͞Εͨϝλσʔ
    λ
    ֤छӡ༻ʹ͓͚ΔඞཁෆՄܽͳࢀ
    রઌσʔλ
    ૊৫ಛ༗ͷϦιʔε*EFOUJUZΛߏ
    ங͢Δ$MBJN
    "84ͷλάͱ͸ʁ
    26
    ๻͸͜ͷ
    ؀ڥͰ࢖ΘΕ·͢
    ๻ͷ؅ཧऀ͸
    43&νʔϜͰ͢
    ܦӦ؅ཧ෦ͷ
    ͓ࡒ෍͔͍ͭ·͢
    ػີ৘ใ
    ͔͍͋ͭ·͢
    %9αʔϏεͰ
    ࢖ΘΕ·͢
    EFWEYFDͱਃ͠·͢
    

    View Slide

27. ֤Ϧιʔεʹ෇༩͞Εͨϝλσʔ
    λ
    ֤छӡ༻ʹ͓͚ΔඞཁෆՄܽͳࢀ
    রઌσʔλ
    ૊৫ಛ༗ͷϦιʔε*EFOUJUZΛߏ
    ங͢Δ$MBJN
    "84ͷλάͱ͸ʁ
    27
    ๻͸͜ͷ
    ؀ڥͰ࢖ΘΕ·͢
    ๻ͷ؅ཧऀ͸
    43&νʔϜͰ͢
    ܦӦ؅ཧ෦ͷ
    ͓ࡒ෍͔͍ͭ·͢
    ػີ৘ใ
    ͔͍͋ͭ·͢
    %9αʔϏεͰ
    ࢖ΘΕ·͢
    EFWEYFDͱਃ͠·͢
    

    View Slide

28. αʔόʔʹՍۭͷσʔλΛ෇༩Ͱ͖ΔΑ͏ʹͳͬͨ
    ʮໝ૝ͱ͍͏໊ͷ૝૾ྗ͕ϗϞɾαϐΤϯεΛਐԽͤͨ͞ʯ
    ͨ͘͞Μ͚ͭΒΕΔʢd
    
    Ωʔɾ஋ͷࣗ༝౓͕ߴ͍ʢʙ VOJDPEFจࣈɺDBTFTFOTJUJWF ه߸ར༻Խʣ
    ϫʔΫϩʔυͷಈ࡞ʹ௚઀తͳӨڹΛ༩͑Δ͜ͱͳ͘ӡ༻Ͱ͖Δ
    71$ͷ/BNFλάʜ ஌Γ·ͤΜͶʜ
    "1*؅ཧͰ͖Δ
    σʔλΛ࣮ࡍͷϦιʔεʹࣄલຒΊࠐΜ্ͩͰɺࢿ࢈؅ཧ%#΍ΤΫηϧΛิ׬Ͱ͖Δ
    ٯํ޲΋Մ
    ؅ཧऀʹΑΔ౷੍΋Ͱ͖Δ
    λά͸͍͢͝
    28
    

    View Slide

29. λά͔͠উͨΜ
    29
    

    View Slide

30. ౰ࣾͷ࿩
    30
    

    View Slide

31. 5BH7FS
    31
    

    View Slide

32. #$ίϯαϧࣄۀ͕ϝΠϯͩͬͨͨΊɺ۩ମతͳظؒݶఆతͳϫʔ
    Ϋϩʔυ͔͠ͳ͔ͬͨ
    1P$ϓϩδΣΫτʹ൐͏୹ظతͳ৘ใࢿ࢈͔͠ͳ͔ͬͨʢ"84্
    Ͱ͸ʣ
    Πϯϑϥత੔උΛ̎ਓͰ࣮ࢪ
    ΏΔʙ͘ᯂΑΓ࢝ΊΑ
    ʢӨڹ΋ͳ͍͠ʣΨϯΨϯ͍͜͏ͥ
    5BHWFS
    
    32
    

    View Slide

33. ମ੍ ੲ
    
    33
    

    View Slide

34. ࢀߟจݙY
    

    View Slide

35. ϕεϓϥ
    $BTFTFOTJUJWF
    Ϧιʔε΁ͷΞΫηείϯτϩʔϧ
    λά؅ཧͷࣗಈԽ
    λά͸গͳ͍ΑΓɺଟ͍ํ͕ϕλʔ
    ओʹλάΧςΰϦΛࢀর
    "845BHHJOH4USBUFHJFT
    35
    IUUQTEBXTTUBUJDDPNBXTBOTXFST"84@5BHHJOH@4USBUFHJFTQEG
    

    View Slide

36. 5BHHJOH#FTU1SBDUJDFT
    "845BHHJOH4USBUFHJFTΛΑ
    ΓৄࡉԽ
    IUUQTEPDTBXTBNB[PODPNXIJUFQBQFSTMBUFTUUBHHJOHCFTUQSBDUJDFTJOUSPEVDUJPOUBHHJOHVTFDBTFTIUNM
    

    View Slide

37. Ϧετ
    Ϧετ
    Ϧετ
    Ϧετͷڧௐจࣈ
    Ϧετ
    37
    ͦΜͳʹλάͷ஋ʹͭΊ͜·ΜͰ΋Α͘ͳ͍ʜ
    

    View Slide

38. ౰ࣾಠࣗΧελϚΠζᶃ
    38
    ݴͬͯΔ͜ͱ͕ҧ͏ͷͰɺ
    ʮେ͸খΛ݉ͶΔʯͱ͍͏͜ͱͰ
    ޙ͔Βม͑Δ͜ͱ্౳Ͱ͚ͭ·͘Δ͜ͱʹͨ͠ɻ
    λάมߋͰ͋Ε͹Өڹ͸ͳ͘ɼ
    ͔ͭɺݱࡏͷ༧࣮؅ཧͰ͸ͦ͜·ͰλάΛ׆༻ͯ͠ͳ͍ͨΊ
    

    View Slide

39. 5BHHJOH#FTU1SBDUJDFT
    "845BHHJOH4USBUFHJFTΛΑ
    ΓৄࡉԽ
    IUUQTEPDTBXTBNB[PODPNXIJUFQBQFSTMBUFTUUBHHJOHCFTUQSBDUJDFTJOUSPEVDUJPOUBHHJOHVTFDBTFTIUNM
    ϏϛϣʔʹݴͬͯΔ͜ͱ͕ҧ͏ͷͰ
    5BHHJOH#FTU1SBDUJDFTͷߟ͑ํΛجʹɺ
    5BHHJOH4USBUFHJFTͷ࣮૷ํ๏ΛϝΠϯʹ࣮૷
    

    View Slide

40. λά໋໊نଇέόϒέʔεεωʔΫέʔε
    ΠϯϕϯτϦͬͯ%#ͩ͠ɺ͡Ό͋εωʔΫέʔεͩΑͶ
    5FSSBGPSNͷϕεϓϥ΋Ξϯείͩ͠ɻ
    Ϧιʔε໊نଇ
    \FOWJSPONFOU^\TFSWJDF@JE^\Ϧιʔεಛ༗ͷ஋^
    4΍"-#ʹ͍ͭͯ͸OBNFλάͷΑ͏ͳޠ۟ؒΛ@ͳܗࣜͩ
    ͱͰ͖ͳ͍ͷͰɺͰͭͳ͛Δɻ
    ౰ࣾಠࣗΧελϚΠζᶄ
    40 IUUQTXXXUFSSBGPSNCFTUQSBDUJDFTDPNOBNJOH
    

    View Slide

41. ౰ࣾಠࣗΧελϚΠζᶅ
    41
    λά؅ཧΛ
    ड͚࣋ͭ
    

    View Slide

42. ౰ࣾಠࣗΧελϚΠζᶆ
    

    View Slide

43. 43
    λά໊ ΧςΰϦ ඞਢ ྫ
    name Ϧιʔε໊ ○ ${service_id}.${environment}.${service_role}.$
    {name}
    service_id ΞϓϦɾαʔϏεID ○ dx
    service_role αʔϏε಺ͷ໾ׂ ○ web, db, log_storage
    cluster ecs Ϋϥελʔͱ͔
    environment ؀ڥ ○ dev, stg, prd
    version
    owner ੹೚ઌ ○
    cost_center ○ xxx, yyy, layerx (ސ٬໊)
    project ϓϩδΣΫτ໊ ○
    customer ಛఆͷ͓٬༷޲͚༻ Τϯϓϥϓϥϯʹ͸͓٬༷ઐ༻αʔόΛఏڙ
    ͠·͢...తͳͱ͖
    con
    fi
    dentiality ػີ౓߹͍ ○
    managed_by ͲͷIaC͔ ○ manual(σϑΥϧτ), terraform, cfn
    compliance ن੍ɾίϯϓϥ PII, [pii, iso27002]
    

    View Slide

44. $PNNFSDJBMEBUBDMBTTJ
    fi
    DBUJPO
    4FOTJUJWF $PO
    fi
    EFOUJBM 1SJWBUF 1VCMJD
    IUUQTEPDTNJDSPTPGUDPNKBKQ
    TFDVSJUZVQEBUFT
    QMBOOJOHBOEJNQMFNFOUBUJPOHVJEF
    
    $PO
    fi
    EFOUJBMJUZʹؔ͢Δิ଍
    44
    

    View Slide

45. 5BH7FS
    45
    

    View Slide

46. ࣄۀ෦੍΁
    Ӭଓతͳ৘ใࢿ࢈͕ൃੜͨ͠
    Πϯϑϥత੔උΛ͢Δ̎ਓ͸ࣄۀ෦ʹ೿ݣ΁
    5BHWFS
    
    46
    

    View Slide

47. ମ੍ /PX
    
    47
    

    View Slide

48. ڞ༗ձ
    48
    

    View Slide

49. DPTU@DFOUFSͷ஋ʹ֤ࣄۀ෦͕ೖΔΑ͏ʹ
    OBNFλάΛഇࢭ
    λά໊ MBZFSYλά໊
    ͷQSF
    fi
    YΛഇࢭ
    EJGGGSPNWFS
    49
    

    View Slide

50. 5BH7FS
    50
    

    View Slide

51. 5FSSBGPSNQSPWJEFSW
    $50ަ୅
    *4.4औಘ։࢝
    5BHW
    
    51
    

    View Slide

52. ମ੍ /PX
    
    52
    

    View Slide

53. ڞ༗ձ
    53
    

    View Slide

54. 5FSSBGPSN"841SPWJEFSWͷϦϦʔε
    54
    provider "aws"
    {
    
    region = var.regio
    n
    
    default_tags { tags = var.default_tags
    }
    
    }
    
    resource "aws_kms_key" "cloudtrail"
    {
    
    description = "key to encrypt/decrypt cloudtrail
    "
    
    tags =
    {
    
    service_role = var.service_role.km
    s
    
    }
    
    }
    resource "aws_kms_key" "cloudtrail"
    {
    
    description = "key to encrypt/decrypt cloudtrail
    "
    
    tags =
    {
    
    environment = pr
    d
    
    service_role = var.service_role.km
    s
    
    project = guardrai
    l
    
    service_id = guardrai
    l
    
    cost_center = layer
    X
    
    Owner = sr
    e
    
    managed_by = terrafor
    m
    
    github_repository - guardrai
    l
    
    }
    
    }
    EFGBVMU@UBHT͍͜͞ʔ
    

    View Slide

55. HJUIVC@SFQPTJUPSZ௥Ճ
    ৘ใ۠෼ͷݟ௚͠
    લTFOTJUJWF DPO
    fi
    EFOUJBM QSJWBUF QSPQSJFUBSZ QVCMJD
    ޙDPO
    fi
    EFOUJBM QSJWBUF QVCMJD
    TFSWJDF@SPMFΛ࣮ଶͰ͋ΔϦιʔεͷཻ౓ʹ͋ΘͤΔ
    ྫTFDSFUTNBOBHFSWBVMU
    EJGGGSPNWFS
    55
    

    View Slide

56. ࠓޙ
    56
    

    View Slide

57. λά౷੍
    λάFWFSZXIFSF
    λά؅ཧͷ؅ཧ
    λά΁ͷΞΫηε؅ཧΛ៛ີԽ
    λάΛ࢖ͬͨ"#"$ʁ
    ਖ਼௚͋·ΓϝϦοτΛײͯ͡ͳ͍ʜ
    5BHW GVUVSF
    
    57
    

    View Slide

58. ࠾༻ͯ͠·͢
    ݸਓΧδϡΞϧ໘ஊ͔ΒͰ
    ΋0,
    58
    

    View Slide

59. 59
    ࠾༻͸ͪ͜Β
    IUUQTIFSQDBSFFSTWMBZFSY
    ΧδϡΞϧ໘ஊ͸ͪ͜Β
    IUUQTNFFUZOFUBSUJDMFTUXXKK
    

    View Slide

60. 60
    IUUQTNFFUZOFUNBUDIFTK"C
    ff
    [W-RK/B
    IUUQTIFSQDBSFFSTWMBZFSYZSR)(513Y
    

    View Slide

61. 5IBOLZPV
    61
    

    View Slide