AWS Organizationsでマルチアカウント戦略を始めよう

Transcript

1. "84
   0SHBOJ[BUJPOTͰ
   ϚϧνΞΧ΢ϯτઓུΛ࢝ΊΑ͏ 
   ઒ݪ
   ੐େ
2. εϥΠυ͸ޙʹೖखՄೳͰ͢ ൃදதͷ಺༰ΛϝϞ͢Δඞཁ͸͋Γ·ͤΜ Attention
3.  Έͳ͞Μ͕೔ৗͰ࢖͍ͬͯΔ AWSΞΧ΢ϯτΛࢥ͍ු͔΂͍ͯͩ͘͞
4.  EC2Πϯελϯεͷ ϦιʔεҰཡը໘
5.  Α͘࢖͍ͬͯΔ IAMϢʔβʔ΍IAMϩʔϧ
6.  AWSར༻ͷ੥ٻ৘ใ
7.  ͜Μͳײ͡ʹͳ͍ͬͯ·ͤΜ͔ʁ
8.  ͍ΖΜͳϓϩδΣΫτ/؀ڥͷ EC2Πϯελϯε͕ͪ͝Ό·ͥ
9.  IAMϙϦγʔਫ਼ࠪʹർฐ͍ͯ͠Δ
10.  ٯʹա৒ͳIAMϙϦγʔΛ෇༩͍ͯ͠Δ
11.  ৭ΜͳϓϩδΣΫτͷ ίετ͕ͪ͝Ό·ͥ
12. ౰ͯ͸·Δํ͸ɾɾɾ  ͥͻϚϧνΞΧ΢ϯτઓུ with AWS OrganizationsΛʂ
13. ͜Ε͔Β࿩͢͜ͱ  ɾϚϧνΞΧ΢ϯτઓུ͸ͳͥඞཁʁ
    ɾ"84
    0SHBOJ[BUJPOT͸ͳͥඞཁʁ
    ɾϚϧνΞΧ΢ϯτઓུɺԿ͔Β࢝ΊΔʁ ઒ݪ ੐େ ɾΫϥεϝιου ɾAWSࣄۀຊ෦ ίϯαϧςΟϯά෦ॴଐ ɾ޷͖ͳAWSαʔϏε: AWS IAM ɾ2022 APN AWS Top Engineers (Service) https://dev.classmethod.jp/author/kawahara-masahiro/
14.  ϚϧνΞΧ΢ϯτઓུ͸ͳͥඞཁʁ
15.  ͦ΋ͦ΋ ϚϧνΞΧ΢ϯτઓུͱ͸ʁ
16. "84ͷϚϧνΞΧ΢ϯτઓུ  ʰಛఆͷ୯Ґج४Ͱ"84ΞΧ΢ϯτΛ෼͚Δʱઓུ
17.  ͳͥඞཁʁ
18.  AWSΞΧ΢ϯτͷಛੑΛ͏·͘׆༻ͯ͠ ΞδϦςΟͱΨόφϯεΛཱ྆ͤ͞ΔͨΊ Q. AWSϚϧνΞΧ΢ϯτઓུ͸ͳͥඞཁʁ
19.  ϚϧνΞΧ΢ϯτઓུͷϝϦοτ
20. ϝϦοτ
    ηΩϡϦςΟ޲্  "84ΞΧ΢ϯτ͸ηΩϡϦςΟͷڥքઢ
    l׬શͳݖݶ෼཭z
    Λ࣮ݱ
    
21. ϝϦοτ
    ։ൃεϐʔυͷଅਐ  "84ΞΧ΢ϯτ͸Ϧιʔεͷڥքઢ
    ଞϦιʔεͱͷ
    lґଘؔ܎z
    Λഉআ
    
22. ϝϦοτ
    ίετ࠷దԽ  "84ΞΧ΢ϯτ͸ίετͷڥքઢ
    l؆୯ʹz
    ͔ͭ
    lݫີʹz
    ίετ෼ྨ
    
23. ͜͜·Ͱͷ·ͱΊ  ϚϧνΞΧ΢ϯτઓུͰ͸ʰಛఆͷ୯Ґج४ʱͰ "84ΞΧ΢ϯτΛ෼ׂͯ͠ӡ༻͍ͯ͘͠ɻ
    ΞδϦςΟͱΨόφϯεΛཱ྆ͤ͞ΔͨΊʹඞཁɻ
    "84ΞΧ΢ϯτͷಛੑ ༷ʑͳڥքઢ Λ͏·͘׆༻ɻ
24.  AWS Organizations͸ͳͥඞཁʁ
25. "84
    0SHBOJ[BUJPOT  ෳ਺"84ΞΧ΢ϯτΛ૊৫Խͯ͠৭ʑͰ͖ΔΑ͏ʹ͢ΔαʔϏε ը૾Ҿ༻: AWS Organizations ͷ༻ޠͱ֓೦ - AWS Organizations
26.  ͳͥඞཁʁ
27.  ϚϧνΞΧ΢ϯτઓུͷಛੑ্ ౷੍͕൥ࡶʹͳΓ͕ͪͳ෦෼Λ αϙʔτ͢ΔͨΊ Q. AWS Organizations͸ͳͥඞཁʁ
28.  AWS Organizations͕αϙʔτ͢Δ͜ͱ #ϐοΫΞοϓ
29. ྫ
    ੥ٻͷ؆ૉԽ  ϚϧνΞΧ΢ϯτઓུ͸
    lΞΧ΢ϯτຖͷ੥ٻ؅ཧz͕൥ࡶʹͳΓ͕ͪ
    ➔
    l؅ཧΞΧ΢ϯτz
    ΁੥ٻΛू໿ 
    5JQT
    "84
    0SHBOJ[BUJPOTͰ͸
    छྨͷ"84ΞΧ΢ϯτΛఆΊ·͢
    
    ؅ཧΞΧ΢ϯτ
    ͭ
    0SHBOJ[BUJPOT
    Λ༗ޮԽͨ͠ΞΧ΢ϯτ
    
    ϝϯόʔΞΧ΢ϯτ
    ෳ਺
    ؅ཧΞΧ΢ϯτʹ؅ཧ͞ΕΔΞΧ΢ϯτ 📝
30. ϚϧνΞΧ΢ϯτઓུ͸
    lϩά౷੍z͕൥ࡶʹͳΓ͕ͪ
    ➔
    l"84
    0SHBOJ[BUJPOT࿈ܞz
    Ͱ؆୯ʹू໿ɺूத؅ཧ ྫ
    ϩά ূ੻ ͷू໿ͱूத؅ཧ  
    5JQT
    "84
    0SHBOJ[BUJPOT͸ଟ͘ͷ"84αʔϏεͱ ࿈ܞ͍ͯ͠·͢ɻ 📝
31. ྫ
    ΞΫηε੍ޚͷҰׅઃఆ  ϚϧνΞΧ΢ϯτઓུ͸
    lηΩϡϦςΟ౷੍z͕൥ࡶʹͳΓ͕ͪ
    ➔
    αʔϏείϯτϩʔϧϙϦγʔ 4$1 ͰҰׅΞΫηε੍ޚ 
    5JQT
    
    0SHBOJ[BUJPOBM
    6OJU ૊৫୯Ґ
    06
    
    ϝϯόʔΞΧ΢ϯτΛάϧʔϓԽ֊૚Խ ͢ΔͨΊͷ࿮
    
    αʔϏείϯτϩʔϧϙϦγʔ 4$1
    06ΞΧ΢ϯτ୯ҐͰద༻͢ΔϙϦγʔ 📝
32. ྫ
    ϢʔβʔͱΞΫηεͷूத؅ཧ  ϚϧνΞΧ΢ϯτઓུ͸
    lϢʔβʔɾΞΫηε؅ཧz͕൥ࡶʹͳΓ͕ͪ
    ➔
    l"84
    *".
    *EFOUJUZ
    $FOUFSz
    Ͱूத؅ཧ
33. ͜͜·Ͱͷ·ͱΊ  "84
    0SHBOJ[BUJPOT͸ෳ਺ͷ"84ΞΧ΢ϯτΛ૊৫ Խͯ͠ɺ৭ʑͰ͖ΔΑ͏ʹ͢ΔαʔϏεɻ
    ϚϧνΞΧ΢ϯτઓུͰ౷੍͕൥ࡶʹͳΓ͕ͪͳ෦෼Λ αϙʔτ͢Δɻ
34.  ϚϧνΞΧ΢ϯτઓུɺԿ͔Β࢝ΊΔʁ
35. ͓͢͢Ίεςοϓ  ᶃ
    "84ΞΧ΢ϯτ෼ׂํ਑ΛܾΊΑ͏
    ᶄ
    αʔϏείϯτϩʔϧϙϦγʔ 4$1 Λ׆༻͠Α͏
    ᶅ
    "84
    *".
    *EFOUJUZ
    $FOUFS
    Λ׆༻͠Α͏
    ᶆ
    ৭Μͳ0SHBOJ[BUJPOT࿈ܞαʔϏεΛ׆༻͠Α͏
36. ᶃ
    "84ΞΧ΢ϯτ෼ׂํ਑ΛܾΊΑ͏  "84ΞΧ΢ϯτΛ෼ׂ͢Δج४ΛఆΊ·͠ΐ͏
    ͦΕʹ͋Θͤͨ૊৫୯Ґ 06 ઃܭΛߦ͍·͢
37. ᶃ
    "84ΞΧ΢ϯτ෼ׂํ਑ΛܾΊΑ͏  ΞΧ΢ϯτ෼ׂ06ઃܭͷϞσϧέʔε
38. ᶃ
    "84ΞΧ΢ϯτ෼ׂํ਑ΛܾΊΑ͏  ΞΧ΢ϯτ෼ׂ06ઃܭͷϞσϧέʔε ΞΧ΢ϯτԣஅͰ
    ηΩϡϦςΟӡ༻͢ΔͨΊͷ
    "84ΞΧ΢ϯτ ΞΧ΢ϯτԣஅͰ
    ϩάΛूத؅ཧ͢ΔͨΊͷ
    "84ΞΧ΢ϯτ → ↑ ݕূ ඇຊ൪ ϫʔΫϩʔυͷ
    "84ΞΧ΢ϯτΛ഑ஔ͢Δ06 ↓ ຊ൪ϫʔΫϩʔυͷ
    "84ΞΧ΢ϯτΛ഑ஔ͢Δ06 ↓
39. ᶄ
    αʔϏείϯτϩʔϧϙϦγʔ 4$1 Λ׆༻͠Α͏  ༧๷తΨʔυϨʔϧͱͯ͠ϑϧ׆༻
    ˝Α͋͘Δ੍ޚྫ
    ɾ࢖Θͳ͍ϦʔδϣϯͰͷૢ࡞ېࢭ
    ɾηΩϡϦςΟαʔϏεͷແޮԽېࢭ
    FUD ࢀߟ: αʔϏείϯτϩʔϧϙϦγʔͷྫ - AWS Organizations
40. ᶅ
    "84
    *".
    *EFOUJUZ
    $FOUFS
    Λ׆༻͠Α͏  l୭͕ͲͷΞΧ΢ϯτʹͲͷݖݶͰΞΫηε͢Δ͔z
    Λूத؅ཧ
    ֤"84ΞΧ΢ϯτʹ*".ϢʔβʔΛ࡞Δඞཁ͕ແ͘ͳΓ·͢
    
41. ᶆ
    ৭Μͳ0SHBOJ[BUJPOT࿈ܞαʔϏεΛ׆༻͠Α͏  શͯΛ׆༻͍ͯ͘͠ඞཁ͸ແ͠
    ˝
    ͓͢͢Ί0SHBOJ[BUJPOT࿈ܞαʔϏε
    ɾ"84
    $MPVE5SBJM
    ૊৫ϨϕϧͰূ੻Λ؅ཧ
    ɾ"84
    $MPVE'PSNBUJPO
    06୯ҐͰϦιʔεΛల։
    ɾ"NB[PO
    (VBSE%VUZ
    "84
    4FDVSJUZ
    )VC
    ࣍εϥΠυ
42. "NB[PO
    (VBSE%VUZ
    "84
    4FDVSJUZ
    )VC  ηΩϡϦςΟαʔϏεΛΞΧ΢ϯτԣஅͰ؅ཧɾӡ༻ ࢀߟ: ɾOrganizations ؀ڥͰ Amazon GuardDuty ΛશϦʔδϣϯ΁؆୯ηοτΞοϓͯ͠ΈΔ | DevelopersIO ɾOrganizations ؀ڥͰ AWS Security Hub ΛશϦʔδϣϯ΁؆୯ηοτΞοϓ͢Δ | DevelopersIO
43.  ͓ΘΓʹ
44. ͓ΘΓʹ  "84ΞΧ΢ϯτͷಛੑΛ্ख͘׆༻ͯ͠ɺϚϧνΞΧ ΢ϯτઓུΛਪਐ͠·͠ΐ͏ɻ
    ਪਐαϙʔτʹ͸"84
    0SHBOJ[BUJPOT͕ศརͰ͢ɻ
    lεϞʔϧελʔτzɺl·ͣ͸৮ͬͯΈΔz
    Λҙࣝ͠· ͠ΐ͏ʂ
45. ࠷ޙʹએ఻
    $MBTTNFUIPE
    $MPVE
    (VJEFCPPL  ʮ૊৫తͳ
    "84
    ׆༻ͷͨΊͷϊ΢ϋ΢ʯΛ·ͱΊͨφϨοδू
    Ϋϥεϝιουϝϯόʔζ޲͚ʹແঈެ։தͰ͢📚 ˛
    "84αʔϏεͷϕετϓϥΫςΟε ˛
    "84ར༻ΨΠυϥΠϯͷαϯϓϧ ˞
    ্ه಺༰͸౎౓ߋ৽͞ΕΔՄೳੑ͕͋Γɺ࣮ࡍͷϖʔδͱҟͳΔ৔߹͕͋Γ·͢ Ϋϥεϝιουϝϯόʔζϙʔλϧɿ ʮ͓໾ཱͪ৘ใʯˠʮ૊৫తͳ
    "84
    ׆༻ͷͨΊͷϊ΢ϋ΢ʯ