Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
AWS Organizationsでマルチアカウント戦略を始めよう
Search
MasahiroKawahara
February 08, 2023
Technology
1
4.5k
AWS Organizationsでマルチアカウント戦略を始めよう
MasahiroKawahara
February 08, 2023
Tweet
Share
More Decks by MasahiroKawahara
See All by MasahiroKawahara
Amazon DevOps Guru のベースラインを整備して1ヶ月ほど運用してみた #jawsug_asa / Amazon DevOps Guru trial
masahirokawahara
3
260
DuckDB MCPサーバーを使ってAWSコストを分析させてみた / AWS cost analysis with DuckDB MCP server
masahirokawahara
0
1.9k
セキュリティ系アップデート全体像と AWS Organizations 新ポリシー「宣言型ポリシー」を紹介 / reGrowth 2024 Security
masahirokawahara
0
880
わたしとトラックポイント / TrackPoint tips
masahirokawahara
1
440
AWS CLIとシェルスクリプト、いつ使う?活用できる場面とTips紹介 #devio2024 / AWS CLI and Shell Tips
masahirokawahara
0
1.3k
EC2の脆弱性対応で何が使える? Inspector や SSM あたりを整理する #nakanoshima_dev
masahirokawahara
2
2.2k
SSM Inventory を使って便利に EC2 棚卸し(ハマりどころを添えて)
masahirokawahara
2
1.2k
ここが嬉しいABAC ここが辛いよABAC #再解説+補足編
masahirokawahara
1
660
疲弊しない!AWSセキュリティ統制の考え方 #devio_osakaday1
masahirokawahara
6
8.5k
Other Decks in Technology
See All in Technology
Agentic Workflowという選択肢を考える
tkikuchi1002
1
390
変化する開発、進化する体系時代に適応するソフトウェアエンジニアの知識と考え方(JaSST'25 Kansai)
mizunori
0
140
OAuth/OpenID Connectで実現するMCPのセキュアなアクセス管理
kuralab
5
880
UIテスト自動化サポート- Testbed for XCUIAutomation practice
notoroid
0
110
Agentic DevOps時代の生存戦略
kkamegawa
0
1k
Model Mondays S2E02: Model Context Protocol
nitya
0
190
Wasm元年
askua
0
100
[TechNight #90-1] 本当に使える?ZDMの新機能を実践検証してみた
oracle4engineer
PRO
3
140
AWS アーキテクチャ作図入門/aws-architecture-diagram-101
ma2shita
29
9.5k
Windows 11 で AWS Documentation MCP Server 接続実践/practical-aws-documentation-mcp-server-connection-on-windows-11
emiki
0
720
Liquid Glass革新とSwiftUI/UIKit進化
fumiyasac0921
0
140
PHPでWebブラウザのレンダリングエンジンを実装する
dip_tech
PRO
0
170
Featured
See All Featured
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
45
7.4k
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
eileencodes
26
2.8k
Helping Users Find Their Own Way: Creating Modern Search Experiences
danielanewman
29
2.7k
[Rails World 2023 - Day 1 Closing Keynote] - The Magic of Rails
eileencodes
35
2.3k
Building Flexible Design Systems
yeseniaperezcruz
328
39k
Being A Developer After 40
akosma
90
590k
jQuery: Nuts, Bolts and Bling
dougneiner
63
7.8k
Principles of Awesome APIs and How to Build Them.
keavy
126
17k
Refactoring Trust on Your Teams (GOTO; Chicago 2020)
rmw
34
3k
Connecting the Dots Between Site Speed, User Experience & Your Business [WebExpo 2025]
tammyeverts
4
200
Building Adaptive Systems
keathley
43
2.6k
Into the Great Unknown - MozCon
thekraken
39
1.9k
Transcript
"840SHBOJ[BUJPOTͰ ϚϧνΞΧϯτઓུΛ࢝ΊΑ͏ ݪେ
εϥΠυޙʹೖखՄೳͰ͢ ൃදதͷ༰ΛϝϞ͢Δඞཁ͋Γ·ͤΜ Attention
Έͳ͞Μ͕ৗͰ͍ͬͯΔ AWSΞΧϯτΛࢥ͍ු͔͍ͯͩ͘͞
EC2Πϯελϯεͷ ϦιʔεҰཡը໘
Α͍ͬͯ͘Δ IAMϢʔβʔIAMϩʔϧ
AWSར༻ͷٻใ
͜Μͳײ͡ʹͳ͍ͬͯ·ͤΜ͔ʁ
͍ΖΜͳϓϩδΣΫτ/ڥͷ EC2Πϯελϯε͕ͪ͝Ό·ͥ
IAMϙϦγʔਫ਼ࠪʹർฐ͍ͯ͠Δ
ٯʹաͳIAMϙϦγʔΛ༩͍ͯ͠Δ
৭ΜͳϓϩδΣΫτͷ ίετ͕ͪ͝Ό·ͥ
ͯ·Δํɾɾɾ ͥͻϚϧνΞΧϯτઓུ with AWS OrganizationsΛʂ
͜Ε͔Β͢͜ͱ ɾϚϧνΞΧϯτઓུͳͥඞཁʁ ɾ"840SHBOJ[BUJPOTͳͥඞཁʁ ɾϚϧνΞΧϯτઓུɺԿ͔Β࢝ΊΔʁ ݪ େ ɾΫϥεϝιου ɾAWSࣄۀຊ෦ ίϯαϧςΟϯά෦ॴଐ
ɾ͖ͳAWSαʔϏε: AWS IAM ɾ2022 APN AWS Top Engineers (Service) https://dev.classmethod.jp/author/kawahara-masahiro/
ϚϧνΞΧϯτઓུͳͥඞཁʁ
ͦͦ ϚϧνΞΧϯτઓུͱʁ
"84ͷϚϧνΞΧϯτઓུ ʰಛఆͷ୯Ґج४Ͱ"84ΞΧϯτΛ͚Δʱઓུ
ͳͥඞཁʁ
AWSΞΧϯτͷಛੑΛ͏·͘׆༻ͯ͠ ΞδϦςΟͱΨόφϯεΛཱ྆ͤ͞ΔͨΊ Q. AWSϚϧνΞΧϯτઓུͳͥඞཁʁ
ϚϧνΞΧϯτઓུͷϝϦοτ
ϝϦοτηΩϡϦςΟ্ "84ΞΧϯτηΩϡϦςΟͷڥքઢ lશͳݖݶzΛ࣮ݱ
ϝϦοτ։ൃεϐʔυͷଅਐ "84ΞΧϯτϦιʔεͷڥքઢ ଞϦιʔεͱͷlґଘؔzΛഉআ
ϝϦοτίετ࠷దԽ "84ΞΧϯτίετͷڥքઢ l؆୯ʹz͔ͭlݫີʹzίετྨ
͜͜·Ͱͷ·ͱΊ ϚϧνΞΧϯτઓུͰʰಛఆͷ୯Ґج४ʱͰ "84ΞΧϯτΛׂͯ͠ӡ༻͍ͯ͘͠ɻ ΞδϦςΟͱΨόφϯεΛཱ྆ͤ͞ΔͨΊʹඞཁɻ "84ΞΧϯτͷಛੑ ༷ʑͳڥքઢ Λ͏·͘׆༻ɻ
AWS Organizationsͳͥඞཁʁ
"840SHBOJ[BUJPOT ෳ"84ΞΧϯτΛ৫Խͯ͠৭ʑͰ͖ΔΑ͏ʹ͢ΔαʔϏε ը૾Ҿ༻: AWS Organizations ͷ༻ޠͱ֓೦ - AWS Organizations
ͳͥඞཁʁ
ϚϧνΞΧϯτઓུͷಛੑ্ ౷੍͕ࡶʹͳΓ͕ͪͳ෦Λ αϙʔτ͢ΔͨΊ Q. AWS Organizationsͳͥඞཁʁ
AWS Organizations͕αϙʔτ͢Δ͜ͱ #ϐοΫΞοϓ
ྫٻͷ؆ૉԽ ϚϧνΞΧϯτઓུlΞΧϯτຖͷٻཧz͕ࡶʹͳΓ͕ͪ ➔lཧΞΧϯτzٻΛू 5JQT "840SHBOJ[BUJPOTͰ छྨͷ"84ΞΧϯτΛఆΊ·͢ ཧΞΧϯτ ͭ
0SHBOJ[BUJPOTΛ༗ޮԽͨ͠ΞΧϯτ ϝϯόʔΞΧϯτ ෳ ཧΞΧϯτʹཧ͞ΕΔΞΧϯτ 📝
ϚϧνΞΧϯτઓུlϩά౷੍z͕ࡶʹͳΓ͕ͪ ➔l"840SHBOJ[BUJPOT࿈ܞzͰ؆୯ʹूɺूதཧ ྫϩά ূ ͷूͱूதཧ 5JQT "840SHBOJ[BUJPOTଟ͘ͷ"84αʔϏεͱ ࿈ܞ͍ͯ͠·͢ɻ 📝
ྫΞΫηε੍ޚͷҰׅઃఆ ϚϧνΞΧϯτઓུlηΩϡϦςΟ౷੍z͕ࡶʹͳΓ͕ͪ ➔αʔϏείϯτϩʔϧϙϦγʔ 4$1 ͰҰׅΞΫηε੍ޚ 5JQT 0SHBOJ[BUJPOBM6OJU ৫୯Ґ06
ϝϯόʔΞΧϯτΛάϧʔϓԽ֊Խ ͢ΔͨΊͷ αʔϏείϯτϩʔϧϙϦγʔ 4$1 06ΞΧϯτ୯ҐͰద༻͢ΔϙϦγʔ 📝
ྫϢʔβʔͱΞΫηεͷूதཧ ϚϧνΞΧϯτઓུlϢʔβʔɾΞΫηεཧz͕ࡶʹͳΓ͕ͪ ➔l"84*".*EFOUJUZ$FOUFSzͰूதཧ
͜͜·Ͱͷ·ͱΊ "840SHBOJ[BUJPOTෳͷ"84ΞΧϯτΛ৫ Խͯ͠ɺ৭ʑͰ͖ΔΑ͏ʹ͢ΔαʔϏεɻ ϚϧνΞΧϯτઓུͰ౷੍͕ࡶʹͳΓ͕ͪͳ෦Λ αϙʔτ͢Δɻ
ϚϧνΞΧϯτઓུɺԿ͔Β࢝ΊΔʁ
͓͢͢Ίεςοϓ ᶃ"84ΞΧϯτׂํΛܾΊΑ͏ ᶄαʔϏείϯτϩʔϧϙϦγʔ 4$1 Λ׆༻͠Α͏ ᶅ"84*".*EFOUJUZ$FOUFSΛ׆༻͠Α͏ ᶆ৭Μͳ0SHBOJ[BUJPOT࿈ܞαʔϏεΛ׆༻͠Α͏
ᶃ"84ΞΧϯτׂํΛܾΊΑ͏ "84ΞΧϯτΛׂ͢Δج४ΛఆΊ·͠ΐ͏ ͦΕʹ͋Θͤͨ৫୯Ґ 06 ઃܭΛߦ͍·͢
ᶃ"84ΞΧϯτׂํΛܾΊΑ͏ ΞΧϯτׂ06ઃܭͷϞσϧέʔε
ᶃ"84ΞΧϯτׂํΛܾΊΑ͏ ΞΧϯτׂ06ઃܭͷϞσϧέʔε ΞΧϯτԣஅͰ ηΩϡϦςΟӡ༻͢ΔͨΊͷ "84ΞΧϯτ ΞΧϯτԣஅͰ ϩάΛूதཧ͢ΔͨΊͷ "84ΞΧϯτ →
↑ ݕূ ඇຊ൪ ϫʔΫϩʔυͷ "84ΞΧϯτΛஔ͢Δ06 ↓ ຊ൪ϫʔΫϩʔυͷ "84ΞΧϯτΛஔ͢Δ06 ↓
ᶄαʔϏείϯτϩʔϧϙϦγʔ 4$1 Λ׆༻͠Α͏ ༧తΨʔυϨʔϧͱͯ͠ϑϧ׆༻ ˝Α͋͘Δ੍ޚྫ ɾΘͳ͍ϦʔδϣϯͰͷૢ࡞ېࢭ ɾηΩϡϦςΟαʔϏεͷແޮԽېࢭFUD ࢀߟ: αʔϏείϯτϩʔϧϙϦγʔͷྫ
- AWS Organizations
ᶅ"84*".*EFOUJUZ$FOUFSΛ׆༻͠Α͏ l୭͕ͲͷΞΧϯτʹͲͷݖݶͰΞΫηε͢Δ͔zΛूதཧ ֤"84ΞΧϯτʹ*".ϢʔβʔΛ࡞Δඞཁ͕ແ͘ͳΓ·͢
ᶆ৭Μͳ0SHBOJ[BUJPOT࿈ܞαʔϏεΛ׆༻͠Α͏ શͯΛ׆༻͍ͯ͘͠ඞཁແ͠ ˝͓͢͢Ί0SHBOJ[BUJPOT࿈ܞαʔϏε ɾ"84$MPVE5SBJM৫ϨϕϧͰূΛཧ ɾ"84$MPVE'PSNBUJPO06୯ҐͰϦιʔεΛల։ ɾ"NB[PO(VBSE%VUZ "844FDVSJUZ)VC ࣍εϥΠυ
"NB[PO(VBSE%VUZ "844FDVSJUZ)VC ηΩϡϦςΟαʔϏεΛΞΧϯτԣஅͰཧɾӡ༻ ࢀߟ: ɾOrganizations ڥͰ Amazon GuardDuty ΛશϦʔδϣϯ؆୯ηοτΞοϓͯ͠ΈΔ
| DevelopersIO ɾOrganizations ڥͰ AWS Security Hub ΛશϦʔδϣϯ؆୯ηοτΞοϓ͢Δ | DevelopersIO
͓ΘΓʹ
͓ΘΓʹ "84ΞΧϯτͷಛੑΛ্ख͘׆༻ͯ͠ɺϚϧνΞΧ ϯτઓུΛਪਐ͠·͠ΐ͏ɻ ਪਐαϙʔτʹ"840SHBOJ[BUJPOT͕ศརͰ͢ɻ lεϞʔϧελʔτzɺl·ͣ৮ͬͯΈΔzΛҙࣝ͠· ͠ΐ͏ʂ
࠷ޙʹએ$MBTTNFUIPE$MPVE(VJEFCPPL ʮ৫తͳ"84׆༻ͷͨΊͷϊϋʯΛ·ͱΊͨφϨοδू Ϋϥεϝιουϝϯόʔζ͚ʹແঈެ։தͰ͢📚 ˛"84αʔϏεͷϕετϓϥΫςΟε ˛"84ར༻ΨΠυϥΠϯͷαϯϓϧ ˞্ه༰ߋ৽͞ΕΔՄೳੑ͕͋Γɺ࣮ࡍͷϖʔδͱҟͳΔ߹͕͋Γ·͢ Ϋϥεϝιουϝϯόʔζϙʔλϧɿ ʮཱ͓ͪใʯˠʮ৫తͳ"84׆༻ͷͨΊͷϊϋʯ
None