Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
bitbankのAWSアカウント作成管理術
Search
やったん
October 04, 2019
Technology
0
850
bitbankのAWSアカウント作成管理術
AWS DevDay 2019 懇親会でLTした時の資料です。
やったん
October 04, 2019
Tweet
Share
More Decks by やったん
See All by やったん
Fargate + ECR で elastalertを構築
mdps513
4
1.4k
Other Decks in Technology
See All in Technology
Java EE/Jakarta EEの現状と将来―クラウドネイティブ時代にJava EEは対応できるのか?―
takakiyo
1
130
検証を通して見えてきたTiDBの性能特性
lycorptech_jp
PRO
6
3.7k
Cracking the KubeCon CfP
inductor
2
230
Tableau事例紹介 / Tableau Case Study of Eureka
kazuya_araki_tokyo
1
190
Google Cloud Next '24でブログを10本書いた方法と勉強会を沸かせた方法
yasumuusan
0
290
私が trocco を推す理由
__allllllllez__
1
200
Delivering Millions of Messages within seconds @ Duolingo
pelelgrino
0
350
20240418_Google ColabにLLMが搭載されたようなのでPython x データ分析の勉強方法を考えてみる
doradora09
0
120
Tellus の衛星データを見てみよう #mf_fukuoka
kongmingstrap
0
160
ワールドカフェI /チューターを改良する / World Café I and Improving the Tutors
ks91
PRO
0
120
[新卒向け研修資料] テスト文字列に「うんこ」と入れるな(2024年版)
infiniteloop_inc
1
7.2k
反実仮想機械学習とは何か
usaito
PRO
10
3.5k
Featured
See All Featured
Building Applications with DynamoDB
mza
88
5.6k
4 Signs Your Business is Dying
shpigford
175
21k
Being A Developer After 40
akosma
57
580k
Easily Structure & Communicate Ideas using Wireframe
afnizarnur
187
16k
Build The Right Thing And Hit Your Dates
maggiecrowley
24
2k
Building an army of robots
kneath
300
41k
Rails Girls Zürich Keynote
gr2m
91
13k
Bash Introduction
62gerente
604
210k
Why You Should Never Use an ORM
jnunemaker
PRO
51
8.6k
Fantastic passwords and where to find them - at NoRuKo
philnash
37
2.5k
KATA
mclloyd
15
12k
Intergalactic Javascript Robots from Outer Space
tanoku
266
26k
Transcript
bitbankͷAWSΞΧ ϯτ࡞ཧज़ AWS DevDay 2019 ࠙ձLT @mdps513 ͬͨΜ
Service
࣍ • എܠ • ղܾ͢ΔͨΊʹͬͨ͜ͱ • ݁Ռ • ͜Ε͔Β
എܠ • AWS SSOΛ͍ͬͯΔ • ݱࡏฐࣾͰཧ͍ͯ͠ΔAWSΞΧϯτ60ݸ΄ͲͰຖ݄૿ ͍͑ͯΔ • ΞΧϯτ࡞ґཔ͕݄ʹ1,2݅,ଟ͍࣌ʹຖिඈΜͰ͘Δ •
ݱࡏAWSνʔϜ4໊ • ͦΕͧΕϓϩδΣΫτ͓࣋ͬͯΓɺΞΧϯτཧઐͷϓϩδΣ Ϋτͷਓ୭͍ͳ͍
ΞΧϯτ࡞࣌ͷϑϩʔ (ฐࣾͷྫ) 1. GlugentFlowͰਃ 2. ΞΧϯτ࡞ 3. CloudTrailઃఆ 4. AWS
Configઃఆ 5. GuardDutyઃఆ 6. Cost Visualizer ϩʔϧઃఆ 7. ΤϯλʔϓϥΠζαϙʔτՃೖ 8. Organaizational Unitઃఆ 9. RootΞΧϯτ෧ҹ 10. ݖݶ༩
ΞΧϯτ࡞࣌ͷϑϩʔ (ฐࣾͷྫ) 1. GlugentFlowͰਃ 2. ΞΧϯτ࡞ 3. CloudTrailઃఆ 4. AWS
Configઃఆ 5. GuardDutyઃఆ 6. Cost Visualizer ϩʔϧઃఆ 7. ΤϯλʔϓϥΠζαϙʔτՃೖ 8. Organaizational Unitઃఆ 9. RootΞΧϯτ෧ҹ 10. ݖݶ༩ ଟ͍͠໘͍͘͞ɻɻɻ (※ݸਓͷײͰ͢)
͜ΕͰΞΧϯτ࡞Ͱ͕Ε ͯ͠·͏…
ΞΧϯτ࡞࣌ͷϑϩʔ (ฐࣾͷྫ) • 1. GlugentFlowͰਃ • 2. ΞΧϯτ࡞ • 3.
organaizational Unitઃఆ • 4. CloudTrailઃఆ • 5. AWS Configઃఆ • 6. GuardDutyઃఆ • 7. Cost Visualizer ϩʔϧઃఆ • 8. ΤϯλʔϓϥΠζαϙʔτՃೖ • 9. RootΞΧϯτ෧ҹ • 10. ݖݶ༩ ͜͜ɺ ࣗಈԽͰ͖ͳ͍ʁ
ͦ͏ͩɺࣗಈԽ͠Α͏ɻ
ͬͨ͜ͱ ͦͷ1 ΞΧϯτ࡞ͱorganaizational Unitઃఆ • GlugentFlow͔Βਃ͕͋ͬͨΒ API Gateway͔ΒLambdaΛൃՐ • CreateAPI͕ୟ͔Εͯࣗಈతʹ࡞
͞ΕΔ • ͦͷޙదͳOrganizational Unit ʹৼΓ͚ΒΕΔ
ͬͨ͜ͱ ͦͷ2 CloudTrail, Config, GuardDuty,ͦ ͷଞϩʔϧઃఆ • Organizational
UnitʹՃ͞Ε ͨ࣌ͷCloudWatchEventsΛτ ϦΨʔ͠ɺLambdaΛൃՐ • CloudTrail,Config, GuardDuty ͳͲͷ֤छϩʔϧ CloudFormationStacksetsΛ༻ ͍֤ͯΞΧϯτʹઃఆΛө
ͦͷ2ͷStackSetsΛ༗ޮԽ͢Δ ࡍʹҙ͍ͯ͠Δ͜ͱ • ฐࣾͰϩάΛϩάऩू༻ͷS3 όέοτʹू͍ͯ͠Δ • ϩάΛ֘ͷS3ʹॻ͖ࠐΉͨΊ ʹΫϩεΞΧϯτͰͷόέο τϙϦγʔͷΞΫηεڐՄ͕ඞཁ •
LambdaͰOrganizationAPI͔Β ΞΧϯτΛऔಘͯ͠ stsAssumeRoleΛ༻͍ͯOUຖʹ S3policyUpdate
ͬͨ͜ͱ ͦͷ3 • ΤϯλʔϓϥΠζαϙʔτՃೖ • αϙʔτAPIΛLambdaͰൃՐ ͤͯ͞ΞΫςΟϕʔγϣϯґཔ
ͬͨ͜ͱ ͦͷ4 • StepFunctionͰͷ ϑϩʔ࡞
݁Ռ ࠓ·Ͱ3࣌ؒఔऔΒΕ͍ͯͨΞΧϯτ࡞࣌ ʹ͔͔Δ͕࣌ؒ30͘Β͍ʹઅͰ͖ͨ ຊདྷΔ͖͜ͱʹूதͰ͖ΔΑ͏ʹͳͬͨ ΞΧϯτ࡞ґཔ͕ා͘ͳ͘ͳͬͯ ͙ͬ͢ΓΕΔΑ͏ʹͳͬͨ
͜Ε͔Β • GuardDutyͷΞΧϯτ༗ޮԽΞΫςΟϕʔ γϣϯϑϩʔࣗಈԽ͍ͨ͠ • ࡞։࢝࣌ɺऴྃ࣌ɺΤϥʔ࣌ʹSlack௨Λ ͢ΔΑ͏ʹ͍ͨ͠
͍͞͝ʹ ϏοτόϯΫͰ AWSΤϯδχΞΛ ืू͍ͯ͠·͢ʂ
͓ΘΓ