Lambda@edgeで S3+CloudFrontで簡単BASIC認証！

20190912_JAWSUG札幌_LT1

Transcript

1. Lambda@edgeͰ S3+CloudFrontͰɺ؆୯BASICೝূʂ 2019೥9݄12೔ ୈ24ճ JAWS-UG ࡳຈ
2. ࡾӜҰथ ωοτσδλϧࣄۀ෦ ޷͖ͳAWSαʔϏε:CloudFront ޷͖ͳGCPαʔϏε:BigQuery
3. ݱ৔͔ΒώΞϦϯά ຋༁ɾ࣮૷ґཔ ςΫχΧϧσΟϨΫλʔʁ
   43&
   
   1.ʁ
4. Lambda@edge ͬͯͳʹʁ
5. S3 bucket CloudFront Client Linuxͱ͔ͪΐͬͱΘ͔Μͳ͍ͷͰɺ web্ཱͪ͛Α͏ͱ͢Δͱɺ͜ͷํ๏͔͠஌Βͳ͍ͷͰ͢ɻ CloudFront େ޷͖
6. ʮ.htaccess ͱ͔Ͳ͏͢Μͷʁʯ
7. ͪΐͬͱɺΘ͔Μͳ͍
8. S3 bucket CloudFront Client Lambda@edge BASICೝূ
9. Ϧʔδϣϯ͸ όʔδχΞ๺෦
10. Node.jsͷ৔߹
11. ʮsite:dev.classmethod.jp lambda BASICೝূʯ Ͱάάͬͯɺίϐϖ https://dev.classmethod.jp/cloud/aws/basic-auth-s3-cloudfront-lambda/
12. 'use strict'; exports.handler = (event, context, callback) => { // Get request and request headers const request = event.Records[0].cf.request; const headers = request.headers; // Configure authentication const authUser = 'user'; const authPass = 'pass'; // Construct the Basic Auth string const authString = 'Basic ' + new Buffer(authUser + ':' + authPass).toString('base64'); // Require Basic authentication if (typeof headers.authorization == 'undefined' || headers.authorization[0].value != authString) { const body = 'Unauthorized'; const response = { status: '401', statusDescription: 'Unauthorized', body: body, headers: { 'www-authenticate': [{key: 'WWW-Authenticate', value:'Basic'}] }, }; callback(null, response); } // Continue request processing if authentication passed callback(null, request); };
13. 'use strict'; exports.handler = (event, context, callback) => { // Get request and request headers const request = event.Records[0].cf.request; const headers = request.headers; // Configure authentication const authUser = 'user'; const authPass = 'pass'; // Construct the Basic Auth string const authString = 'Basic ' + new Buffer(authUser + ':' + authPass).toString('base64'); // Require Basic authentication if (typeof headers.authorization == 'undefined' || headers.authorization[0].value != authString) { const body = 'Unauthorized'; const response = { status: '401', statusDescription: 'Unauthorized', body: body, headers: { 'www-authenticate': [{key: 'WWW-Authenticate', value:'Basic'}] }, }; callback(null, response); } // Continue request processing if authentication passed callback(null, request); }; ͚ͩ͜͜ɺม͑Δ
14. ࠓ౓͸ΞΫγϣϯΛԡ͢ ϙνο
15. ๺෦όʔδχΞ͚ͩʮػೳʯͬͯͷ͕͋Δ ๺෦όʔδχΞ ౦ژ
16. Πϕϯτ͸શ෦Ͱ4छྨ ࠓճ͸ʮϏϡʔΞʔϦΫΤετʯΛબ୒
17. ͪΐͬͱɺ଴ͭ
18. σϓϩΠυ
19. CloudFrontͷBehaviorͷԼͷํ ͏·͘ɺͰ͖ͯͦ͏
20. ΞΫηεͯ͠ΈΔ Ͱ͖ͨʂʂ
21. Lambda@edge ଞʹ΋͍Ζ͍ΖͰ͖ΔΒ͍͠ʂ Έͳ͞Μɺͥͻ৮ͬͯΈ͍ͯͩ͘͞ʂ