ヤプリにおけるAWS Control Towerの活用 / Using AWS ControlTower in Yappli

Yappli Tech Conference 2022の発表資料です。

Transcript

1. 
   
   AWS Control Tower
   SESSION 04
   

   View Slide

2. @modokkin
   
   
   
   
   2018
   
   
   Youtube
   🙇
   
   
   https://www.youtube.com/c/timesyappliradio
   

   View Slide

3. INDEX
   01
   02
   03
   04
   05
   AWS
   AWS Control Tower
   AWS Control Tower
   AWS Control Tower
   

   View Slide

4. 01
   
   
   AWS
   

   View Slide

5. AWS CloudTrail
   
   
   AWS
   AWS Con
   fi
   g
   
   
   AWS
   AWS Organizations
   
   
   AWS IAM Identity Center
   
   
   (AWS Single Sign-On )
   
   
   

   View Slide

6. AWS
   Production Staging
   Production Account
   Develop
   AWS CloudTrail AWS Con
   fi
   g
   

   View Slide

7. Production Staging
   Production Account
   Develop
   Develop Account
   AWS CloudTrail AWS Con
   fi
   g AWS CloudTrail AWS Con
   fi
   g
   

   View Slide

8. Production Staging
   Production
   Corporate
   AWS CloudTrail AWS Con
   fi
   g
   Develop Corporate
   Develop
   AWS CloudTrail AWS Con
   fi
   g AWS CloudTrail AWS Con
   fi
   g
   

   View Slide

9. Production Staging
   Production
   etc.
   Develop
   Develop
   Corporate
   Corporate
   

   View Slide

10. AWS Organizations
    Workloads OU
    Production OU
    SCP
    Staging OU
    Develop OU
    SCP
    SCP
    Security OU
    SCP
    SCP
    Exceptions OU
    SCP
    

    View Slide

11. AWS IAM Identity Center
    (AWS Single Sign-On )
    IAM User
    IAM
    AWS IAM Identity Center
    okta
    

    View Slide

12. AWS IAM Identity Center IAM
    
    
    AWS Organizations
    
    
    ( OU SCP )
    
    
    SCP( )
    1
    
    
    AWS Config
    

    View Slide

13. 
    
    AWS
    

    View Slide

14. 02 AWS Control Tower
    

    View Slide

15. AWS
    : https://aws.amazon.com/jp/controltower/
    

    View Slide

16. Guardrails( )
    AWS Control Tower
    
    
    

    Amazon S
    3
    
    
    

    SSH DB
    

    View Slide

17. Landing Zone ( )
    • AWS
    ( )
    
    
    AWS Control Tower
    
    
    H
    

    View Slide

18. AWS CloudTrail AWS Con
    fi
    g
    AWS Organizations
    AWS ControlTower
    
    
    

    View Slide

19. 03 AWS Control Tower
    

    View Slide

20. 1
    . AWS
    
    
    2
    .
    
    
    3. AWS
    
    
    4
    . AWS Control Tower
    
    
    5
    .
    
    
    6
    .
    Control Tower Workshops https://controltower.aws-management.tools/ja/
    

    View Slide

21. 
    
    ( )
    
    
    AWS Control Tower 🤗
    

    View Slide

22. AWS Control Tower
    
    
    

    View Slide

23. 04 AWS Control Tower
    
    
    

    View Slide

24. •
    
    
    
    
    
    
    
    
    
    https://docs.aws.amazon.com/ja_jp/controltower/latest/userguide/accounts.html
    AWS Organizations
    

    View Slide

25. 
    
    
    
    
    
    AWS CloudTrail
    
    
    Amazon S3 🆕
    
    
    KMS
    

    View Slide

26. View Slide

27. 築
    
    
    

    View Slide

28. View Slide

29. 
    
    
    
    AWS IAM MFA
    
    
    Amazon S3
    

    

    View Slide

30. 
    
    Slack
    
    
    AWS Chat Bot Amazon CloudWatch
    

    View Slide

31. Okta 築
    • AWS Control Tower AWS IAM Identity Center(AWS SSO)
    
    
    • Okta
    Okta
    
    
    Okta AWS IAM Identity Center 築
    

    View Slide

32. View Slide

33. AWS Control Tower
    
    
    AWS
    
    
    
    
    
    AWS Control Tower
    
    
    

    View Slide

34. AWS
    

    View Slide

35. View Slide

36. AWS Control Tower
    
    
    Yappli Tech Blog
    https://tech.yappli.io/entry/
    yapplitechconf2022-sre
    

    View Slide

37. 
    
    🙇
    

    View Slide