ヤプリにおけるAWS Control Towerの活用 / Using AWS ControlTower in Yappli

Yappli Tech Conference 2022の発表資料です。

Transcript

1. AWS Control Tower SESSION 04
2. @modokkin 2018 Youtube 🙇 https://www.youtube.com/c/timesyappliradio
3. INDEX 01 02 03 04 05 AWS AWS Control Tower AWS Control Tower AWS Control Tower
4. 01 AWS
5. AWS CloudTrail AWS AWS Con fi g AWS AWS Organizations AWS IAM Identity Center (AWS Single Sign-On )
6. AWS Production Staging Production Account Develop AWS CloudTrail AWS Con fi g
7. Production Staging Production Account Develop Develop Account AWS CloudTrail AWS Con fi g AWS CloudTrail AWS Con fi g
8. Production Staging Production Corporate AWS CloudTrail AWS Con fi g Develop Corporate Develop AWS CloudTrail AWS Con fi g AWS CloudTrail AWS Con fi g
9. Production Staging Production etc. Develop Develop Corporate Corporate
10. AWS Organizations Workloads OU Production OU SCP Staging OU Develop OU SCP SCP Security OU SCP SCP Exceptions OU SCP
11. AWS IAM Identity Center (AWS Single Sign-On ) IAM User IAM AWS IAM Identity Center okta
12. AWS IAM Identity Center IAM AWS Organizations ( OU SCP ) SCP( ) 1 AWS Config
13. AWS
14. 02 AWS Control Tower
15. AWS : https://aws.amazon.com/jp/controltower/
16. Guardrails( ) AWS Control Tower 
 Amazon S 3 
 SSH DB
17. Landing Zone ( ) • AWS ( ) AWS Control Tower H
18. AWS CloudTrail AWS Con fi g AWS Organizations AWS ControlTower
19. 03 AWS Control Tower
20. 1 . AWS 2 . 3. AWS 4 . AWS Control Tower 5 . 6 . Control Tower Workshops https://controltower.aws-management.tools/ja/
21. ( ) AWS Control Tower 🤗
22. AWS Control Tower
23. 04 AWS Control Tower
24. • https://docs.aws.amazon.com/ja_jp/controltower/latest/userguide/accounts.html AWS Organizations
25. AWS CloudTrail Amazon S3 🆕 KMS
27. 築
29. AWS IAM MFA Amazon S3 

30. Slack AWS Chat Bot Amazon CloudWatch
31. Okta 築 • AWS Control Tower AWS IAM Identity Center(AWS SSO) • Okta Okta Okta AWS IAM Identity Center 築
33. AWS Control Tower AWS AWS Control Tower
34. AWS
36. AWS Control Tower Yappli Tech Blog https://tech.yappli.io/entry/ yapplitechconf2022-sre
37. 🙇