AWS Organizationsでマルチアカウント戦略を始めよう

by MasahiroKawahara

Slide 1

Slide 1 text

"840SHBOJ[BUJPOTͰ ϚϧνΞΧ΢ϯτઓུΛ࢝ΊΑ͏ ઒ݪ੐େ

Slide 2

Slide 2 text

εϥΠυ͸ޙʹೖखՄೳͰ͢ ൃදதͷ಺༰ΛϝϞ͢Δඞཁ͸͋Γ·ͤΜ Attention

Slide 3

Slide 3 text

Έͳ͞Μ͕೔ৗͰ࢖͍ͬͯΔ AWSΞΧ΢ϯτΛࢥ͍ු͔΂͍ͯͩ͘͞

Slide 4

Slide 4 text

EC2Πϯελϯεͷ ϦιʔεҰཡը໘

Slide 5

Slide 5 text

Α͘࢖͍ͬͯΔ IAMϢʔβʔ΍IAMϩʔϧ

Slide 6

Slide 6 text

AWSར༻ͷ੥ٻ৘ใ

Slide 7

Slide 7 text

͜Μͳײ͡ʹͳ͍ͬͯ·ͤΜ͔ʁ

Slide 8

Slide 8 text

͍ΖΜͳϓϩδΣΫτ/؀ڥͷ EC2Πϯελϯε͕ͪ͝Ό·ͥ

Slide 9

Slide 9 text

IAMϙϦγʔਫ਼ࠪʹർฐ͍ͯ͠Δ

Slide 10

Slide 10 text

ٯʹա৒ͳIAMϙϦγʔΛ෇༩͍ͯ͠Δ

Slide 11

Slide 11 text

৭ΜͳϓϩδΣΫτͷ ίετ͕ͪ͝Ό·ͥ

Slide 12

Slide 12 text

౰ͯ͸·Δํ͸ɾɾɾ ͥͻϚϧνΞΧ΢ϯτઓུ with AWS OrganizationsΛʂ

Slide 13

Slide 13 text

͜Ε͔Β࿩͢͜ͱ ɾϚϧνΞΧ΢ϯτઓུ͸ͳͥඞཁʁ ɾ"840SHBOJ[BUJPOT͸ͳͥඞཁʁ ɾϚϧνΞΧ΢ϯτઓུɺԿ͔Β࢝ΊΔʁ ઒ݪ ੐େ ɾΫϥεϝιου ɾAWSࣄۀຊ෦ ίϯαϧςΟϯά෦ॴଐ ɾ޷͖ͳAWSαʔϏε: AWS IAM ɾ2022 APN AWS Top Engineers (Service) https://dev.classmethod.jp/author/kawahara-masahiro/

Slide 14

Slide 14 text

ϚϧνΞΧ΢ϯτઓུ͸ͳͥඞཁʁ

Slide 15

Slide 15 text

ͦ΋ͦ΋ ϚϧνΞΧ΢ϯτઓུͱ͸ʁ

Slide 16

Slide 16 text

"84ͷϚϧνΞΧ΢ϯτઓུ ʰಛఆͷ୯Ґج४Ͱ"84ΞΧ΢ϯτΛ෼͚Δʱઓུ

Slide 17

Slide 17 text

ͳͥඞཁʁ

Slide 18

Slide 18 text

AWSΞΧ΢ϯτͷಛੑΛ͏·͘׆༻ͯ͠ ΞδϦςΟͱΨόφϯεΛཱ྆ͤ͞ΔͨΊ Q. AWSϚϧνΞΧ΢ϯτઓུ͸ͳͥඞཁʁ

Slide 19

Slide 19 text

ϚϧνΞΧ΢ϯτઓུͷϝϦοτ

Slide 20

Slide 20 text

ϝϦοτηΩϡϦςΟ޲্ "84ΞΧ΢ϯτ͸ηΩϡϦςΟͷڥքઢ l׬શͳݖݶ෼཭zΛ࣮ݱ

Slide 21

Slide 21 text

ϝϦοτ։ൃεϐʔυͷଅਐ "84ΞΧ΢ϯτ͸Ϧιʔεͷڥքઢ ଞϦιʔεͱͷlґଘؔ܎zΛഉআ

Slide 22

Slide 22 text

ϝϦοτίετ࠷దԽ "84ΞΧ΢ϯτ͸ίετͷڥքઢ l؆୯ʹz͔ͭlݫີʹzίετ෼ྨ

Slide 23

Slide 23 text

͜͜·Ͱͷ·ͱΊ ϚϧνΞΧ΢ϯτઓུͰ͸ʰಛఆͷ୯Ґج४ʱͰ "84ΞΧ΢ϯτΛ෼ׂͯ͠ӡ༻͍ͯ͘͠ɻ ΞδϦςΟͱΨόφϯεΛཱ྆ͤ͞ΔͨΊʹඞཁɻ "84ΞΧ΢ϯτͷಛੑ ༷ʑͳڥքઢ Λ͏·͘׆༻ɻ

Slide 24

Slide 24 text

AWS Organizations͸ͳͥඞཁʁ

Slide 25

Slide 25 text

"840SHBOJ[BUJPOT ෳ਺"84ΞΧ΢ϯτΛ૊৫Խͯ͠৭ʑͰ͖ΔΑ͏ʹ͢ΔαʔϏε ը૾Ҿ༻: AWS Organizations ͷ༻ޠͱ֓೦ - AWS Organizations

Slide 26

Slide 26 text

ͳͥඞཁʁ

Slide 27

Slide 27 text

ϚϧνΞΧ΢ϯτઓུͷಛੑ্ ౷੍͕൥ࡶʹͳΓ͕ͪͳ෦෼Λ αϙʔτ͢ΔͨΊ Q. AWS Organizations͸ͳͥඞཁʁ

Slide 28

Slide 28 text

AWS Organizations͕αϙʔτ͢Δ͜ͱ #ϐοΫΞοϓ

Slide 29

Slide 29 text

ྫ੥ٻͷ؆ૉԽ ϚϧνΞΧ΢ϯτઓུ͸lΞΧ΢ϯτຖͷ੥ٻ؅ཧz͕൥ࡶʹͳΓ͕ͪ ➔l؅ཧΞΧ΢ϯτz΁੥ٻΛू໿ 5JQT "840SHBOJ[BUJPOTͰ͸ छྨͷ"84ΞΧ΢ϯτΛఆΊ·͢ ؅ཧΞΧ΢ϯτ ͭ 0SHBOJ[BUJPOTΛ༗ޮԽͨ͠ΞΧ΢ϯτ ϝϯόʔΞΧ΢ϯτ ෳ਺ ؅ཧΞΧ΢ϯτʹ؅ཧ͞ΕΔΞΧ΢ϯτ 📝

Slide 30

Slide 30 text

ϚϧνΞΧ΢ϯτઓུ͸lϩά౷੍z͕൥ࡶʹͳΓ͕ͪ ➔l"840SHBOJ[BUJPOT࿈ܞzͰ؆୯ʹू໿ɺूத؅ཧ ྫϩά ূ੻ ͷू໿ͱूத؅ཧ 5JQT "840SHBOJ[BUJPOT͸ଟ͘ͷ"84αʔϏεͱ ࿈ܞ͍ͯ͠·͢ɻ 📝

Slide 31

Slide 31 text

ྫΞΫηε੍ޚͷҰׅઃఆ ϚϧνΞΧ΢ϯτઓུ͸lηΩϡϦςΟ౷੍z͕൥ࡶʹͳΓ͕ͪ ➔αʔϏείϯτϩʔϧϙϦγʔ 4$1 ͰҰׅΞΫηε੍ޚ 5JQT 0SHBOJ[BUJPOBM6OJU ૊৫୯Ґ06 ϝϯόʔΞΧ΢ϯτΛάϧʔϓԽ֊૚Խ ͢ΔͨΊͷ࿮ αʔϏείϯτϩʔϧϙϦγʔ 4$1 06ΞΧ΢ϯτ୯ҐͰద༻͢ΔϙϦγʔ 📝

Slide 32

Slide 32 text

ྫϢʔβʔͱΞΫηεͷूத؅ཧ ϚϧνΞΧ΢ϯτઓུ͸lϢʔβʔɾΞΫηε؅ཧz͕൥ࡶʹͳΓ͕ͪ ➔l"84*".*EFOUJUZ$FOUFSzͰूத؅ཧ

Slide 33

Slide 33 text

͜͜·Ͱͷ·ͱΊ "840SHBOJ[BUJPOT͸ෳ਺ͷ"84ΞΧ΢ϯτΛ૊৫ Խͯ͠ɺ৭ʑͰ͖ΔΑ͏ʹ͢ΔαʔϏεɻ ϚϧνΞΧ΢ϯτઓུͰ౷੍͕൥ࡶʹͳΓ͕ͪͳ෦෼Λ αϙʔτ͢Δɻ

Slide 34

Slide 34 text

ϚϧνΞΧ΢ϯτઓུɺԿ͔Β࢝ΊΔʁ

Slide 35

Slide 35 text

͓͢͢Ίεςοϓ ᶃ"84ΞΧ΢ϯτ෼ׂํ਑ΛܾΊΑ͏ ᶄαʔϏείϯτϩʔϧϙϦγʔ 4$1 Λ׆༻͠Α͏ ᶅ"84*".*EFOUJUZ$FOUFSΛ׆༻͠Α͏ ᶆ৭Μͳ0SHBOJ[BUJPOT࿈ܞαʔϏεΛ׆༻͠Α͏

Slide 36

Slide 36 text

ᶃ"84ΞΧ΢ϯτ෼ׂํ਑ΛܾΊΑ͏ "84ΞΧ΢ϯτΛ෼ׂ͢Δج४ΛఆΊ·͠ΐ͏ ͦΕʹ͋Θͤͨ૊৫୯Ґ 06 ઃܭΛߦ͍·͢

Slide 37

Slide 37 text

ᶃ"84ΞΧ΢ϯτ෼ׂํ਑ΛܾΊΑ͏ ΞΧ΢ϯτ෼ׂ06ઃܭͷϞσϧέʔε

Slide 38

Slide 38 text

ᶃ"84ΞΧ΢ϯτ෼ׂํ਑ΛܾΊΑ͏ ΞΧ΢ϯτ෼ׂ06ઃܭͷϞσϧέʔε ΞΧ΢ϯτԣஅͰ ηΩϡϦςΟӡ༻͢ΔͨΊͷ "84ΞΧ΢ϯτ ΞΧ΢ϯτԣஅͰ ϩάΛूத؅ཧ͢ΔͨΊͷ "84ΞΧ΢ϯτ → ↑ ݕূ ඇຊ൪ ϫʔΫϩʔυͷ "84ΞΧ΢ϯτΛ഑ஔ͢Δ06 ↓ ຊ൪ϫʔΫϩʔυͷ "84ΞΧ΢ϯτΛ഑ஔ͢Δ06 ↓

Slide 39

Slide 39 text

ᶄαʔϏείϯτϩʔϧϙϦγʔ 4$1 Λ׆༻͠Α͏ ༧๷తΨʔυϨʔϧͱͯ͠ϑϧ׆༻ ˝Α͋͘Δ੍ޚྫ ɾ࢖Θͳ͍ϦʔδϣϯͰͷૢ࡞ېࢭ ɾηΩϡϦςΟαʔϏεͷແޮԽېࢭFUD ࢀߟ: αʔϏείϯτϩʔϧϙϦγʔͷྫ - AWS Organizations

Slide 40

Slide 40 text

ᶅ"84*".*EFOUJUZ$FOUFSΛ׆༻͠Α͏ l୭͕ͲͷΞΧ΢ϯτʹͲͷݖݶͰΞΫηε͢Δ͔zΛूத؅ཧ ֤"84ΞΧ΢ϯτʹ*".ϢʔβʔΛ࡞Δඞཁ͕ແ͘ͳΓ·͢

Slide 41

Slide 41 text

ᶆ৭Μͳ0SHBOJ[BUJPOT࿈ܞαʔϏεΛ׆༻͠Α͏ શͯΛ׆༻͍ͯ͘͠ඞཁ͸ແ͠ ˝͓͢͢Ί0SHBOJ[BUJPOT࿈ܞαʔϏε ɾ"84$MPVE5SBJM૊৫ϨϕϧͰূ੻Λ؅ཧ ɾ"84$MPVE'PSNBUJPO06୯ҐͰϦιʔεΛల։ ɾ"NB[PO(VBSE%VUZ "844FDVSJUZ)VC ࣍εϥΠυ

Slide 42

Slide 42 text

"NB[PO(VBSE%VUZ "844FDVSJUZ)VC ηΩϡϦςΟαʔϏεΛΞΧ΢ϯτԣஅͰ؅ཧɾӡ༻ ࢀߟ: ɾOrganizations ؀ڥͰ Amazon GuardDuty ΛશϦʔδϣϯ΁؆୯ηοτΞοϓͯ͠ΈΔ | DevelopersIO ɾOrganizations ؀ڥͰ AWS Security Hub ΛશϦʔδϣϯ΁؆୯ηοτΞοϓ͢Δ | DevelopersIO

Slide 43

Slide 43 text

͓ΘΓʹ

Slide 44

Slide 44 text

͓ΘΓʹ "84ΞΧ΢ϯτͷಛੑΛ্ख͘׆༻ͯ͠ɺϚϧνΞΧ ΢ϯτઓུΛਪਐ͠·͠ΐ͏ɻ ਪਐαϙʔτʹ͸"840SHBOJ[BUJPOT͕ศརͰ͢ɻ lεϞʔϧελʔτzɺl·ͣ͸৮ͬͯΈΔzΛҙࣝ͠· ͠ΐ͏ʂ

Slide 45

Slide 45 text

࠷ޙʹએ఻$MBTTNFUIPE$MPVE(VJEFCPPL ʮ૊৫తͳ"84׆༻ͷͨΊͷϊ΢ϋ΢ʯΛ·ͱΊͨφϨοδू Ϋϥεϝιουϝϯόʔζ޲͚ʹແঈެ։தͰ͢📚 ˛"84αʔϏεͷϕετϓϥΫςΟε ˛"84ར༻ΨΠυϥΠϯͷαϯϓϧ ˞্ه಺༰͸౎౓ߋ৽͞ΕΔՄೳੑ͕͋Γɺ࣮ࡍͷϖʔδͱҟͳΔ৔߹͕͋Γ·͢ Ϋϥεϝιουϝϯόʔζϙʔλϧɿ ʮ͓໾ཱͪ৘ใʯˠʮ૊৫తͳ"84׆༻ͷͨΊͷϊ΢ϋ΢ʯ

Slide 46

Slide 46 text

No content