いまさら聞けないAWS

Slide 1

Slide 1 text

By maki tokumura ͍·͞Βฉ͚ͳ͍AWS

Slide 2

Slide 2 text

ಙଜ ਅथ ͱ͘ΉΒ · ͖ ICTιϦϡʔγϣϯ Ϋϥ΢υετϥΫνϟʔνʔϜ ˌtimes_tokumura AWS৮Γ͸͡Ίͯ8ϲ݄໨

Slide 3

Slide 3 text

ࠓ೔ͷ໨త AWSͷ༻ޠʢαʔϏεʣ Λͬ͘͟Γ஌Ζ͏ʂ

Slide 4

Slide 4 text

ࠓ೔ͷ࿩͸ ͋͘·ͰAWS΁ͷಋೖ ͨͩ͘͠ɺৄ͘͠ɺ஌Γ͍ͨ࣌͸ͪ͜Β AWSαʔϏεผࢿྉ https://aws.amazon.com/jp/aws-jp-introduction/aws-jp-webinar-service-cut/

Slide 5

Slide 5 text

αʔϏεج൫ɺ ωοτϫʔΫ·ΘΓ

Slide 6

Slide 6 text

Regions AWSͷ஍Ҭͷ۠੾Γ 20Ҏ্ͷ஍Ҭʹ෼͔Ε͍ͯΔ ೔ຊʹ͸̎ͭ͋Δ Ϧʔδϣϯίʔυ ໊લ BQOPSUIFBTU ΞδΞύγϑΟοΫ ౦ژ BQOPSUIFBTU ΞδΞύγϑΟοΫ େࡕ

Slide 7

Slide 7 text

Ϧʔδϣϯ͸׬શʹ෼཭͞Ε͍ͯͯ ͦΕͧΕಠཱ͍ͯ͠Δ us-east-2 ถࠃ౦෦ (ΦϋΠΦ) ap-northeast-1 ΞδΞύγϑΟοΫ (౦ژ) eu-west-3 Ԥभ (ύϦ)

Slide 8

Slide 8 text

Ͳ͔͜ͷϦʔδϣϯͰো֐͕ىͬͯ͜΋େৎ෉ →ϚϧνϦʔδϣϯରԠ us-east-2 ถࠃ౦෦ (ΦϋΠΦ) ap-northeast-1 ΞδΞύγϑΟοΫ (౦ژ) eu-west-3 Ԥभ (ύϦ) ো֐ൃੜ ❌ͭͳ͕Βͳ͍ ✅େৎ෉Ͱ͢ʂ ✅େৎ෉Ͱ͢ʂ

Slide 9

Slide 9 text

AZ(Availability Zone) ̍Ϧʔδϣϯͷ಺Ͱͷ͞Βʹখ͞ͳ۠੾Γ ̍AZ͸̍ͭҎ্ͷσʔληϯλʔͰߏங ౦ژϦʔδϣϯ͸3ͭͷAZ͕͋Δ ɾap-northeast-1-a ɾap-northeast-1-c ɾap-northeast-1-d

Slide 10

Slide 10 text

AZ΋׬શʹ෼཭͞Ε͍ͯͯ Ϧʔδϣϯ಺ͰͦΕͧΕ͕ಠཱ͍ͯ͠Δ ap-northeast-1 ΞδΞύγϑΟοΫ (౦ژ) ap-northeast-1-a ap-northeast-1-c ap-northeast-1-d Region

Slide 11

Slide 11 text

Ͳ͔͜ͷAZͰো֐͕ىͬͯ͜΋େৎ෉ →ϚϧνAZରԠ ap-northeast-1 ΞδΞύγϑΟοΫ (౦ژ) ap-northeast-1-a ap-northeast-1-c ap-northeast-1-d Region ো֐ൃੜ ❌ͭͳ͕Βͳ͍ ✅େৎ෉Ͱ͢ʂ ✅େৎ෉Ͱ͢ʂ

Slide 12

Slide 12 text

Ͳ͔͜Ͱো֐͕ىͬͨ͜ͱͯ͠΋ γεςϜ͕μ΢ϯ͠ͳ͍ՄೳੑΛ ߴΊΔʢ୯Ұো֐఺Λͳ͘͢ʣ →ߴՄ༻ੑΛ࣮ݱ͢Δ

Slide 13

Slide 13 text

VPC (Virtual Private Cloud) AWS্ʹ࡞੒Ͱ͖Δ ϓϥΠϕʔτԾ૝ωοτϫʔΫۭؒ ಛఆͷωοτϫʔΫͷശͷΑ͏ͳ΋ͷ ͜ͷശͷதʹEC2΍DB΍ECS͕ ஔ͍ͯ͋ΔΠϝʔδ

Slide 14

Slide 14 text

ηΩϡϦςΟ

Slide 15

Slide 15 text

IAM (Identity and Access Management) AWSͷαʔϏεͰʮೝূʯͱʮೝՄʯͷ ઃఆΛߦ͏͜ͱ͕Ͱ͖ΔαʔϏε ΞΧ΢ϯτ΍ͦͷݖݶ؅ཧ͍ͯ͠Δ ೝূ ɿ ૬ख͕୭ʢԿʣͳͷ͔֬ೝ͢Δ͜ͱ ೝՄ ɿϦιʔε΁ͷΞΫηεݖݶΛ༩͑Δ͜ͱ

Slide 16

Slide 16 text

IAMϢʔβʔ ਓʢϢʔβʔʣʹ༩͑ΒΕΔID Ϣʔβʔ໊ͱύεϫʔυ͕෇༩͞Εɺ AWSΞΧ΢ϯτʹϩάΠϯ͢Δࡍʹ ඞཁͱͳΔ ̍ͭͷAWSΞΧ΢ϯτͷதʹෳ਺ͷϢʔ βʔΛ࡞Δ͜ͱ͕Ͱ͖Δ

Slide 17

Slide 17 text

↓͜Ε

Slide 18

Slide 18 text

IAMϙϦγʔ ʮAWSͷԿʹରͯ͠ʯ ʮͲͷΑ͏ͳૢ࡞Λʯ ʮͰ͖ΔʢͰ͖ͳ͍ʣʯ ͱ͍͏ݖݶΛఆΊͨ΋ͷ IAMϢʔβʔɾIAMϩʔϧʢޙड़ʣʹ ඥ͚ͮͯ࢖͏

Slide 19

Slide 19 text

S3ReadOnlyʢݟΔ͚ͩʣΛڐՄ͢ΔϙϦγʔ

Slide 20

Slide 20 text

S3ʹϑϧΞΫηεΛڐՄ͢ΔϙϦγʔ

Slide 21

Slide 21 text

IAMϩʔϧ ໾ׂΛఆ͍ٛͯ͠Δ΋ͷ IAMϙϦγʔΛଋͶͯɺ֓೦తͳ໊લΛ ෇͚Δ͜ͱ͕Ͱ͖Δ IAMϢʔβʔͱࣅͯΔ͕ɺ IAMϩʔϧ͸࢖༻͢Δଆ͕ਓʹݶΒͳ͍

Slide 22

Slide 22 text

ʮITEM-APIʯ ϩʔϧΛ࡞੒͠ ʮAmazonS3FullAccessʯϙϦγʔ Λඥ͚ͮΔɺΈ͍ͨͳ͜ͱΛ͠·͢ ITEM-API ECS S3 ϑΝΠϧΛPUTɾGET͍ͨ͠

Slide 23

Slide 23 text

IAM·ͱΊ ɾIAMϙϦγʔ Ͱ͖Δ͜ͱ/Ͱ͖ͳ͍͜ͱ Λఆٛ͠ɺ Ϣʔβʔ΍ϩʔϧʹඥ͚ͮͯ࢖͏ ɾIAMϢʔβʔ ϙϦγʔΛඥ෇͚ͯɺϢʔβʔ͕Ͱ͖Δ͜ͱΛఆٛ͢Δ ɾIAMϩʔϧ ϙϦγʔΛඥ෇͚ͯɺ ୭͔/AWSͷαʔϏε ͕Ͱ͖Δ͜ͱΛఆٛ͢Δ

Slide 24

Slide 24 text

ίϯϐϡʔςΟϯά

Slide 25

Slide 25 text

EC2 (Elastic Compute Cloud) OSΛ৐ͤͨԾ૝؀ڥΛΫϥ΢υ্ʹ࡞੒ Ͱ͖ΔαʔϏε ༻్ʹԊͬͯOSɾεϖοΫʢCPU΍ϝϞ ϦʣΛબͼࣗಈతʹαʔόʔͷ্ཱͪ͛ ͔ΒΠϯετʔϧ·Ͱͯ͘͠ΕΔ

Slide 26

Slide 26 text

ECS (Elastic Container Service) DokerίϯςφΞϓϦέʔγϣϯΛAWS ্Ͱಈ͔ͯ͘͠ΕΔαʔϏε ίϯςφͷ࣮ߦɺอޢɺεέʔϧΛAWS ଆͰ΍ͬͯ͘ΕΔͷͰ࢖͏ଆ͕ҙࣝ͢Δ ͜ͱ͕͘͢ͳͯ͘͢Ή

Slide 27

Slide 27 text

EC2΍ECSͷ͍͍ͱ͜Ζ ɾ؆୯ͳεϖοΫมߋ ɾ৑௕Խ͕؆୯ ɹˠ஄ྗੑ͕͋Δ ɾैྔ՝ۚʹΑΔίετϝϦοτ

Slide 28

Slide 28 text

ELB(Elastic Load Balancer) ELBʹ͸ɺ3ͭͷϩʔυόϥϯαʔ͕͋ Γɺ༻్ʹ߹Θͤͯબ୒Ͱ͖Δɻ ɾCLB (Classic Load Balancer) ɾNLB (Network Load Balancer) ɾALB (Application Load Balancer)

Slide 29

Slide 29 text

ALBͰͰ͖Δ͜ͱ ͦͷᶃෛՙ͕෼ࢄͰ͖Δ ALB ECS ECS

Slide 30

Slide 30 text

ALBͰͰ͖Δ͜ͱ ͦͷᶄURLͰৼΓ෼͚ઌΛઃఆͰ͖Δ API༻ALB AAA-api ECS https://ʓʓ.com/AAA/… https://ʓʓ.com/BBB/… BBB-api ECS ※ύεϕʔεɺϗετϕʔεɺHTTPϔομϕʔε΍ΫΤϦจࣈϕʔε…৭ʑͳنଇͰઃఆͰ͖·͢

Slide 31

Slide 31 text

ALBͰͰ͖Δ͜ͱ ͦͷᶅτϥϑΟοΫͷ੍ݶ͕Ͱ͖Δ ALB ※VPCͷར༻͕લఏͰ͢ ✅ΞΫηε0, ❌ΞΫηε/( ECS

Slide 32

Slide 32 text

ετϨʔδ΍DB

Slide 33

Slide 33 text

S3 (Simple Storage Service) Ϋϥ΢υܕͷΦϒδΣΫτετϨʔδ ྨࣅαʔϏεɿDropBoxɾOneDrive ετϨʔδʢ༰ྔʣ͕ࣗಈతʹ֦ுɾॖ খ͞ΕΔɻࣄલʹਖ਼֬ͳ༰ྔΛܭࢉͨ͠ Γɺ༨෼ʹϦιʔεΛ֬อ͓ͯ͘͠ඞཁ͕ ͳ͍

Slide 34

Slide 34 text

S3ͷ͍͍ͱ͜Ζ ͦͷᶃϥΠϑαΠΫϧ ࢦఆͨ͠ظ͕ؒܦաͨ͠΋ͷΛ࡟আ͠ ͨΓɺΑΓ௿Ձ֨ͳετϨʔδʹҠಈ ͨ͠ΓͰ͖Δ ྫɿ90೔ܦաͨ͠ϩάϑΝΠϧ͸࡟আ

Slide 35

Slide 35 text

S3ͷ͍͍ͱ͜Ζ ͦͷᶄόʔδϣχϯά ΦϒδΣΫτ͝ͱʹੈ୅؅ཧΛ༗ޮʹ ͢Δ͜ͱͰ͖Δ ྫɿޡͬͯಉ͡ϑΝΠϧ໊Ͱ্ॻ͖ͯ͠͠·ͬ ͯ΋ɺલͷόʔδϣϯʹ໭͢͜ͱ͕Ͱ͖Δ

Slide 36

Slide 36 text

S3ͷ͍͍ͱ͜Ζ ͦͷᶅϩάه࿥ ΦϒδΣΫτʹର͢ΔϩάΛ࢒͢͜ͱ ͕Ͱ͖Δ ྫɿ୭͕͜ͷϑΝΠϧΛ࡟আ͔ͨ͠ʁมߋͨ͠ ͔ʁΛḷΔ͜ͱ͕Ͱ͖Δ

Slide 37

Slide 37 text

S3ͷ͍͍ͱ͜Ζ ͦͷᶆΞΫηεݖݶ ઃఆ͞ΕͨϢʔβʔͷΈૢ࡞ΛڐՄ͢ ΔͳͲɺࡉ͔͘ΞΫηεݖݶΛઃఆͰ ͖Δ ྫɿΞΧ΢ϯτA͸ΞοϓϩʔυͷΈՄೳ ɹɹΞΧ΢ϯτB͸μ΢ϯϩʔυͷΈՄೳ

Slide 38

Slide 38 text

S3ͷ͍͍ͱ͜Ζ ͦͷᶇ҉߸Խ ΦϒδΣΫτΛ҉߸Խ͓ͯ͘͜͠ͱ͕ Ͱ͖Δ αʔόʔαΠυɺΫϥΠΞϯταΠυ ͦΕͧΕͷ҉߸ԽʹରԠ

Slide 39

Slide 39 text

RDS (Relation Database Service) σʔλϕʔεͷΠϯετʔϧ΍όοΫ ΞοϓͳͲͷઃఆΛ͠ͳͯ͘΋ɺσʔλ ϕʔε͕ར༻Ͱ͖ΔαʔϏε 6ͭͷRDBMS͔Βબ୒Մೳ Amazon AuroraɾPostgre SQLɾMySQL MariaσʔλϕʔεɾOracleɾSQL Server

Slide 40

Slide 40 text

RDSͷ͍͍ͱ͜Ζ ɾϚϧνAZʹΑΔՄ༻ੑ ɾιϑτ΢ΣΞͷࣗಈύον࡞ۀ ɾΦʔτεέʔϦϯά ɾϦʔυϨϓϦΧ ɹɹˠಡΈࠐΈઐ༻ͷσʔλϕʔε ɹɹಉ͡σʔλ͕ෳ਺ଘࡏ͢ΔͨΊσʔλͷ҆શੑ͕ߴ·Δ ɹɹ·ͨɺDBʹ͔͔ΔෛՙΛ෼ࢄͤ͞Δ͜ͱ͕Ͱ͖Δ

Slide 41

Slide 41 text

͓ΘΓʹ Ϋϥ΢υͷ͜ͱɾAWSͷ͜ͱ ஌͓͍ͬͯͯଛ͸ͳ͍ʂ Ұॹʹษڧ͍͖ͯ͠·͠ΐ͏