Tweet
Tweet

Slide 1

Slide 1 text

JAWS-UG #14 
 11 AWS re:Inforce 20 2 3 2 0 23 . 7 . 23 @seike 4 60 1

Slide 2

Slide 2 text

@seike 460 - - @seike 46 0 - Fusic - / - / - - JAWS Days - AWS Dev Day - Serverless Days - - JAWS Festa 2023 in Kyushu Staff - ServerlessDays 2 023 Organizer 2

Slide 3

Slide 3 text

Agenda 1 . 2 . 3 .IAM 4 . 5 . 3

Slide 4

Slide 4 text

1

Slide 5

Slide 5 text

AWS 5 
 
 AWS Lambda 
 AWS

Slide 6

Slide 6 text


 6

Slide 7

Slide 7 text


 
 -> 
 7

Slide 8

Slide 8 text

API 21,172/ -> 1,543,602/ 
 S 3 Select 
 1,000 / 600 2000 rps 8

Slide 9

Slide 9 text

9 
 
 


Slide 10

Slide 10 text

2 


Slide 11

Slide 11 text

11 
 API Gateway API KEY 
 API KEY 
 


Slide 12

Slide 12 text

12 AWS WAF 
 SQL 
 IP DOS 
 IP 
 


Slide 13

Slide 13 text

3 IAM

Slide 14

Slide 14 text

AWS Lambda IAM Role 14 AWS Lambda 
 AWS Lambda AWS 
 
 IAM 
 IAM Role 


Slide 15

Slide 15 text

IAM 15 SES S 3 DynamoDB 
 


Slide 16

Slide 16 text

DynamoDB 16 DynamoDB 
 IAM GetItem PutItem { "Version": " 2 012 - 1 0 - 17 ", "Statement": [ { "Effect": "Allow", "Action": [ "dynamodb:GetItem", "dynamodb:PutItem" ], "Resource": "arn:aws:dynamodb:us- west- 2 : 123 4567 890 1 2 :table/ExampleTable" } ] }

Slide 17

Slide 17 text

S 3 17 S 3 IAM GetObject PutObject 
 { "Version": " 2 0 12 - 1 0 - 17 ", "Statement": [ { "Effect": "Allow", "Action": [ "s 3 :GetObject", "s 3 :PutObject" ], "Resource": "arn:aws:s 3 :::examplebucket/*" } ] }

Slide 18

Slide 18 text

SES 18 SES IAM 
 { "Version": " 2 0 12 - 1 0 - 17 ", "Statement": [ { "Effect": "Allow", "Action": [ "ses:SendEmail", "ses:SendRawEmail" ], "Resource": "arn:aws:ses:us- west- 2 : 1 234 5 6 7 89 01 2 :identity/ example.com" } ] }

Slide 19

Slide 19 text

IAM 19 AdministratorAccess 


Slide 20

Slide 20 text

4

Slide 21

Slide 21 text

21 
 
 HTML Javascript 
 
 
 
 NG

Slide 22

Slide 22 text

22 Secret 
 
 Secret 
 Secret Manager Secret

Slide 23

Slide 23 text

5

Slide 24

Slide 24 text

24 Security Hub CloudTrail AWS Config 


Slide 25

Slide 25 text

25 Point 1 IAM AdministratorAccess Point 2 Secret Point 3 Point 4

Slide 26

Slide 26 text

No content

Slide 27

Slide 27 text

Serverless Days Tokyo 2023 27

Slide 28

Slide 28 text

Thank You We are Hiring ! https://recruit.fusic.co.jp/