やはりタグ。タグは全てを解決する

by Kengo Suzuki

Slide 1

Slide 1 text

΍͸Γλάɹλά͸શͯΛղܾ͢Δ 1 BXTEFWEBZ

Slide 2

Slide 2 text

໊લླ໦ݚޗ !LFOTDBM ॴଐ -BZFS9גࣜձࣾ$50ࣨ ࡾҪ෺࢈σδλϧΞηοτɾϚωδϝϯτग़޲ དྷྺ ূ݊޲͚.BOBHFE4FDVSJUZ4FSWJDFɺՈܭ฽ɾΫϥ΢υձܭɺূ݊ձࣾ ݸਓͷ׆ಈ ಉਓʮ4FDVSFཱྀஂʯʹͯ1PEDBTUʮ4FDVSF-JBJTPOʯ΍ಉਓࢽ࡞੒ िץʮ๩͍͠ਓͷͨΊͷηΩϡϦςΟɾΠϯςϦδΣϯεʯൃߦ 1PE$BTUʮ4FDVSF-JBJTPOʯΛʢ΄΅ʣ8FFLMZͰϦϦʔε ॻ੶ 0`3FJMMZʮ;FSP5SVTU/FUXPSLʯ؂༁ ΠϯϓϨε3%ʮΞΠσϯςΟςΟ͸ͩΕͷ΋ͷʁ)ZQFSMFEHFS*OEZ"SJFTͰ࣮ݱ͢Δ෼ࢄΞΠσϯςΟςΟʯஶ࡞ ॴଐઌ঺հࣗݾ঺հ 2

Slide 3

Slide 3 text

Ϧετ Ϧετ Ϧετ Ϧετͷڧௐจࣈ Ϧετ ݟग़͠ 3

Slide 4

Slide 4 text

ϒϩοΫνΣʔϯͷձࣾ Ͱ͸ͳ͍Ͱ͢ 4 IUUQTOPUFDPNGVLLZZOOGFECD

Slide 5

Slide 5 text

ॴଐઌͦͷᶃ 5

Slide 6

Slide 6 text

Ϧετ Ϧετ Ϧετ Ϧετͷڧௐจࣈ Ϧετ ݟग़͠ 6

Slide 7

Slide 7 text

Ϧετ Ϧετ Ϧετ Ϧετͷڧௐจࣈ Ϧετ ݟग़͠ 7

Slide 8

Slide 8 text

ॴଐઌͦͷᶄ 8

Slide 9

Slide 9 text

ॴଐઌͦͷᶄ 9

Slide 10

Slide 10 text

ॴଐઌͦͷᶄ 10

Slide 11

Slide 11 text

ॴଐઌͦͷᶄ 11

Slide 12

Slide 12 text

ຊ೔ͷ͓࿩ 12 $50ࣨ԰୆ࠎΤϯδχΞ

Slide 13

Slide 13 text

ຊ೔ͷ͓࿩ 13 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ

Slide 14

Slide 14 text

ຊ೔ͷ͓࿩ 14 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ "84

Slide 15

Slide 15 text

ຊ೔ͷ͓࿩ 15 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ "84 λά

Slide 16

Slide 16 text

ຊ೔ͷ͓࿩ 16 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ "84 λά

Slide 17

Slide 17 text

ຊ೔ͷ͓࿩ 17 $50ࣨ԰୆ࠎΤϯδχΞ ࢿ࢈؅ཧ "84 λά

Slide 18

Slide 18 text

࿩͢͜ͱ ౰ࣾͷλά؅ཧͷมભ ࿩͞ͳ͍͜ͱ ౰ࣾͷλάΛ׆༻ͨ͠ӡ༻ ࿩͞ͳ͍͜ͱ 18

Slide 19

Slide 19 text

8IZλά؅ཧ ౰ࣾͷλά؅ཧ 5BHWFS 5BHWFS 5BHWFS 5BHWFS ະདྷͷ࿩ʣ ΞδΣϯμ 19

Slide 20

Slide 20 text

8IZλά؅ཧ 20

Slide 21

Slide 21 text

ʢ͍͖ͳΓ୤ઢʣθϩτϥετ 21

Slide 22

Slide 22 text

ୈࡾͷࢦ਑͸ɺθϩτϥετͷ֓೦ ͸ɺอޢର৅ͷγεςϜͱσʔλͷ૊ ৫తՁ஋ʹ͋Θͤͯద༻͢Δඞཁ͕͋ Δͱ͍͏͜ͱͰ͢ 22 θϩτϥετΞʔΩςΫνϟ"84ͷࢹ఺

Slide 23

Slide 23 text

ୈࡾͷࢦ਑͸ɺθϩτϥετͷ֓೦ ͸ɺอޢର৅ͷγεςϜͱσʔλͷ૊ ৫తՁ஋ʹ͋Θͤͯద༻͢Δඞཁ͕͋ Δͱ͍͏͜ͱͰ͢ 23 θϩτϥετΞʔΩςΫνϟ"84ͷࢹ఺ อޢର৅ͷ γεςϜͱσʔλʹ͍ͭͯ Կ΋Θ͔ΒΜ৔߹͸ʁ

Slide 24

Slide 24 text

ࢿ࢈؅ཧ ༧࣮؅ཧ ΞΫηε؅ཧ ʢฏ࣌ͷʣϦεΫ؅ཧ ΠϯγσϯτରԠ ࣗಈԽ ର৅͕ط஌Ͱͳ͍ͱͰ͖ͳ͍͜ͱ 24

Slide 25

Slide 25 text

UPNPWFUP;5" BOFOUFSQSJTFNVTUIBWFB TZTUFNUPEJTDPWFSBOESFDPSEQIZTJDBMBOE WJSUVBMBTTFUTUPDSFBUFBVTBCMFJOWFOUPSZ /*4541ʮθϩτϥετɾΞʔΩςΫνϟʯ 25

Slide 26

Slide 26 text

֤Ϧιʔεʹ෇༩͞Εͨϝλσʔ λ ֤छӡ༻ʹ͓͚ΔඞཁෆՄܽͳࢀ রઌσʔλ ૊৫ಛ༗ͷϦιʔε*EFOUJUZΛߏ ங͢Δ$MBJN "84ͷλάͱ͸ʁ 26 ๻͸͜ͷ ؀ڥͰ࢖ΘΕ·͢ ๻ͷ؅ཧऀ͸ 43&νʔϜͰ͢ ܦӦ؅ཧ෦ͷ ͓ࡒ෍͔͍ͭ·͢ ػີ৘ใ ͔͍͋ͭ·͢ %9αʔϏεͰ ࢖ΘΕ·͢ EFWEYFDͱਃ͠·͢

Slide 27

Slide 27 text

֤Ϧιʔεʹ෇༩͞Εͨϝλσʔ λ ֤छӡ༻ʹ͓͚ΔඞཁෆՄܽͳࢀ রઌσʔλ ૊৫ಛ༗ͷϦιʔε*EFOUJUZΛߏ ங͢Δ$MBJN "84ͷλάͱ͸ʁ 27 ๻͸͜ͷ ؀ڥͰ࢖ΘΕ·͢ ๻ͷ؅ཧऀ͸ 43&νʔϜͰ͢ ܦӦ؅ཧ෦ͷ ͓ࡒ෍͔͍ͭ·͢ ػີ৘ใ ͔͍͋ͭ·͢ %9αʔϏεͰ ࢖ΘΕ·͢ EFWEYFDͱਃ͠·͢

Slide 28

Slide 28 text

αʔόʔʹՍۭͷσʔλΛ෇༩Ͱ͖ΔΑ͏ʹͳͬͨ ʮໝ૝ͱ͍͏໊ͷ૝૾ྗ͕ϗϞɾαϐΤϯεΛਐԽͤͨ͞ʯ ͨ͘͞Μ͚ͭΒΕΔʢd Ωʔɾ஋ͷࣗ༝౓͕ߴ͍ʢʙ VOJDPEFจࣈɺDBTFTFOTJUJWF ه߸ར༻Խʣ ϫʔΫϩʔυͷಈ࡞ʹ௚઀తͳӨڹΛ༩͑Δ͜ͱͳ͘ӡ༻Ͱ͖Δ 71$ͷ/BNFλάʜ ஌Γ·ͤΜͶʜ "1*؅ཧͰ͖Δ σʔλΛ࣮ࡍͷϦιʔεʹࣄલຒΊࠐΜ্ͩͰɺࢿ࢈؅ཧ%#΍ΤΫηϧΛิ׬Ͱ͖Δ ٯํ޲΋Մ ؅ཧऀʹΑΔ౷੍΋Ͱ͖Δ λά͸͍͢͝ 28

Slide 29

Slide 29 text

λά͔͠উͨΜ 29

Slide 30

Slide 30 text

౰ࣾͷ࿩ 30

Slide 31

Slide 31 text

5BH7FS 31

Slide 32

Slide 32 text

#$ίϯαϧࣄۀ͕ϝΠϯͩͬͨͨΊɺ۩ମతͳظؒݶఆతͳϫʔ Ϋϩʔυ͔͠ͳ͔ͬͨ 1P$ϓϩδΣΫτʹ൐͏୹ظతͳ৘ใࢿ࢈͔͠ͳ͔ͬͨʢ"84্ Ͱ͸ʣ Πϯϑϥత੔උΛ̎ਓͰ࣮ࢪ ΏΔʙ͘ᯂΑΓ࢝ΊΑ ʢӨڹ΋ͳ͍͠ʣΨϯΨϯ͍͜͏ͥ 5BHWFS 32

Slide 33

Slide 33 text

ମ੍ ੲ 33

Slide 34

Slide 34 text

ࢀߟจݙY

Slide 35

Slide 35 text

ϕεϓϥ $BTFTFOTJUJWF Ϧιʔε΁ͷΞΫηείϯτϩʔϧ λά؅ཧͷࣗಈԽ λά͸গͳ͍ΑΓɺଟ͍ํ͕ϕλʔ ओʹλάΧςΰϦΛࢀর "845BHHJOH4USBUFHJFT 35 IUUQTEBXTTUBUJDDPNBXTBOTXFST"84@5BHHJOH@4USBUFHJFTQEG

Slide 36

Slide 36 text

5BHHJOH#FTU1SBDUJDFT "845BHHJOH4USBUFHJFTΛΑ ΓৄࡉԽ IUUQTEPDTBXTBNB[PODPNXIJUFQBQFSTMBUFTUUBHHJOHCFTUQSBDUJDFTJOUSPEVDUJPOUBHHJOHVTFDBTFTIUNM

Slide 37

Slide 37 text

Ϧετ Ϧετ Ϧετ Ϧετͷڧௐจࣈ Ϧετ 37 ͦΜͳʹλάͷ஋ʹͭΊ͜·ΜͰ΋Α͘ͳ͍ʜ

Slide 38

Slide 38 text

౰ࣾಠࣗΧελϚΠζᶃ 38 ݴͬͯΔ͜ͱ͕ҧ͏ͷͰɺ ʮେ͸খΛ݉ͶΔʯͱ͍͏͜ͱͰ ޙ͔Βม͑Δ͜ͱ্౳Ͱ͚ͭ·͘Δ͜ͱʹͨ͠ɻ λάมߋͰ͋Ε͹Өڹ͸ͳ͘ɼ ͔ͭɺݱࡏͷ༧࣮؅ཧͰ͸ͦ͜·ͰλάΛ׆༻ͯ͠ͳ͍ͨΊ

Slide 39

Slide 39 text

5BHHJOH#FTU1SBDUJDFT "845BHHJOH4USBUFHJFTΛΑ ΓৄࡉԽ IUUQTEPDTBXTBNB[PODPNXIJUFQBQFSTMBUFTUUBHHJOHCFTUQSBDUJDFTJOUSPEVDUJPOUBHHJOHVTFDBTFTIUNM ϏϛϣʔʹݴͬͯΔ͜ͱ͕ҧ͏ͷͰ 5BHHJOH#FTU1SBDUJDFTͷߟ͑ํΛجʹɺ 5BHHJOH4USBUFHJFTͷ࣮૷ํ๏ΛϝΠϯʹ࣮૷

Slide 40

Slide 40 text

λά໋໊نଇέόϒέʔεεωʔΫέʔε ΠϯϕϯτϦͬͯ%#ͩ͠ɺ͡Ό͋εωʔΫέʔεͩΑͶ 5FSSBGPSNͷϕεϓϥ΋Ξϯείͩ͠ɻ Ϧιʔε໊نଇ \FOWJSPONFOU^\TFSWJDF@JE^\Ϧιʔεಛ༗ͷ஋^ 4΍"-#ʹ͍ͭͯ͸OBNFλάͷΑ͏ͳޠ۟ؒΛ@ͳܗࣜͩ ͱͰ͖ͳ͍ͷͰɺͰͭͳ͛Δɻ ౰ࣾಠࣗΧελϚΠζᶄ 40 IUUQTXXXUFSSBGPSNCFTUQSBDUJDFTDPNOBNJOH

Slide 41

Slide 41 text

౰ࣾಠࣗΧελϚΠζᶅ 41 λά؅ཧΛ ड͚࣋ͭ

Slide 42

Slide 42 text

౰ࣾಠࣗΧελϚΠζᶆ

Slide 43

Slide 43 text

43 λά໊ ΧςΰϦ ඞਢ ྫ name Ϧιʔε໊ ○ ${service_id}.${environment}.${service_role}.$ {name} service_id ΞϓϦɾαʔϏεID ○ dx service_role αʔϏε಺ͷ໾ׂ ○ web, db, log_storage cluster ecs Ϋϥελʔͱ͔ environment ؀ڥ ○ dev, stg, prd version owner ੹೚ઌ ○ cost_center ○ xxx, yyy, layerx (ސ٬໊) project ϓϩδΣΫτ໊ ○ customer ಛఆͷ͓٬༷޲͚༻ Τϯϓϥϓϥϯʹ͸͓٬༷ઐ༻αʔόΛఏڙ ͠·͢...తͳͱ͖ con fi dentiality ػີ౓߹͍ ○ managed_by ͲͷIaC͔ ○ manual(σϑΥϧτ), terraform, cfn compliance ن੍ɾίϯϓϥ PII, [pii, iso27002]

Slide 44

Slide 44 text

$PNNFSDJBMEBUBDMBTTJ fi DBUJPO 4FOTJUJWF $PO fi EFOUJBM 1SJWBUF 1VCMJD IUUQTEPDTNJDSPTPGUDPNKBKQ TFDVSJUZVQEBUFT QMBOOJOHBOEJNQMFNFOUBUJPOHVJEF $PO fi EFOUJBMJUZʹؔ͢Δิ଍ 44

Slide 45

Slide 45 text

5BH7FS 45

Slide 46

Slide 46 text

ࣄۀ෦੍΁ Ӭଓతͳ৘ใࢿ࢈͕ൃੜͨ͠ Πϯϑϥత੔උΛ͢Δ̎ਓ͸ࣄۀ෦ʹ೿ݣ΁ 5BHWFS 46

Slide 47

Slide 47 text

ମ੍ /PX 47

Slide 48

Slide 48 text

ڞ༗ձ 48

Slide 49

Slide 49 text

DPTU@DFOUFSͷ஋ʹ֤ࣄۀ෦͕ೖΔΑ͏ʹ OBNFλάΛഇࢭ λά໊ MBZFSYλά໊ ͷQSF fi YΛഇࢭ EJGGGSPNWFS 49

Slide 50

Slide 50 text

5BH7FS 50

Slide 51

Slide 51 text

5FSSBGPSNQSPWJEFSW $50ަ୅ *4.4औಘ։࢝ 5BHW 51

Slide 52

Slide 52 text

ମ੍ /PX 52

Slide 53

Slide 53 text

ڞ༗ձ 53

Slide 54

Slide 54 text

5FSSBGPSN"841SPWJEFSWͷϦϦʔε 54 provider "aws" { region = var.regio n default_tags { tags = var.default_tags } } resource "aws_kms_key" "cloudtrail" { description = "key to encrypt/decrypt cloudtrail " tags = { service_role = var.service_role.km s } } resource "aws_kms_key" "cloudtrail" { description = "key to encrypt/decrypt cloudtrail " tags = { environment = pr d service_role = var.service_role.km s project = guardrai l service_id = guardrai l cost_center = layer X Owner = sr e managed_by = terrafor m github_repository - guardrai l } } EFGBVMU@UBHT͍͜͞ʔ

Slide 55

Slide 55 text

HJUIVC@SFQPTJUPSZ௥Ճ ৘ใ۠෼ͷݟ௚͠ લTFOTJUJWF DPO fi EFOUJBM QSJWBUF QSPQSJFUBSZ QVCMJD ޙDPO fi EFOUJBM QSJWBUF QVCMJD TFSWJDF@SPMFΛ࣮ଶͰ͋ΔϦιʔεͷཻ౓ʹ͋ΘͤΔ ྫTFDSFUTNBOBHFSWBVMU EJGGGSPNWFS 55

Slide 56

Slide 56 text

ࠓޙ 56

Slide 57

Slide 57 text

λά౷੍ λάFWFSZXIFSF λά؅ཧͷ؅ཧ λά΁ͷΞΫηε؅ཧΛ៛ີԽ λάΛ࢖ͬͨ"#"$ʁ ਖ਼௚͋·ΓϝϦοτΛײͯ͡ͳ͍ʜ 5BHW GVUVSF 57

Slide 58

Slide 58 text

࠾༻ͯ͠·͢ ݸਓΧδϡΞϧ໘ஊ͔ΒͰ ΋0, 58

Slide 59

Slide 59 text

59 ࠾༻͸ͪ͜Β IUUQTIFSQDBSFFSTWMBZFSY ΧδϡΞϧ໘ஊ͸ͪ͜Β IUUQTNFFUZOFUBSUJDMFTUXXKK