AWS CDKでコンテナイメージスキャンを行う〜ECRとその他の方法〜 / cdk-container-image-scan

by k.goto

Slide 1

Slide 1 text

LHPUP าͷςοΫ "84$%,Ͱ ίϯςφΠϝʔδεΩϟϯΛߦ͏ ʙ&$3ͱͦͷଞͷํ๏ʙ +"846(ίϯςφࢧ෦º+"846(ઍ༿ࢧ෦ ࠓ஌Γ͍ͨίϯςφηΩϡϦςΟ

Slide 2

Slide 2 text

ࣗݾ঺հ LHPUP w ςοΫϦʔυɾϥʔϝϯ޷͖ w "84$PNNVOJUZ#VJMEFS %FW5PPMT w าͷςοΫ ٕज़ϒϩά w ࣗ࡞"84πʔϧͷ044։ൃ w "84$%,ίϯτϦϏϡʔλʔ w 9 5XJUUFS !@TUFQ@UFDI ‣ LHPUP าͷςοΫ

Slide 3

Slide 3 text

͜ͷ೥ͷొஃৼΓฦΓ ˙"84%FW%BZ+BQBO ‣ αʔόʔϨεͳϝʔϧૹ৴γεςϜΛ"84$%,Ͱߏங͠਺ઍਓن໛ͷ؀ڥͰӡ༻ͨ͠࿩ ˙+"846($%,ࢧ෦ ‣ $%,Ͱ7BMJEBUJPO͢Δຊ౰ͷํ๏ ˙"QQ3VOOFS/JHIU "844UBSUVQ.FFUVQ ‣ "QQ3VOOFSͰ"QQͰͳ͍΋ͷΛ3VO͢Δ ˙"84$%,$POGFSFODF+BQBO ‣ "84$%,ͱ;PEΛ׆༻ͨ͠όϦσʔγϣϯύλʔϯू ˙+"846(43&ࢧ෦ ‣ $MPVE8BUDIෳ߹ΞϥʔϜͰ&-#ͷ99Λ͍͍ײ͡ʹݕ஌͠Α͏ͱͨ͠Β͏·͍͔͘ͳ͔ͬͨ࿩ ˙"84%FW%BZ5PLZP ‣ "84$%,ͰֶͿ(P'σβΠϯύλʔϯʙ*B$ʹ΋ίʔυઃܭʙ ˙+"846($%,ࢧ෦ ‣ "84$%,Ͱ࢖͏(P'σβΠϯύλʔϯʙ࣮ࡍͲ͏ͳͷʁʙ ˙4UBSUVQ%BZ ‣ ελʔτΞοϓͰͦ͜$%,͕׆͖ͨʙੜ࢈ੑΛ޲্Ͱ͖ͨͭͷཧ༝ʙ ˙+"846($%,ࢧ෦ ‣ $MPVE'PSNBUJPOϢʔβʔ͕$%,ʹೖ໳ͯ͠Έͯࢥͬͨ͜ͱ ύωϧσΟεΧογϣϯ ˙+"846(ίϯςφࢧ෦º+"846(ઍ༿ࢧ෦ ‣ "84$%,ͰίϯςφΠϝʔδεΩϟϯΛߦ͏ʙ&$3ͱͦͷଞͷํ๏ʙ $%,ωλ શొஃɿຊ $%,ωλɿຊ $%,ͷେϑΝϯͰ͢ʂʂʂ $%,ͷܒ໤׆ಈத

Slide 4

Slide 4 text

ίϯςφηΩϡϦςΟ

Slide 5

Slide 5 text

AWS CDKͰίϯςφΠϝʔδεΩϟϯΛߦ͏

Slide 6

Slide 6 text

"84$%,Ͱίϯςφʁ

Slide 7

Slide 7 text

"84$%, º ίϯςφΠϝʔδϏϧυ

Slide 8

Slide 8 text

"84$%,ºίϯςφΠϝʔδϏϧυ w "84$%,Ͱ͸؆୯ʹίϯςφΠϝʔδͷϏϧυ͕Ͱ͖Δ ‣ *B$ϨΠϠʔ *B$ίʔυ಺ ͰͷΠϝʔδϏϧυɾΠϝʔδϓογϡ͕Մೳ $%,Ҏ֎ͷ*B$πʔϧͰ͸*B$ͷ؅ཧ֎Ͱ΍Δ͜ͱ͕ଟ͍ ϦϙδτϦ࡞੒ ΠϝʔδϏϧυ Πϝʔδϓογϡ

Slide 9

Slide 9 text

"84$%,ºίϯςφΠϝʔδεΩϟϯʁ w "84$%,͚ͩͰΠϝʔδͷϏϧυ͔Βϓογϡ·Ͱग़དྷͯศརʂ w Ͱ΋ɺ"84$%,಺ͰϏϧυͨ͠ΠϝʔδͷεΩϟϯ͸Ͳ͏΍ͬͯʁ ‣ ࣮͸ɾɾɾ

Slide 10

Slide 10 text

"84$%,ºίϯςφΠϝʔδεΩϟϯʁ w "84$%,͚ͩͰΠϝʔδͷϏϧυ͔Βϓογϡ·Ͱग़དྷͯศརʂ w Ͱ΋ɺ"84$%,಺ͰϏϧυͨ͠ΠϝʔδͷεΩϟϯ͸Ͳ͏΍ͬͯʁ ‣ ࣮͸ɾɾɾ ཱ֬͞Ε͍ͯͳ͍

Slide 11

Slide 11 text

"84$%,ºίϯςφΠϝʔδεΩϟϯʁ w "84$%,͚ͩͰΠϝʔδͷϏϧυ͔Βϓογϡ·Ͱग़དྷͯศརʂ w Ͱ΋ɺ"84$%,಺ͰϏϧυͨ͠ΠϝʔδͷεΩϟϯ͸Ͳ͏΍ͬͯʁ ‣ ࣮͸ɾɾɾ ཱ֬͞Ε͍ͯͳ͍ ͱ͍͏͔ ͋·Γฉ͔ͳ͍ Ͱ͢ΑͶʁ

Slide 12

Slide 12 text

ҰൠతͳίϯςφΠϝʔδͷεΩϟϯํ๏ w Ұൠతʹ͸Ͳ͏΍ͬͯΠϝʔδεΩϟϯ͢Δͷʁ πʔϧ ‣ &$3 ϕʔγοΫεΩϟϯ ֦ுεΩϟϯ XJUI"NB[PO*OTQFDUPS ‣ αʔυύʔςΟπʔϧ 5SJWZ %PDLMF FUDʜ

Slide 13

Slide 13 text

ҰൠతͳίϯςφΠϝʔδͷεΩϟϯํ๏ w Ұൠతʹ͸Ͳ͏΍ͬͯΠϝʔδεΩϟϯ͢Δͷʁ ϑϩʔ ‣ Ұఆִؒ ఆظ ࣮ߦ ೔ʹճ ‣ ඇಉظ Πϕϯτ ࣮ߦ ΠϝʔδͷϓογϡΛτϦΨʔ ‣ ಉظ࣮ߦ $*$%ύΠϓϥΠϯͷεςοϓ

Slide 14

Slide 14 text

ҰൠతͳίϯςφΠϝʔδͷεΩϟϯํ๏ w ಉظ࣮ߦ $*$%ύΠϓϥΠϯͷεςοϓ ͷྫ ΠϝʔδεΩϟϯ ΠϝʔδϏϧυ Πϝʔδϓογϡ

Slide 15

Slide 15 text

ҰൠతͳίϯςφΠϝʔδͷεΩϟϯํ๏ w ಉظ࣮ߦ $*$%ύΠϓϥΠϯͷεςοϓ ͷྫ ΠϝʔδεΩϟϯ ΠϝʔδϏϧυ Πϝʔδϓογϡ ੬ऑੑݕग़

Slide 16

Slide 16 text

ҰൠతͳίϯςφΠϝʔδͷεΩϟϯํ๏ w ಉظ࣮ߦ $*$%ύΠϓϥΠϯͷεςοϓ ͷྫ ΠϝʔδεΩϟϯ ΠϝʔδϏϧυ Πϝʔδϓογϡ ͤ͞ͳ͍ ੬ऑੑݕग़

Slide 17

Slide 17 text

ҰൠతͳίϯςφΠϝʔδͷεΩϟϯํ๏ w ಉظ࣮ߦ $*$%ύΠϓϥΠϯͷεςοϓ ͷྫ ΠϝʔδεΩϟϯ ΠϝʔδϏϧυ Πϝʔδϓογϡ ͤ͞ͳ͍ ੬ऑੑݕग़ ϓογϡΛτϦΨʔʹ σϓϩΠ͢Δέʔε΋҆৺ σϓϩΠલʹऴྃ

Slide 18

Slide 18 text

͋ΒͨΊͯ

Slide 19

Slide 19 text

"84$%,Ͱ ίϯςφΠϝʔδεΩϟϯͬͯ Ͳ͏΍Δͷʁ

Slide 20

Slide 20 text

ͱΓ͋͑ͣ

Slide 21

Slide 21 text

&$3Ͱ ΍ͬͯΈ·͢

Slide 22

Slide 22 text

"84$%,º&$3Πϝʔδ ϓογϡ εΩϟϯ w 3FQPTJUPSZJNBHF4DBO0O1VTI

Slide 23

Slide 23 text

"84$%,º&$3Πϝʔδ ϓογϡ εΩϟϯ w ੬ऑੑݕग़࣌ͷಉظతରԠʹ͸࢖͑ͳ͍ ϓογϡ͕τϦΨʔ ੬ऑੑ͕͋ͬͯ΋ ϓογϡ͸ࢭΊΒΕͳ͍ʂ ࣮ߦ͸ඇಉظ σϓϩΠ΋ࢭ·Βͳ͍ʂ Ϗϧυ ϓογϡ

Slide 24

Slide 24 text

͡Ό͋ͦͷଞͷํ๏͸ʁ

Slide 25

Slide 25 text

"84$%,ºͦͷଞͷΠϝʔδεΩϟϯ w αʔυύʔςΟπʔϧʁ ‣ 5SJWZ ‣ %PDLMF ‣ FUDʜ w ͔͠͠ʜ ‣ $%,͸"84༻πʔϧͳͷͰ"84Ϧιʔεͷ΋ͷ͔͠ແ͍ جຊతʹ͸ ྫ֎͋Γ

Slide 26

Slide 26 text

ͦͷଞͷํ๏͸

Slide 27

Slide 27 text

ແ͍

Slide 28

Slide 28 text

͡Ό͋

Slide 29

Slide 29 text

Ͳ͏͢Δʁ

Slide 30

Slide 30 text

࡞Ε͹͍͍͡ΌΜ

Slide 31

Slide 31 text

$POTUSVDU)VC w $%,ίϯετϥΫτϥΠϒϥϦू IUUQTDPOTUSVDUTEFW ‣ Ҏ্ͷΦʔϓϯιʔεͷ$%,ίϯετϥΫτ͕ެ։ ‣ ݸਓͰ࡞ͬͨࣗ࡞ίϯετϥΫτͷެ։΋Մೳ 044ͱͯ͠ (JU)VCʹύϒϦοΫϦϙδτϦΛ࡞੒ $%,ίϯετϥΫτΛ࣮૷ OQNʹύϒϦογϡ $%,༻λά෇͚Λͯ͠ ਺෼ʙ਺े෼ܦͭͱ$POTUSVDU)VCʹࣗಈͰొ࿥͞ΕΔ ίϯετϥΫτ $POTUSVDU $%,ಛ༗ͷࣗ༝ͳཻ౓ͷϦιʔεू߹ ίϯϙʔωϯτ ɻ "84ఏڙͷ΋ͷ͚ͩͰͳ͘Ϣʔβ΋ࣗ༝ʹ૊ΊΔɻ

Slide 32

Slide 32 text

࡞ͬͯΈ·ͨ͠

Slide 33

Slide 33 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ˞IUUQTDPOTUSVDUTEFWQBDLBHFTJNBHFTDBOOFSXJUIUSJWZ ˞IUUQTDPOTUSVDUTEFWQBDLBHFTJNBHFTDBOOFSXJUIEPDLMF ᶃ JNBHFTDBOOFSXJUIUSJWZ ˞ ᶄ JNBHFTDBOOFSXJUIEPDLMF ˞ ˞ͱΓ͋͑ͣ5ZQF4DSJQUݶఆͰ࢖༻Մೳ ࠓޙ޿͛ͯ΋͍͍͔ͳͱ ˞ ˞

Slide 34

Slide 34 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ w ಛ௃ ᶃ $%,ϨΠϠʔ $%,ίʔυ ಺ͰɺίϯςφΠϝʔδεΩϟϯΛߦ͏ ʮ5SJWZʯɾʮ%PDLMFʯΛ$%,Ͱ࢖͑ΔΑ͏ʹͳͬͨʂ $%,͚ͩͰϏϧυɾϓογϡʹՃ͑ͯεΩϟϯ·Ͱߦ͑ΔΑ͏ʹͳͬͨʂ ᶄ σϓϩΠաఔͰϏϧυͨ͠ΠϝʔδΛ࢖͍ճͨ͢ΊɺແବͳϏϧυ͕ൃੜ͠ͳ͍ ʮεΩϟϯͷͨΊʹϏϧυ͠ɺσϓϩΠͷͨΊʹ΋ϏϧυʯͳͲΛ͠ͳ͍ ᶅ ੬ऑੑݕ஌ͷࡍɺ&$3΁ͷΠϝʔδͷϓογϡ΍$%,σϓϩΠΛࢭΊΒΕΔ

Slide 35

Slide 35 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ w ࢓૊Έ ‣ $%, $MPVE'PSNBUJPO ʹ͸ʮΧελϜϦιʔεʯͱ͍͏ಛघͳϦιʔε͕͋Δ $%,͕ରԠ͍ͯ͠ͳ͍ॲཧΛ-BNCEBͰࣗલͰ࣮૷Ͱ͖Δػೳ 4/4Ͱ΋Մ ‣ ͜ͷΧελϜϦιʔε-BNCEBͰʮ5SJWZʯʮ%PDLMFʯΛୟ࣮͘૷Λ͢Δ ‣ ͜ΕΛ$POTUSVDUԽ͠ɺ$%,ίʔυͰσϓϩΠϑϩʔʹ૊ΈࠐΊΔΑ͏ʹ

Slide 36

Slide 36 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ᶃJNBHFTDBOOFSXJUIUSJWZ

Slide 37

Slide 37 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ᶃJNBHFTDBOOFSXJUIUSJWZ Ϗϧυ εΩϟϯ ϓογϡ

Slide 38

Slide 38 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ᶃJNBHFTDBOOFSXJUIUSJWZ ੬ऑੑݕग़࣌͸Τϥʔʹͯ͠ ϓογϡͤ͞ͳ͍ʂ σϓϩΠ΋Τϥʔऴྃ Ϗϧυ εΩϟϯ ϓογϡ

Slide 39

Slide 39 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ᶃJNBHFTDBOOFSXJUIUSJWZ Φϓγϣϯ΋৭ʑ͋Γʂ ࢦఆͳ͠Ͱ΋͍͍ײ͡ʹಈ͖·͢ʂ

Slide 40

Slide 40 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ᶃJNBHFTDBOOFSXJUIUSJWZ ΤσΟλ্Ͱͷೖྗ஋બ୒ɾೖྗิ׬ɾEPDग़ྗ ͳͲʹΑΓੜͷπʔϧΑΓศར͔΋ʂʁ

Slide 41

Slide 41 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ᶄJNBHFTDBOOFSXJUIEPDLMF

Slide 42

Slide 42 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ᶄJNBHFTDBOOFSXJUIEPDLMF *HOPSFϧʔϧ͕ࢦఆՄೳʂ Ϗϧυ εΩϟϯ ϓογϡ

Slide 43

Slide 43 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ ᶄJNBHFTDBOOFSXJUIEPDLMF *HOPSFϧʔϧ͕ࢦఆՄೳʂ Ϗϧυ εΩϟϯ ϓογϡ ੬ऑੑݕग़࣌͸Τϥʔʹͯ͠ ϓογϡͤ͞ͳ͍ʂ σϓϩΠ΋Τϥʔऴྃ

Slide 44

Slide 44 text

ࣗ࡞ίϯετϥΫτ "84$%,༻ w 5SJWZͷެࣜυΩϡϝϯτͷΤίγεςϜϖʔδʹࡌͤͯ΋Β͍·ͨ͠ʂ

Slide 45

Slide 45 text

࠶ܝ ࣗ࡞ίϯετϥΫτ "84$%,༻ ˞IUUQTDPOTUSVDUTEFWQBDLBHFTJNBHFTDBOOFSXJUIUSJWZ ˞IUUQTDPOTUSVDUTEFWQBDLBHFTJNBHFTDBOOFSXJUIEPDLMF ᶃ JNBHFTDBOOFSXJUIUSJWZ ˞ ᶄ JNBHFTDBOOFSXJUIEPDLMF ˞ ˞ͱΓ͋͑ͣ5ZQF4DSJQUݶఆͰ࢖༻Մೳ ࠓޙ޿͛ͯ΋͍͍͔ͳͱ ˞ ˞

Slide 46

Slide 46 text

$%,ͰͷΠϝʔδεΩϟϯํ๏͸ ཱ֬͞Ε͍ͯͳ͍ʁ

Slide 47

Slide 47 text

ཱ֬͞Ε·ͨ͠ʂ

Slide 48

Slide 48 text

·ͱΊ w "84$%,Ͱ ಉظతͳ ίϯςφΠϝʔδεΩϟϯͷํ๏͸ཱ֬͞Ε͍ͯͳ͍ ‣ Ϗϧυɾϓογϡࣗମ͸؆୯ ‣ &$3ͰͷඇಉظͳϓογϡεΩϟϯ͸͋Δ w "84$%,༻ͷࣗ࡞ίϯετϥΫτΛ࡞ͬͨ 5SJWZ൛ɾ%PDLMF൛ ‣ 044ͱͯ͠$POTUSVDU)VCʹެ։ͨ͠ w $%,ͰͷίϯςφΠϝʔδεΩϟϯํ๏ཱ͕֬͞Εͨʂ ʁ ‣ Α͔ͬͨΒ࢖ͬͯΈ͍ͯͩ͘͞

Slide 49

Slide 49 text

ࢀߟɿαϯϓϧίʔυ (JU)VC w "84$%,Ͱ ‣ JNBHFTDBOOFSXJUIUSJWZ ‣ JNBHFTDBOOFSXJUIEPDLMF w Λ࢖ͬͨαϯϓϧίʔυΛ(JU)VCʹࡌ͍ͤͯΔͷͰΑ͔ͬͨΒͥͻ IUUQTHJUIVCDPNHPUPLDELJNBHFTDBOUFTU

Slide 50

Slide 50 text

એ఻ɿࣗ࡞"84πʔϧ044 ʲEFMTUBDLʳ"84$MPVE'PSNBUJPOελοΫڧ੍࡟আπʔϧ ‣ IUUQTHPUPLIBUFOBCMPHDPNFOUSZEFMTUBDL ʲDMTʳ4όέοτߴ଎࡟আɾۭʹ͢Δπʔϧ όʔδϣχϯάରԠ ‣ IUUQTHPUPLIBUFOBCMPHDPNFOUSZDMT ʲMBNWFSʳ-BNCEBϥϯλΠϜόʔδϣϯݕࡧπʔϧ Ϧʔδϣϯԣஅ ‣ IUUQTHPUPLIBUFOBCMPHDPNFOUSZMBNWFS

Slide 51

Slide 51 text

એ఻ɿDMTεϖΠϯޠهࣄ "84&TQBÑPM w "84&TQBÑPMͷํ͕ʮDMT 4࡟আπʔϧ ʯͷεϖΠϯޠهࣄΛॻ͍ͯ͘Ε ·ͨ͠ʂ ‣ ͜ΕͰ೔ຊޠɾӳޠɾεϖΠϯޠͷ͔ࠃޠͷهࣄ͕ग़དྷ·ͨ͠ʂ IUUQTEFWUPBXTFTQBOPMDMTCVTRVFEBZFMJNJOBDJPONBTJWBEFCVDLFUTTHC

Slide 52

Slide 52 text

એ఻ɿDMTͷొஃ͠·͢ʂ w 4UPSBHF+"84ͷه೦͢΂͖ୈճʹ͓ݺͼ௖͖ɺDMTͷηογϣϯΛͤ͞ ͯ௖͘͜ͱʹͳΓ·ͨ͠ʂ ‣ ਫ 4UPSBHF+"84

Slide 53

Slide 53 text

5IBOL:PV LHPUP าͷςοΫ