立ち上げ期のSaaSを支えるAWSの技術 / AWS technology supporting SaaS in its start-up phase

Slide 1

Slide 1 text

Slide 2

Slide 2 text

Slide 3

Slide 3 text

2 Copyright© System Integrator Corp. All rights reserved. System Integrator 株式会社システムインテグレータ • 埼玉県さいたま市にある会社 • 東証スタンダード • 創業28年目 • 事業内容 • 自社パッケージソフト(EC、ERPなど） • 企画、開発 • カスタマイズ • 自社WEBサービス • 開発、運営 • 技術スタック • AWS、Azure • Java、C#、Python、Rubyなど

Slide 4

Slide 4 text

Slide 5

Slide 5 text

Slide 6

Slide 6 text

Slide 7

Slide 7 text

Slide 8

Slide 8 text

Slide 9

Slide 9 text

Slide 10

Slide 10 text

Slide 11

Slide 11 text

Slide 12

Slide 12 text

Slide 13

Slide 13 text

Slide 14

Slide 14 text

Slide 15

Slide 15 text

Slide 16

Slide 16 text

15 Copyright© System Integrator Corp. All rights reserved. System Integrator プロダクト関連ビジョン策定横山プロダクトの方向づけ横山顧客課題の発見横山課題の仮説検証横山ユーザーインタビュー横山ウェビナー登壇横山お客様サポート横山プロジェクト管理ロードマップ作成横山プロダクトバックログ整理横山スプリントプランニング横山＋α インフラ AWS設計横山 AWS実装横山リリース作業横山＋α 運用監視横山＋α

Slide 17

Slide 17 text

Slide 18

Slide 18 text

Slide 19

Slide 19 text

Slide 20

Slide 20 text

Slide 21

Slide 21 text

Slide 22

Slide 22 text

Slide 23

Slide 23 text

22 Copyright© System Integrator Corp. All rights reserved. System Integrator # 他のスタックからパラメータ参照するためにOutputsで定義する Outputs: VPC: Value: !Ref VPC Export: Name: !Sub "${ENV}-VPC" VPCCIDR: Value: !Ref VPCCIDR Export: Name: !Sub "${ENV}-VPCCIDR" PublicSubnet1a: Value: !Ref PublicSubnet1a Export: Name: !Sub "${ENV}-PublicSubnet1a" CloudFormationのパラメータ化、スタック化

Slide 24

Slide 24 text

Slide 25

Slide 25 text

Slide 26

Slide 26 text

25 Copyright© System Integrator Corp. All rights reserved. System Integrator Private subnet VPC Availability Zone a Availability Zone c Public subnet ACM Route 53 VPN gateway ALB AWS Cloud RDS(Primary) S3 Fargate / ECS Cluster Service(Frontend) Node.js Task ECR Endpoints Customer gateway VPN connection 開発チーム当社 Internet gateway Internet Application Image Push Push PrivateLink RDS(Standby) ElastiCache Redis ElastiCache Redis(Standby) Service(Backend) Rails Task

Slide 27

Slide 27 text

Slide 28

Slide 28 text

Slide 29

Slide 29 text

28 Copyright© System Integrator Corp. All rights reserved. System Integrator on: push: branches: - develop jobs: backend-deploy: runs-on: ubuntu-latest env: BACKEND_IMAGE_NAME: ${{ secrets.STAGING_BACKEND_ECR_REPOSITORY }} steps: - name: Checkout - name: Set up Docker Buildx - name: Configure AWS credentials (Staging) uses: aws-actions/configure-aws-credentials@v1 with: aws-access-key-id: ${{ secrets.STAGING_AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.STAGING_AWS_SECRET_ACCESS_KEY }} aws-region: ${{ secrets.STAGING_AWS_REGION }} - name: Login to Amazon ECR (Staging) id: login-ecr-staging uses: aws-actions/amazon-ecr-login@v1 - name: Build and push Backend image (Staging) uses: docker/build-push-action@v3 with: push: true context: ./backend tags: ${{ steps.login-ecr-staging.outputs.registry }}/${{ env.BACKEND_IMAGE_NAME }}:${{ github.sha }} GitHub Actionsによる ECR への自動プッシュ

Slide 30

Slide 30 text

Slide 31

Slide 31 text

30 Copyright© System Integrator Corp. All rights reserved. System Integrator steps: # 前ページからの続き - name: Download task definition run: aws ecs describe-task-definition --task-definition dev-idea-garden-backend --query taskDefinition > task-definition.json - name: Fill in the new image ID in the Amazon ECS task definition id: task-def uses: aws-actions/amazon-ecs-render-task-definition@v1 with: task-definition: task-definition.json container-name: dev-idea-garden-container-backend image: ${{ steps.login-ecr-staging.outputs.registry }}/${{ env.BACKEND_IMAGE_NAME }}:${{ github.sha }} - name: Deploy Amazon ECS task definition uses: aws-actions/amazon-ecs-deploy-task-definition@v1 with: task-definition: ${{ steps.task-def.outputs.task-definition }} service: dev-idea-garden-service-backend cluster: dev-idea-garden-cluster GitHub Actionsによる ECR への自動プッシュ→ECSデプロイ

Slide 32

Slide 32 text

Slide 33

Slide 33 text

Slide 34

Slide 34 text

Slide 35

Slide 35 text

Slide 36

Slide 36 text

Slide 37

Slide 37 text

Slide 38

Slide 38 text

Slide 39

Slide 39 text

Slide 40

Slide 40 text

Slide 41

Slide 41 text

Slide 42

Slide 42 text

Slide 43

Slide 43 text

Slide 44

Slide 44 text

43 Copyright© System Integrator Corp. All rights reserved. System Integrator VPC Availability Zone a Availability Zone c Public subnet Private subnet ACM Route 53 VPN gateway AWS Cloud （Entry App） RDS Customer gateway VPN connection 開発チーム当社 Internet gateway Internet ElastiCache Redis Dev Amplify/ SSR SES Email Function URLs AWS Cloud（IDEA GARDEN） Private subnet VPC RDS ユーザー情報移行Script ユーザー情報移行Script API Gateway