IAM Roles for Service Accounts 〜やさしいIRSA入門〜

Slide 1

Slide 1 text

͋ͳͨͷ&,4Ϋϥελʔɺ ৮ͬͪΌμϝͳ"84Ϧιʔε΁ͷ ΞΫηε੍ޚͪΌΜͱͰ͖ͯ·͔͢ʁ ʙ ΍͍͞͠*34"ೖ໳ ʙ ΈͷΔΜ !NJOPSVO

Slide 2

Slide 2 text

XIPBNJ 御⽥稔 !NJOPSVO ,%%*גࣜձࣾ ˍ ,%%*ΞδϟΠϧ։ൃηϯλʔגࣜձࣾʢ,"(ʣ ࡢ೥౓·Ͱ৘γεͰࢮ͵΄Ͳ&,4Ϋϥελʔ؅ཧͯ͠·ͨ͠ɻ ࠷ۙ͸"*धཁͰ"[VSFͰͷ։ൃ΋૿͖͑ͯͯ·͢ɻ +"846(43&ࢧ෦ӡӦ +"84%":4࣮ߦҕһ • "84$PNNVOJUZ#VJMEFS • ,%%*$MPVE4".63"* • ,%%*$MPVE"NCBTTBEPST

Slide 3

Slide 3 text

"84ϢʔβʔͷΈͳ͞Μɺ&,4͸޷͖Ͱ͔͢ʁ

Slide 4

Slide 4 text

&,4࢖ͬͯΔͱɺ1PE͔Βଞͷ"84Ϧιʔεʹ ΞΫηεͨ͘͠ͳΔ͜ͱ͋Γ·͢ΑͶʁ &,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ

Slide 5

Slide 5 text

&,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ ͋Εɺ͜͜ͷݖݶऔಘͲ͏͠Α͏ʜʁ 🤔

Slide 6

Slide 6 text

&,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ ͋Εɺ͜͜ͷݖݶऔಘͲ͏͠Α͏ʜʁ 🤔 "84Ϧιʔεͷݖݶऔಘͱ ͍͑͹ *".ϩʔϧʂ

Slide 7

Slide 7 text

*".ϩʔϧΛී௨ʹ෇͚ΒΕΔͷ͸ "84Ϧιʔε ʹ &,4ϊʔυʢ&$΍'BSHBUFʣ &,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ &,4ϊʔυ

Slide 8

Slide 8 text

ϊʔυʹͦͷ··*".ϩʔϧͰ ݖݶ෇༩ͪ͠ΌͬͯΔਓɺ͍·ͤΜ͔ʜʁ &,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ ݖݶ෇༩ʂ

Slide 9

Slide 9 text

Կ͕໰୊ͳͷ͔ʁ

Slide 10

Slide 10 text

௨ৗɺ&,4Ϋϥελʔ಺ʹ͸ ෳ਺༻్ͷ1PE͕Քಇ͍ͯ͠Δ͜ͱ΋ଟ͍Ͱ͢ &,4Ϋϥελʔ ஍ຯΞϓϦ ଞͷ"84Ϧιʔε େਓؾΞϓϦ

Slide 11

Slide 11 text

ଞͷ"84ϦιʔεʹϚϧൿ৘ใΛऔΓʹ͍͘ͷ͕ ஍ຯΞϓϦ͚ͩͩͬͨͱͯ͠΋ʜ &,4Ϋϥελʔ ஍ຯΞϓϦ ଞͷ"84Ϧιʔε େਓؾΞϓϦ THFU0CKFDU

Slide 12

Slide 12 text

౔୆ͷϊʔυࣗମʹ*".ϩʔϧ͕෇͍͍ͯΔͱ ྆ํͷ1PEͱ΋ʹΞΫηεݖݶ͕෇͍ͯ͠·͏ &,4Ϋϥελʔ ஍ຯΞϓϦ ଞͷ"84Ϧιʔε େਓؾΞϓϦ

Slide 13

Slide 13 text

ͭ·Γɺຊ౰͸ؔ܎ͳ͍ผͷΞϓϦ͕΍΂ౕ͑ʹ ৐ͬऔΒΕ͚ͨͩͰϚϧൿ৘ใ΋࿙Ӯͯ͠͠·͏ʜʂ &,4Ϋϥελʔ ஍ຯΞϓϦ ଞͷ"84Ϧιʔε େਓؾΞϓϦ ΍΂ౕ͑

Slide 14

Slide 14 text

͡Ό͋ɺ Ͳ͏͢Ε͹͍͍ͷ͔ʁ

Slide 15

Slide 15 text

安⼼してください IRSAがありますよ

Slide 16

Slide 16 text

*34"ʜʁ

Slide 17

Slide 17 text

*3 ʹ *".3PMFT 4" ʹ 4FSWJDF"DDPVOUT

Slide 18

Slide 18 text

*".3PMFT GPS 4FSWJDF"DDPVOUT

Slide 19

Slide 19 text

*".3PMFTGPS4FSWJDF"DDPVOUT ͭ·Γɺ "84ͷੈքͱ,Tͷੈք ྆ऀͷೝূػߏΛ ϚϦΞʔδϡͤ͞Δػೳʂ

Slide 20

Slide 20 text

*34"ͷ͘͠Έ

Slide 21

Slide 21 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE 1PE͔Β4όέοτΛ৮Γ͍ͨ৔߹

Slide 22

Slide 22 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE 1PE͔Β4όέοτΛ৮Γ͍ͨ৔߹ ʢ೔ຊ͔ΒΞϝϦΧʹ౉ߤ͢Δͱߟ͑ͯΈΑ͏ʣ

Slide 23

Slide 23 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE ·ͣ"84*".্ʹ0*%$ϓϩόΠμʔΛ࡞੒͠·͢ ʢΞϝϦΧʹ೔ຊେ࢖ؗΛݐͯΔʣ 0*%$ϓϩόΠμʔ ൃߦ

Slide 24

Slide 24 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE *".ϩʔϧˍαʔϏεΞΧ΢ϯτΛ࡞੒͠·͢ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ Ξϊςʔγϣϯ ʢ஫ऍʣʹ෇Ճ *".ϩʔϧ ΞΫηεڐՄ ৴པϙϦγʔ Ͱࢦఆ

Slide 25

Slide 25 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE ։ൃऀ͕1PEىಈίϚϯυΛ&,4΁ૹ৴͠·͢ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ *".ϩʔϧ LVCFBQJTFSWFS 1PEىಈʂ ։ൃऀ

Slide 26

Slide 26 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE ͢Δͱ1PE*EFOUJUZ8FCIPPL͕1PEఆٛΛߋ৽͠·͢ ʢύεϙʔτൃߦॴͷΑ͏ͳ΋ͷʣ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ *".ϩʔϧ LVCFBQJTFSWFS ։ൃऀ 1PE*EFOUJUZ8FCIPPL

Slide 27

Slide 27 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE ͦͯ͠LVCFMFU͕4"τʔΫϯΛ1PEʹϚ΢ϯτ͠·͢ ʢύεϙʔτͷΑ͏ͳ΋ͷʣ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ *".ϩʔϧ LVCFBQJTFSWFS ։ൃऀ 1PE*EFOUJUZ8FCIPPL LVCFMFU 4"τʔΫϯ ىಈ࣌ʹϚ΢ϯτ

Slide 28

Slide 28 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE 1PE͸"84ͷ454ʹ"TTVNF3PMFΛཁٻ͠·͢ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ *".ϩʔϧ LVCFBQJTFSWFS ։ൃऀ 1PE*EFOUJUZ8FCIPPL LVCFMFU 4"τʔΫϯ 454 Ұ࣌ೝূΛऔಘ

Slide 29

Slide 29 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE 454͸1PEͷ4"τʔΫϯΛ֬ೝ͠·͢ʢೖࠃ৹ࠪʣ 0*%$ϓϩόΠμʔ͕৴པ͢ΔΫϥελʔ͔ΒͷൃߦͳΒ0, 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ *".ϩʔϧ LVCFBQJTFSWFS ։ൃऀ 1PE*EFOUJUZ8FCIPPL LVCFMFU 4"τʔΫϯ 454

Slide 30

Slide 30 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". LVCFBQJTFSWFS LVCFMFU 1PE*EFOUJUZ8FCIPPL αʔϏεΞΧ΢ϯτ 4"τʔΫϯ 454 0*%$ϓϩόΠμʔ 1PE͕৮Γ͍ͨ "84Ϧιʔε *".ϩʔϧ 1PE ։ൃऀ 1PE͸&,4Ϋϥελʔ͕ೝΊͨਖ਼نͷϦιʔεͩͱ֬ೝ׬ྃʂ ඥ͚ͮΒΕͨ*".ϩʔϧΛແࣄʹҰ࣌ར༻Ͱ͖Δ 🎉 ੖ΕͯΞΫηεʂ

Slide 31

Slide 31 text

ޚୗ͸෼͔ͬͨʂ ͱΓ࣮͋͑ͣػΛݟͤΖ ʢσϞ࣮ԋλΠϜʣ

Slide 32

Slide 32 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". LVCFBQJTFSWFS LVCFMFU 1PE͕৮Γ͍ͨ "84Ϧιʔε QPECFGPSF ։ൃऀ ᶃ ී௨ʹ1PEΛ࡞ͬͯ4΁ΞΫηεͯ͠ΈΔ

Slide 33

Slide 33 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε ᶄ "84*".্ʹ0*%$ϓϩόΠμʔΛ࡞੒͢Δ 0*%$ϓϩόΠμʔ ൃߦ

Slide 34

Slide 34 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε ᶅ *".ϩʔϧˍαʔϏεΞΧ΢ϯτΛ࡞੒͢Δ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ Ξϊςʔγϣϯ ʢ஫ऍʣʹ෇Ճ *".ϩʔϧ ΞΫηεڐՄ ৴པϙϦγʔ Ͱࢦఆ

Slide 35

Slide 35 text

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". LVCFBQJTFSWFS LVCFMFU 1PE*EFOUJUZ8FCIPPL αʔϏεΞΧ΢ϯτ 4"τʔΫϯ 454 0*%$ϓϩόΠμʔ 1PE͕৮Γ͍ͨ "84Ϧιʔε *".ϩʔϧ QPEBGUFS ։ൃऀ ᶆ *34"ͱඥ෇͚ͯɺ࠶౓1PEΛىಈʂ ੖ΕͯΞΫηεʂ

Slide 36

Slide 36 text

ࢀߟจݙ Πϯλʔωοτͷӥஐʹײँ͠·͢ɻࢲ΋ෛ͚ͣʹίϯτϦϏϡʔτ͍͖ͯ͠·͢ʂ • ,VCFSOFUFTr ೝূʢ,VCFSOFUFTJPʣ LVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO • &,4ͷBXTBVUIͱ͔*34"ͱ͔ʢձ઒͞Μʣ [FOOEFWOBNFMFTT@HZP[BBSUJDMFTFLTBVUIFOUJDBUJPOBVUIPSJ[BUJPO • ,VCFSOFUFTαʔϏεΞΧ΢ϯτʹର͢Δ͖Ίࡉ΍͔ͳ*".ϩʔϧׂΓ౰ͯͷ঺հʢ"84ࣾʣ BXTBNB[PODPNKQCMPHTOFXTJOUSPEVDJOHGJOFHSBJOFEJBNSPMFTTFSWJDFBDDPVOUT • ,VCFSOFUFTʹ͓͍ͯͷ"84ϦιʔεͷΞΫηε؅ཧʢ.FUSJD'JSFࣾʣ RJJUBDPN.FUSJD'JSFJUFNTCGFCCFEBF • "84&,4ͷ*".3PMFTGPS4FSWJDF"DDPVOUTΛ׬શʹཧղͨ͠ʢ,BJUPZ͞Μʣ XXXLBJUPZYZ[BXTJSTB

Slide 37

Slide 37 text

2JJUB&OHJOFFS'FTUBͰձࣾର߅ઓҐΛૂͬͯ·͢💪 RJJUBDPNPSHBOJ[BUJPOTLEEJBHJMF

Slide 38

Slide 38 text

,%%*ΞδϟΠϧ։ൃηϯλʔʢ,"(ʣઈࢍ࠾༻தʂ ϑϧϦϞʔτͳιϑτ΢ΣΞΤϯδχΞઈࢍืूͯ͠·͢👍