Tweet
Tweet

Slide 1

Slide 1 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬਵ۽ ECR ҙܻೞӝ How to Manage AWS ECR with Terraform ߅ ߽૓ (Byungjin Park) · ௿۽٘ (Claud) · Site Reliability Engineer @ ׼Ӕಕ੉ AWS KRUG Container Jul 12, 2022

Slide 2

Slide 2 text

speaker ߊ಴੗ ࣗѐ Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ߅߽૓ / @posquit0 / ௿۽٘ (Claud) (അ) Site Reliability Engineer @ ׼Ӕಕ੉ (੹) Director of Infrastructure Division @ ஠ࢎ௏ܻই (੹) Software Architect @ ১פযझ 
 (੹) Co-founder & Software Engineer @ ஠೒ۖ HashiCorp Ambassador / AWS Community Builder 
 Ҵઁ೧ఊ؀ഥ DEFCON CTF ࠄࢶ 6ഥ ૓୹ ೞद௏೐ ೠҴ ࢎਊ੗ ݽ੐ ਍৔ ೠҴ੄ য়೑ࣗझ ઺ GitHub 15,000ѐ ੉࢚੄ झఋܳ ߉਷ ೐۽ં౟

Slide 3

Slide 3 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Agenda intro AWS ECR 101 Terraform Modules for AWS ECR AWS ECR ࢲ࠺झ੄ ӝࠄ੸ੋ ղਊী ؀೧ ࢓ಝࠇפ׮. AWS ECRਸ ബਯ੸ਵ۽ ҙܻೞӝ ਤೠ పۄಬ ݽٕਸ ݅ٚ җ੿ী ؀೧ ҕਬ೤פ׮. Terraform Workspace for AWS ECR పۄಬ ਕ௼झಕ੉झ ࢚ীࢲ पઁ۽ AWS ECRਸ ҙܻೞח ߑߨਸ ҕਬ೤פ׮. Extra for AWS ECR AWS ECRҗ ా೤ؼ ࣻ ੓ח ׮ܲ AWS ࢲ࠺झܳ рױೞѱ ࢓ಝࠇפ׮.

Slide 4

Slide 4 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. AWS ECR 101

Slide 5

Slide 5 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ECR (Elastic Container Registry) AWS ECR 101 ECR਷ AWS ജ҃ীࢲ ੷࠺ਊਵ۽ औҊ উ੿੸ਵ۽ ੉ਊೡ ࣻ ੓ח ஶప੉ց ੉޷૑ ੷੢ࣗ ࢲ࠺झੑפ׮. ؘ੉ఠ ੷੢ ࠺ਊ ߂ ֎౟ਕ௼ ࣠न ࠺ਊ݅ ࠗҗ AWSীࢲ ઁҕೞח ҙܻഋ ஶప੉ց ੉޷૑ ੷੢ࣗ ࢲ࠺झ

Slide 6

Slide 6 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ઱ਃ ҳࢿਃࣗ ECR਷ ೐ۄ੉ࡁ ੷੢ࣗ৬ ಌ࠶ܼ ੷੢ࣗܳ ઁҕ೤פ׮. Private Registry Private Repository Public Registry Container Image Container Image Container Image Container Image Private Repository Public Repository Public Repository AWS ECR 101

Slide 7

Slide 7 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ઱ਃ ҳࢿਃࣗ ੉ߣ दрীח ೐ۄ੉ࡁ ੉޷૑ ੷੢ࣗী ؀೧ࢲ݅ ׮ܛפ׮. 😁 Private Registry Private Repository Public Registry Container Image Container Image Container Image Container Image Private Repository Public Repository Public Repository AWS ECR 101

Slide 8

Slide 8 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ECR Private Registry AWS ҅੿੄ п ܻ੹ ױਤ۽ ஶప੉ց ੉޷૑ ੷੢ࣗ ਍৔ ೞա੄ ۨ૑झ౟ܻח ৈ۞ ੉޷૑ ۨನ૑షܻ ҙܻ ૑৉ ࢲ࠺झ (Regional Service) ੉޷૑ ੷੢ࣗ р ࠂઁ (Replication) — Cross Regions / Cross Accounts ੉޷૑ ࠙ࢳਸ ాೠ ࠁউ ஂড੼ Ѩࢎ (Scanning) ಽ झܖ நद (Pull-through Cache) ׮নೠ ࠗо ӝמ ઁҕ ࢎਊ੗ח ۨ૑झ౟ܻী ؀ೠ ࣁࠗ ࢸ੿݅ ߸҃ೡ ࣻ ੓णפ׮. ECR ೐ۄ੉ࡁ ۨ૑झ౟ܻח AWS ҅੿੄ п ܻ੹݃׮ ೞաঀ ੉޷ ٜ݅যઉ ੓ਵݴ AWS ECR 101

Slide 9

Slide 9 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ECR Private Repository п ۨನ૑షܻ੄ ࣁࠗ ২࣌ਸ ߸҃ೡ ࣻ ੓णפ׮. ೐ۄ੉ࡁ ۨನ૑షܻܳ ࢤࢿೞҊ աݶ AWS ਢ ௑ࣛ ઝஏ ݫ׏ܳ ా೧ AWS ECR 101

Slide 10

Slide 10 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Terraform Modules for AWS ECR

Slide 11

Slide 11 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ޖट పۄಬ ݽٕਸ ٜ݅ Ѫੋо? Terraform Modules for AWS ECR “਋ࢶ పۄಬ AWS ೐۽߄੉؊ ޙࢲܳ ৌযࠇद׮.” https://registry.terraform.io/providers/hashicorp/aws/latest/docs

Slide 12

Slide 12 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ޖट పۄಬ ݽٕਸ ٜ݅ Ѫੋо? Terraform Modules for AWS ECR పۄಬ AWS ೐۽߄੉؊ ޙࢲܳ ഛੋ೧ࠁݶ ਤ৬ э਷ ୨ 7ѐ੄ ECR ҙ۲ ܻࣗझ ݾ۾ਸ ഛੋೡ ࣻ ੓णפ׮.

Slide 13

Slide 13 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ޖट పۄಬ ݽٕਸ ٜ݅ Ѫੋо? Terraform Modules for AWS ECR ECR ಌ࠶ܼ ੷੢ࣗী ؀೧ࢲח ੉ दрী ׮ܖ૑ ঋਵפ ECR Public ܻࣗझח ޖद೧઱दݶ ؾפ׮.

Slide 14

Slide 14 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ޖट పۄಬ ݽٕਸ ٜ݅ Ѫੋо? Terraform Modules for AWS ECR ੉ۧѱ 7ѐ੄ పۄಬ ܻࣗझী ؀೧ࢲ Ҋ޹೧ࠁݶ غѷҵਃ? aws_ecr_lifecycle_policy aws_ecr_pull_through_cache_rule aws_ecr_registry_policy aws_ecr_registry_scanning_con fi guration aws_ecr_repository aws_ecr_repository_policy aws_ecr_replication_con fi guration

Slide 15

Slide 15 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ޖट పۄಬ ݽٕਸ ٜ݅ Ѫੋо? Terraform Modules for AWS ECR “पઁ ѐ୓ ױਤੋ ۨ૑झ౟ܻ৬ ۨನ૑షܻ۽ ୶࢚ചೞݶ ҙܻо ખ ؊ ࣻਘೞ૑ ঋਸө?” ecr-repository ecr-registry

Slide 16

Slide 16 text

ecr-registry ecr-repository Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ޖट పۄಬ ݽٕਸ ٜ݅ Ѫੋо? Terraform Modules for AWS ECR ۨ૑झ౟ܻ৬ ۨನ૑షܻ пп ҙ۲ػ ܻࣗझٜਸ ޘযࠇद׮! 💪💪 aws_ecr_lifecycle_policy aws_ecr_pull_through_cache_rule aws_ecr_registry_policy aws_ecr_registry_scanning_con fi guration aws_ecr_repository aws_ecr_repository_policy aws_ecr_replication_con fi guration

Slide 17

Slide 17 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ݽٕ: ecr-registry Terraform Modules for AWS ECR ECR ۨ૑झ౟ܻ੄ ੿଼ ࠂઁ(Replication)৬ ಽ झ۽ நद(Pull-through Cache) ੿଼ ੘ࢿ aws_ecr_registry_policy ecr-registry aws_ecr_pull_through_cache_rule aws_ecr_registry_policy aws_ecr_registry_scanning_con fi guration aws_ecr_replication_con fi guration 0..1 1 0..N 0..1 ECR ۨ૑झ౟ܻ੄ ࠁউ झந׬ ࢸ੿ਵ۽ ӝࠄ ч਷ BASIC ఋੑ झந׬ ENHANCED ఋੑ झந׬ਸ ా೧ AWS Inspector ӝ߈ ࠁউ Ѩࢎ оמ aws_ecr_registry_scanning_con fi guration ECR੉ ૑ਗೞח ಌ࠶ܼ ੷੢ࣗ(quay.io / ECR Public)੄ நय ҃۽ ࢸ੿ aws_ecr_pull_through_cache_rule ECR ۨನ૑షܻٜਸ ࠂઁೡ ݾ੸૑ ECR ۨ૑झ౟ܻ ੿ࠁ ࢸ੿ aws_ecr_replicatoin_con fi guration

Slide 18

Slide 18 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ݽٕ: ecr-registry Terraform Modules for AWS ECR

Slide 19

Slide 19 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ݽٕ: ecr-registry Terraform Modules for AWS ECR

Slide 20

Slide 20 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ݽٕ: ecr-registry Terraform Modules for AWS ECR

Slide 21

Slide 21 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ݽٕ: ecr-repository Terraform Modules for AWS ECR ecr-repository aws_ecr_lifecycle_policy aws_ecr_repository aws_ecr_repository_policy 1 0..1 0..1 ECR ۨನ૑షܻ aws_ecr_repository ECR ۨನ૑షܻ੄ ܻࣗझ ੿଼ਵ۽ ۨನ૑షܻী ؀ೠ ੽Ӕ ాઁ aws_ecr_repository_policy ECR ۨನ૑షܻ੄ ੉޷૑ ۄ੉೐ࢎ੉௿ ੿଼ ࢸ੿ aws_ecr_lifecycle_policy

Slide 22

Slide 22 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Terraform Modules for AWS ECR పۄಬ ݽٕ: ecr-repository

Slide 23

Slide 23 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Terraform Modules for AWS ECR పۄಬ ݽٕ: ecr-repository

Slide 24

Slide 24 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Terraform Modules for AWS ECR పۄಬ ݽٕ: ecr-repository

Slide 25

Slide 25 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Terraform Modules for AWS ECR పۄಬ ݽٕ: ecr-repository

Slide 26

Slide 26 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ݽٕ Ѿҗޛ Terraform Modules for AWS ECR https://github.com/tedilabs/terraform-aws-container tedilabs/terraform-aws-container https://registry.terraform.io/modules/tedilabs/container/aws/ झఋ / ನ௼ / ஶ౟ܻ࠭࣌ / झಪࢲ ݽف ജ৔೤פ׮…! 🥕 🥕

Slide 27

Slide 27 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Terraform Workspace for AWS ECR

Slide 28

Slide 28 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. AWS ECR ۨ૑झ౟ܻ ҙܻ Terraform Workspace for AWS ECR

Slide 29

Slide 29 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. AWS ECR ۨನ૑షܻ ҙܻ Terraform Workspace for AWS ECR

Slide 30

Slide 30 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. AWS ECR ۨನ૑షܻ ҙܻ Terraform Workspace for AWS ECR

Slide 31

Slide 31 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Extra for AWS ECR

Slide 32

Slide 32 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. VPC PrivateLink ా೤ Extra for AWS ECR AWS VPC৬ ؀࢚ ࢲ࠺झ р উ੹ೠ োѾਸ ਤೠ ӝࣿ Ҋоਊࢿ (High Availability) ߂ ഛ੢ࢿ (Scalability) ઁҕ ૑ਗೞח ؀࢚ ࢲ࠺झ - AWS ࢲ࠺झ (S3, ECR, KMS ١) - ׮ܲ AWS ҅੿ ࢚ীࢲ ઁҕೞח ࢲ࠺झ (VPC Endpoint Service) - AWS ݃௄೒ۨ੉झ ࢚੄ ౵౟ց ࢲ࠺झ AWS VPC PrivateLink A highly available, scalable technology that enables you to privately connect your VPC to supported AWS services, 
 services hosted by other AWS accounts (VPC endpoint services), and supported AWS Marketplace partner services.

Slide 33

Slide 33 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. VPC PrivateLink ా೤ Extra for AWS ECR بழ ۨ૑झ౟ܻ APIܳ ਤೠ ূ٘ನੋ౟ ৈ۞ ࢲ࠳ بݫੋ — *.dkr.ecr.ap-northeast-2.amazonaws.com com.amazonaws.region.ecr.dkr AWS ECR APIܳ ਤೠ ূ٘ನੋ౟ ױੌ بݫੋ — api.ecr.ap-northeast-2.amazonaws.com com.amazonaws.region.ecr.api

Slide 34

Slide 34 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. VPC PrivateLink ా೤ Extra for AWS ECR

Slide 35

Slide 35 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Con fi g ҙܻഋ ӏ஗ ഝਊ Extra for AWS ECR AWS ܻࣗझ ҳࢿਸ ૑ࣘ੸ਵ۽ ݽפఠ݂ ߂ ӝ۾ೞҊ ӏ੿ ળࣻ ಣоܳ ૑ਗೞח ҙܻഋ ࢲ࠺झ - ఋ੐ۄੋ ࠭ܳ ా೧ ܻࣗझ ߸҃ࢎ೦ ୶੸ - ܻࣗझ р ੄ઓࢿ ҙ҅ ୶੸ - AWS SNS োزਸ ా೧ ܻࣗझ ߸҃ ঌۈ - Compliance as Codeܳ ాೠ Ѣߡքझ ߂ ӏ੿ ળࣻ ৈࠗ ઑࢎ AWS Con fi g Record and evaluate con fi gurations of your AWS resources

Slide 36

Slide 36 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Con fi g ҙܻഋ ӏ஗ ഝਊ Extra for AWS ECR - ecr-private-image-scanning-enabled - ecr-private-lifecycle-policy-con fi gured - ecr-private-tag-immutability-enabled AWS ECR ҙ۲ ҙܻഋ ӏ஗

Slide 37

Slide 37 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Con fi g ҙܻഋ ӏ஗ ഝਊ Extra for AWS ECR - ecr-private-image-scanning-enabled - ecr-private-lifecycle-policy-con fi gured - ecr-private-tag-immutability-enabled AWS ECR ҙ۲ ҙܻഋ ӏ஗

Slide 38

Slide 38 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. Con fi g ҙܻഋ ӏ஗ ഝਊ Extra for AWS ECR

Slide 39

Slide 39 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. FYI

Slide 40

Slide 40 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. పۄಬ ௏٘ ҙܻী ؀೧ ؊ ҾӘೞ׮ݶ? FYI https://www.youtube.com/watch?v=yWhwZpzJ3no&t=2010s SpeakerDeck HashiTalk: Korea ࣁ࣌ীࢲ పۄಬ ௏٘ ҙܻী ؀೧ ؊ ੗ࣁೠ ղਊٜਸ ഛੋೡ ࣻ ੓णפ׮. 👏

Slide 41

Slide 41 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. AWS PrivateLinkী ؀೧ ؊ ҾӘೞ׮ݶ? FYI https://www.youtube.com/watch?v=tBZBYozvTO8 SpeakerDeck ׼Ӕ SRE ޿স ࣁ࣌ীࢲ AWS PrivateLink ഝਊী ؀೧ ؊ ੗ࣁೠ ղਊٜਸ ഛੋೡ ࣻ ੓णפ׮. 👏

Slide 42

Slide 42 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. AWS Con fi gী ؀೧ ؊ ҾӘೞ׮ݶ? FYI SpeakerDeck AWS ݣ౭ য஠਍౟ ജ҃੄ AWS Con fi g ࢲ࠺झ ੸ਊী ؀೧ ؊ ੗ࣁೠ ղਊٜਸ ഛੋೡ ࣻ ੓णפ׮. 👏

Slide 43

Slide 43 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ೞद௏೐ ೠҴ ࢎਊ੗ ݽ੐ FYI https://www.facebook.com/groups/hashicorpkrug పۄಬী ؀ೠ ؊ ݆਷ ੿ࠁܳ ਗೞन׮ݶ ೞद௏೐ ೠҴ ࢎਊ੗ ݽ੐ী оੑ೧઱ࣁਃ! 😁

Slide 44

Slide 44 text

ࣻಣ੸ੋ ࣗా — ૒ә X / ৔য੉ܴ / न܉৬ ୽ج / ైݺೠ ੿ࠁ ҕਬ ੗ਯҗ ଼੐ — מز੸ সޖ ࣻ೯ / ੗ਯ੸ ౸ױ ૌѩѱ ࢿ੢ — աࠁ׮ ڪযդ زܐ / ౱ ਕ௼ / ૌѢ਑ ࢎਊ੗ ઺ब ࢎҊ — ࢎਊ੗ о஖ ୭਋ࢶ / ࢎਊ੗৬ ੿ࢲ੸ োѾ recruiting ੋ೐ۄ ౱ীࢲ ೣԋ ೡ زܐܳ ଺ইਃ! 👋 Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ੗ࣁೠ ղਊ਷ daangn.team ਸ ߑޙ೧઱ࣁਃ! :) SRE (Site Reliability Engineer) ׼Ӕಕ੉ ੋ೐ۄ ҳ୷ ߂ ਍৔ Data Engineer ׼Ӕಕ੉ ؘ੉ఠ ೒ۖಬ ҳ୷ ߂ ਍৔ ਋ܻח ੉ۧѱ ੌ೧ਃ ഌఖ ߂ ࠂ૑ ੗ਯ੸ੋ ോо / ਬো ୹ృӔ / ੗ਯ ध࠺ ߂ рध࠺ ૑ਗ झగ٬ ؘझ௼ & ೲݢ޻۞ ੄੗ ઁҕ / بࢲ ҳݒ ߂ Үਭ࠺ ૑ਗ

Slide 45

Slide 45 text

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. End of Document Visit my AMA (https://github.com/posquit0/ama) for any question!