今さら聞けないAWSによる監視の世界

by Masataka Sugano

Slide 1

Slide 1 text

ࠓ͞Βฉ͚ͳ͍"84ʹΑΔ؂ࢹͷੈք

Slide 2

Slide 2 text

ϦϯΫɾϒοΫϚʔΫ͸ͪ͜ΒΛ͓ئ͍͠·͢ IUUQEFWDMBTTNFUIPEKQFWFOUTVHBOPEFWFMPQFSTJPDMPVEXBUDI

Slide 3

Slide 3 text

ຊηογϣϯͷҊ಺໾ ੁ໺ণ޹ʢ͕͢ͷ·͔ͨ͞ʣ w"84ࣄۀ෦  ΦϖϨʔγϣϯνʔϜϦʔμʔ wࡳຈΦϑΟεۈ຿ wೣ೿ wࠓ೥ͦ͜Ωϟϯϓ৔ͰϦϞʔτϫʔΫ

Slide 4

Slide 4 text

ຊηογϣϯͷ஫ҙࣄ߲

Slide 5

Slide 5 text

ຊηογϣϯʹ͍ͭͯͷ஫ҙࣄ߲ wॳڃऀ޲͚ͷηογϣϯͰ͢ wαʔυύʔςΟͷ؂ࢹιϦϡʔγϣϯʹ͸৮Ε·ͤΜ

Slide 6

Slide 6 text

ΞδΣϯμ w؂ࢹͷछྨ w؂ࢹʹ࢖͏"84αʔϏε w௨஌ʹ࢖͏"84αʔϏε w"84ʹΑΔ؂ࢹͷྲྀΕ wͦΕͧΕͷ؂ࢹํ๏ w·ͱΊ

Slide 7

Slide 7 text

؂ࢹͷछྨʹ͍ͭͯ ԿΛ؂ࢹ͠·͔͢ʁ wϋʔυ΢ΣΞ؂ࢹ wϦιʔε؂ࢹ wϓϩηε؂ࢹ wϩά؂ࢹ w63-؂ࢹ

Slide 8

Slide 8 text

2 શ෦ AWS ͷαʔϏε͚ͩͰͰ͖·͔͢ʁ

Slide 9

Slide 9 text

શ෦"84ͷαʔϏε͚ͩͰͰ͖·͔͢ʁ Ͱ͖·͢

Slide 10

Slide 10 text

"84ʹΑΔ؂ࢹͷத৺ Amazon CloudWatch

Slide 11

Slide 11 text

"NB[PO$MPVE8BUDIͬͯʁʢʣ ֤छ৘ใΛϞχλϦϯάͯ͠อଘʢϲ݄෼ʣ w෼͝ͱͷσʔλ͸೔෼ w෼͝ͱͳΒ೔෼ w࣌ؒ͝ͱͳΒ೔෼ʢϲ݄෼ʣ

Slide 12

Slide 12 text

"NB[PO$MPVE8BUDIͬͯʁʢʣ ֤छ৘ใΛάϥϑͰදࣔ wෳ਺બ୒ͯ͠  ಉ࣌ʹද͕ࣔՄೳ wผͷ"84Ϧιʔεͷ  άϥϑ΋0, JYYYYYYYYYY FDUFTU JYYYYYYYYY FDQSPEVDU

Slide 13

Slide 13 text

"NB[PO$MPVE8BUDIͬͯʁʢʣ ΞΫγϣϯΛ࣮ߦ wΞϥʔϜΛઃఆ͠ΞΫγϣϯΛ࣮ߦ wଞͷαʔϏεΛݺͼग़͢ࣄ΋Մೳ

Slide 14

Slide 14 text

"NB[PO$MPVE8BUDI·ͱΊ w֤छ৘ใΛϞχλϦϯάͯ͠อଘʢϲ݄෼ʣ wอଘͨ͠৘ใΛάϥϑͰදࣔ wΞΫγϣϯΛ࣮ߦ

Slide 15

Slide 15 text

2 ؂ࢹ͢Δ͚ͩͰ͍͍Ͱ͔͢ʁ

Slide 16

Slide 16 text

؂ࢹ͢Δ͚ͩͰ͍͍Ͱ͔͢ʁ ͪΐͬɾɾɾ͑ʁ

Slide 17

Slide 17 text

౰વͰ͕͢؂ࢹ͚ͩ͡ΌͩΊʢ೔໨ʣ "ࢯɿʮ͓ɺࡢ೔͔Βαʔόʔམͪͯͨʯ #ࢯɿʮԿ୆͔͋Δ͠ɺ୆͘Β͍ͳΒେৎ෉XXXʯ େৎ෉ɾɾɾʁ

Slide 18

Slide 18 text

౰વͰ͕͢؂ࢹ͚ͩ͡ΌͩΊʢ೔໨ʣ "ࢯɿʮ͓ɺࡢ೔͔ΒαʔϏεམͪͯͨʯ #ࢯɿʮͦΕ͸ͩΊʯ Ͱ͢ΑͶ

Slide 19

Slide 19 text

Կ͔͋ͬͨΒ௨஌ͯ͠ཉ͍͠ Amazon Simple Notiﬁcation Service  ʢAmazon SNSʣ

Slide 20

Slide 20 text

"NB[PO4/4ͬͯʁ ֤छ௨஌Λૹ৴͢Δ w)551ʢ1045ʣ w&NBJM w-BNCEBؔ਺Λىಈ͢Δࣄ΋Մೳ

Slide 21

Slide 21 text

"84ʹΑΔ؂ࢹͷྲྀΕͷ·ͱΊ w"NB[PO$MPVE8BUDI͕ϞχλϦϯά wΞϥʔϜʹઃఆ͖͍ͨ͠͠஋ʹ൓Ԡ w4/4τϐοΫΛݺͼग़͠ wϝʔϧૹ৴΍-BNCEBؔ਺Λ࣮ߦ

Slide 22

Slide 22 text

͔͜͜Βͷ͓࿩ ࠷ॳʹʮશ෦Ͱ͖·͢ʯͬͯݴͬͯͨ݅ wϋʔυ΢ΣΞ؂ࢹ wϦιʔε؂ࢹ wϓϩηε؂ࢹ wϩά؂ࢹ w63-؂ࢹ

Slide 23

Slide 23 text

ϋʔυ΢ΣΞ؂ࢹ Ϋϥ΢υͰϋʔυ΢ΣΞͷ؂ࢹ͕ඞཁʁ

Slide 24

Slide 24 text

Ϋϥ΢υͰϋʔυ΢ΣΞ؂ࢹ Ϋϥ΢υͰ΋౰વϋʔυ΢ΣΞ͕ଘࡏ͠·͢  ͦͯͦ͠Ε͸ނো͠·͢ wωοτϫʔΫ઀ଓͷ૕ࣦ wγεςϜిݯͷ૕ࣦ w෺ཧϗετͷιϑτ΢ΣΞͷ໰୊ w෺ཧϗετͷϋʔυ΢ΣΞͷ໰୊

Slide 25

Slide 25 text

ނোͨ͠ΒͲ͏ͳΔͷʁ 4UBUVT$IFDL'BJMFE@4ZTUFN  ͜ͷϝτϦΫε͕ʮʯʹͳΓ·͢ ݈߁ͳ&$  ͳͷͰͣͬͱ ʮʯ

Slide 26

Slide 26 text

2 ϝτϦΫεͬͯԿʁ

Slide 27

Slide 27 text

ϝτϦΫεͬͯԿʁ IUUQXXXNFUSJDTKQBCTUSBDUIUNM σʔλΛऩूͯ͠ɺ  ͦͷ··ͷܗͰ͸ͳ͘ܭࢉ΍෼ੳΛՃ͑ͯ  Θ͔Γ΍͍͢σʔλʢ਺஋ʣʹม׵ͨ͠΋ͷ ྫɿϋʔυ΢ΣΞো֐ˠʮʯ

Slide 28

Slide 28 text

ϋʔυ΢ΣΞ؂ࢹͷ·ͱΊ 4UBUVT$IFDL'BJMFE@4ZTUFN  ͜ͷϝτϦΫεΛ؂ࢹ͠·͢

Slide 29

Slide 29 text

࣍͸ɾɾɾ ࠷ॳʹʮશ෦Ͱ͖·͢ʯͬͯݴͬͯͨ݅ wϋʔυ΢ΣΞ؂ࢹ wϦιʔε؂ࢹ wϓϩηε؂ࢹ wϩά؂ࢹ w63-؂ࢹ

Slide 30

Slide 30 text

Α͋͘ΔϦιʔε؂ࢹ w$16࢖༻཰ wϝϞϦ࢖༻཰

Slide 31

Slide 31 text

Ϧιʔε؂ࢹ શͯ༻ҙ͞Ε͍ͯΔΘ͚͡Όͳ͍

Slide 32

Slide 32 text

Ϧιʔε؂ࢹ͸શͯ༻ҙ͞Ε͍ͯͳ͍ w$16࢖༻཰ɾɾɾʮඪ४ϝτϦΫεʯ wϝϞϦ࢖༻཰ɾɾɾʮΧελϜϝτϦΫεʯ

Slide 33

Slide 33 text

ΧελϜϝτϦΫεͬͯԿʁ w$16࢖༻཰ɾɾɾʮඪ४ϝτϦΫεʯ wϝϞϦ࢖༻཰ɾɾɾʮΧελϜϝτϦΫεʯ wඞཁͳ஋Λ"NB[PO$MPVE8BUDI΁ૹ৴Ͱ͖Δ wૹ৴ͨ͠஋ʢϝτϦΫεʣʹ͸޷͖ͳ໊લΛ෇͚ΕΔ wΧελϜϝτϦΫεʹ΋ΞϥʔϜΛઃఆͰ͖Δ

Slide 34

Slide 34 text

ϝϞϦ࢖༻཰ͷऔಘɾૹ৴͸Ͳ͏΍Δʁ ૹ৴͢ΔͨΊͷεΫϦϓτ͕༻ҙ͞Ε͍ͯΔ w&$ʹΧελϜϝτϦΫεΛૹ৴͢ΔݖݶΛ෇༩ wεΫϦϓτΛΠϯετʔϧ wDSPOΛ࢖ͬͯҰఆִؒͰ࣮ߦ wεΫϦϓτʹΑΓ$MPVE8BUDI΁ૹ৴͞ΕΔ wσΟεΫ࢖༻཰΋औಘɾૹ৴ͯ͘͠ΕΔ ૹ৴ύϒϦογϡ

Slide 35

Slide 35 text

͜ͷྲྀΕͰϓϩηε؂ࢹ΋ ϓϩηε؂ࢹ΋ΧελϜϝτϦΫεͰ wBQBDIFͷϓϩηε਺ΛύϒϦογϡ  ʹͳͬͨΒΞϥʔτൃಈͯ͠ϝʔϧૹ৴ wBQBDIFͷTUBUVTΛύϒϦογϡ  ىಈதͳΒɺࢭ·͍ͬͯͨΒΛ ΧελϜϝτϦΫε͕͋Ε͹ࣗ༝ʂ

Slide 36

Slide 36 text

࣍͸ɾɾɾ ࠷ॳʹʮશ෦Ͱ͖·͢ʯͬͯݴͬͯͨ݅ wϋʔυ΢ΣΞ؂ࢹ wϦιʔε؂ࢹ wϓϩηε؂ࢹ wϩά؂ࢹ w63-؂ࢹ

Slide 37

Slide 37 text

ϩά؂ࢹ ຖ೔ɺຖिɺຖ݄ϩάΛ֬ೝ w୲౰ऀ͕΍Δͷɾɾɾʁ ϩά͸Ұఆظؒอ؅͢Δඞཁ͕͋Δ w&$ͷதʹେྔͷϑΝΠϧʁ w;JQͰѹॖʁ

Slide 38

Slide 38 text

໘౗ͳͷͰ CloudWatch Logs ͰૹͬͪΌ͑

Slide 39

Slide 39 text

Ͳ͏΍ͬͯϩάΛૹΔʁ ϩάΛૹΔ·ͰͷྲྀΕ w&$ʹϩάΛૹ৴͢ΔݖݶΛ෇༩ wϩάΛૹ৴͢ΔΤʔδΣϯτΛ४උ wϩάૹ৴ͷઃఆΛ͢Δ

Slide 40

Slide 40 text

ϩά؂ࢹͦͷ ϩά͕ૹΒΕ·͢

Slide 41

Slide 41 text

ૹΕͯ·ͨ͠ Ͱ΋ૹ͚ͬͨͩʁ

Slide 42

Slide 42 text

ϩά؂ࢹͦͷ อଘظؒมߋ

Slide 43

Slide 43 text

ϩά؂ࢹͦͷ ϩάͷ಺༰ΛνΣοΫͯ͠௨஌

Slide 44

Slide 44 text

ϩά؂ࢹͦͷ ݕ஌ɾ௨஌ɾ෮چ͸ཤྺʹ࢒Δ

Slide 45

Slide 45 text

ϩά؂ࢹͷྲྀΕ w&$͔ΒϩάΛૹΔʢBXTMPHTʣ w$MPVE8BUDI-PHTʹஷΊΔʢอଘظؒΛܾΊΔʣ wϑΟϧλ͕ݕ஌͠ʢτϦΨʔΛ࡞੒ʣ wΞϥʔϜͰ௨஌͢ΔʢΞΫγϣϯΛܾΊΔʣ

Slide 46

Slide 46 text

࣍͸ɾɾɾ ࠷ॳʹʮશ෦Ͱ͖·͢ʯͬͯݴͬͯͨ݅ wϋʔυ΢ΣΞ؂ࢹ wϦιʔε؂ࢹ wϓϩηε؂ࢹ wϩά؂ࢹ w63-؂ࢹ

Slide 47

Slide 47 text

2 ࠓճ΋CloudWatchͰ͠ΐʁ

Slide 48

Slide 48 text

$MPVE8BUDI࢖͏ΑͶʁ ҧ͍·͢

Slide 49

Slide 49 text

ࠓճ࢖͏ͷ͸ Amazon Route 53

Slide 50

Slide 50 text

"NB[PO3PVUFͬͯʁ %/4ʢυϝΠϯωʔϜγεςϜʣαʔϏε w63-Λ*1ΞυϨεʹม׵͢ΔαʔϏε ϔϧενΣοΫػೳ͕͋Δʂ

Slide 51

Slide 51 text

ϔϧενΣοΫΛ࡞ͬͯΈͨ

Slide 52

Slide 52 text

ϔϧενΣοΫΛ࡞ͬͯΈͨ

Slide 53

Slide 53 text

͕࣌ؒ͋ͬͨΒ΍ͬͯΈΑ͏ ηΩϡϦςΟάϧʔϓͰࢭΊͪΌ͑

Slide 54

Slide 54 text

ࣦഊͨ࣌͠༻εϥΠυ ΤϥʔʹͳΓ·ͨ͠Ͷʂ

Slide 55

Slide 55 text

63-؂ࢹͷ·ͱΊ w3PVUFΛ࢖͏ wϔϧενΣοΫΛ࡞੒͢Δ w4/4τϐοΫ͸όʔδχΞʹ࡞Δ

Slide 56

Slide 56 text

Ͱ͖·ͨ͠ ࠷ॳʹʮશ෦Ͱ͖·͢ʯͬͯݴͬͯͨ݅ wϋʔυ΢ΣΞ؂ࢹ wϦιʔε؂ࢹ wϓϩηε؂ࢹ wϩά؂ࢹ w63-؂ࢹ

Slide 57

Slide 57 text

ͦͷଞͷ؂ࢹ ଞʹ΋໾ʹཱͭ؂ࢹ͕͋Γ·͢

Slide 58

Slide 58 text

͜Ε΋஌͓͖͍ͬͯͨ AWS CloudTrail

Slide 59

Slide 59 text

"84$MPVE5SBJMͬͯʁ ΄ͱΜͲͷ"1*ͷݺͼग़͕͠ه࿥͞Ε·͢ w"84$MPVE5SBJMΛ༗ޮʹ͢Δඞཁ͕͋Γ·͢ ࣗ෼ͷΞΧ΢ϯτʹ ͍ͭɺ୭͕ɺԿΛͨ͠ͷ͔ ͕ه࿥͞Ε·͢

Slide 60

Slide 60 text

ྫ͑͹ʁ ͜Μͳ΋ͷ΋ه࿥͞Ε·͢ w"NB[POϚωδϝϯτίϯιʔϧ΁ͷϩάΠϯ wηΩϡϦςΟάϧʔϓͷมߋ ϩά͸4ʹ΋ࣗಈͰه࿥͞Ε·͢ wϥΠϑαΠΫϧͰ೥ޙʹ࡟আ

Slide 61

Slide 61 text

Կʹ࢖͏ͷʁ Կ͔ͷ࡞ۀதʹো֐͕ൃੜ wݪҼͱͳͬͨߦಈͷௐࠪ΍ಛఆ͕Մೳ ෆਖ਼ΞΫηε͞Εͨ wͲͷΞΧ΢ϯτͰϩάΠϯͨ͠ͷ͔ wԿΛͨ͠ͷ͔ɺͦΕʹΑΔඃ֐͸ʁ

Slide 62

Slide 62 text

"84$MPVE5SBJMͷ·ͱΊ w"84Λ࢖͏ͳΒඞͣ༗ޮʹ͠·͠ΐ͏ w΄ͱΜͲશͯͷߦಈ͕ه࿥͞Ε·͢ wྫ͑͹ෆਖ਼৵ೖ͞Εͨ࣌ʹΞϥʔτ͢Δࣄ΋Մೳ wো֐΍τϥϒϧͷௐࠪʹඞཁͰ͢

Slide 63

Slide 63 text

·ͱΊ

Slide 64

Slide 64 text

ຊ೔ͷ·ͱΊ w؂ࢹͷத৺͸"NB[PO$MPVE8BUDI w௨஌ͯ͘͠ΕΔͷ͸"NB[PO4/4 wϩάΛஷΊΔͳΒ"NB[PO$MPVE8BUDI-PHT w63-؂ࢹ͸"NB[PO3PVUFͷϔϧενΣοΫͰ

Slide 65

Slide 65 text

ࠓ͞Βฉ͚ͳ͍"84ʹΑΔ؂ࢹͷੈք ͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠