AWS Summit Tokyo の思ひ出/Memories_of_AWS_Summit_Tokyo_2017

Slide 1

Slide 1 text

AWS Summit Tokyo ͷ ࢥͻग़ JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5 1 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 2

Slide 2 text

͋Μͨ୭Ͷʁ • ઒ݪ ༸ฏ(ʮ͔ͬͺʯͱݺΜͰͶ ! ) • iret גࣜձࣾ cloudpack ࣄۀ෦ • Github : inokappa • twitter : @inokara • Facebook : inokappa • Blog : http:/ /inokara.hateblo.jp 2 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 3

Slide 3 text

࣮͸... 3 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 4

Slide 4 text

AWS GameDay 2016 ༏উϝϯόʔ Ͱ͢ 4 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 5

Slide 5 text

ΞδΣϯμ 1. AWS Summit Tokyo ͷࢥ͍ग़ΛࡾߦͰ 2. ηογϣϯৼΓฦΓ ʙ DevSecOps on AWS - Policy in Code ʙ 5 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 6

Slide 6 text

AWS Summit Tokyo ͷ ࢥ͍ग़ΛࡾߦͰ 6 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 7

Slide 7 text

ࡾߦ • ձ৔͕େ͖͍ • ͱʹ͔͘ਓ͕ଟ͍ • ৭ΜͳҙຯͰ೤͍ʢॵ͍ʣ 7 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 8

Slide 8 text

ձ৔͕େ͖͍ • άϥϯυϓϦϯεϗςϧ৽ߴྠͱ඼઒ ϓϦϯεϗςϧΛି͠੾ͬͯࣥΓߦΘ Εͨ • ϗςϧΛೋͭି͠੾ΔύϫʔΛೋͭͷ ϗςϧΛߦ͖དྷ͠ͳ͕Βײͨ͡ 8 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 9

Slide 9 text

ͱʹ͔͘ਓ͕ଟ͍ • ࢀՃऀ΋͞Δ͜ͱͳ͕Βɺ܎һͷਓ͕ͨͪଟ͔ͬͨ • ͓ӄ༷Ͱ΄ͱΜͲ໎͏͜ͱͳ͘໨తͷձ৔·ͰḷΓண͚Δͨ 9 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 10

Slide 10 text

৭ΜͳҙຯͰ೤͍ʢॵ͍ʣ • ਓ͕ଟ͍ͷͰ౰વ...ώʔτΞΠϥϯυ • ίϯύχΦϯͷ͓࢞ͪΌΜʹυΪϚΪͯ͠৺ഥ਺΋্͕ͬͯମ Թ΋্͕Δ 10 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 11

Slide 11 text

͜ΕΒ͸࣮ࡍʹࢀՃ͠ ͨਓʹ͔͠ղΒͳ͍͚ ͲɺͲʔͰ΋ΠΠࣄͰ ͟͝Δʢ׼ʣ 11 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 12

Slide 12 text

ͦͯ͠ɺࢀՃग़དྷͳͯ͘΋... 12 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 13

Slide 13 text

13 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 14

Slide 14 text

14 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 15

Slide 15 text

΄΅΄΅ʢ˞ʣࢿྉ΋ ಈը΋ެ։͞Ε͍ͯ Δʂ͋Γ͕ͨ΍ɺ͋Γ ͕ͨ΍ ※ ࢿྉͷΈಈըඇެ։ͱ͍͏ύλʔϯ΋͋Δ 15 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 16

Slide 16 text

ͱ͍͏͜ͱͰɺࢀՃ͠ ͨηογϣϯͷৄ͍͠ ಺༰͸ׂѪʂͤͯ͞௖ ͖·͢ͷͰ... ※ ಈը΍ࢿྉΛޚཡ͍ͩ͘͞ʂ! 16 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 17

Slide 17 text

ऴΘΓʂ 17 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 18

Slide 18 text

18 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 19

Slide 19 text

͑ɺ ΋͏ऴΘΓʂʁ 19 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 20

Slide 20 text

ࣗओن੍ 20 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 21

Slide 21 text

ͱ͍͏͜ͱͰ... 21 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 22

Slide 22 text

ࢀՃͨ͠ηογϣϯ͔ Β໘ന͍σϞΛ΍ͬͯ ͍ͨηογϣϯΛৼΓ ฦͬͯΈ·͢ 22 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 23

Slide 23 text

ࣗ෼͕ࢀՃͨ͠ηογϣϯ 1. DevSecOps on AWS - Policy in Code 2. [ϝϧΧϦ] Cloud connect the world as a Glue 3. [Intelligence] ΦϯϓϨ͔ΒҠߦ͢ΔͷͰɺAmazon ECS Ͱίϯς φԽͱ Terraform ͰΠϯϑϥίʔυԽͨ͠࿩ 23 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 24

Slide 24 text

ࡾͭͷத͔Β DevSecOps on AWS - Policy in Code Λͬ͘͟ Γ঺հ͠·͢ 24 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 25

Slide 25 text

DevSecOps on AWS - Policy in Code 25 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 26

Slide 26 text

DevSecOps on AWS - Policy in Code ʢུʣεϞʔϧελʔτ͸ AWS Ϋϥ΢υͷྑ͞Ͱ͕͢ɺن໛͕େ ͖͘ͳΔʹ࿈Εɺ։ൃ͕ෳ਺ͷ AWS ΞΧ΢ϯτʹ·͕ͨͬͨΓɺ ΑΓηΩϡϦςΟɾΨόφϯεͷڧԽΛٻΊΒΕΔ͜ͱ͕͋Γ· ͢ɻຊηογϣϯͰ͸ɺσϕϩούʔͷօ͞Μ͕ར༻͢Δ AWS Ϋ ϥ΢υ؀ڥ؅ཧΛ೗ԿʹࣗಈԽͤ͞ɺ։ൃʹूதͰ͖Δ؀ڥΛσ ϓϩΠ͢Δ͔ʹ͍ͭͯσϞΛަ͓͑࿩ͤͯ͞௖͖·͢ʢུʣ 26 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 27

Slide 27 text

ͦ΋ͦ΋ɺDevSecOps ͬͯ • ձ৔Ͱ͸ʮԶ͸ DevSecOps ஌ͬͯΔͥʯͬͯਓ͸Ұׂ͘Β͍ • DevOps (Developer:։ൃ ͱ Operation:ӡ༻͕࿈ܞͯ͠ڠྗ͢Δ։ ൃٕ๏) ͷ֤޻ఔͷதͰ Security ΋௥Ճͯࣗ͠ಈԽΛਤΔࢥ૝ • ࣗಈԽʢSecurity AutomationʣΛ DevOps ͱҰॹʹӡ༻͢Δͷ͸ ೉͍͠ • ͦ΋ͦ΋ηΩϡϦςΟϧʔϧͷӡ༻ࣗମ͕োนͱͳΓ͏Δ 27 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 28

Slide 28 text

AWS ͳΒ֤αʔϏεΛ ૊Έ߹Θͤͯɺ؆୯ʹ Security Automation Λ ӡ༻ग़དྷΔʂ 28 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 29

Slide 29 text

Security Automation • Security Control • Proactive Monitoring 29 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 30

Slide 30 text

Security Control • ͍ΘΏΔݖݶ؅ཧ • IAM Role ͱ STS Λར༻ͨ͠Ұ࣌తͳೝূ৘ใ͕ॏཁ • STS Λར༻͢Δ͜ͱͰҰ࣌తͳೝূ৘ใͷൃߦ͕ՄೳʢAssume Role ͢Δʣ • ݖݶ͕ߜΒΕ͍ͯΔͷͰɺ։ൃऀ͕࢖͍͍ͨαʔϏεΛ௚͙ʹ ར༻ग़དྷͳ͍৔߹͕͋Δ 30 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 31

Slide 31 text

Proactive Monitoring • ͋Β͔͡Ί؇ΊͷݖݶΛ༩͓͍͑ͯͯɺ֤छΠϕϯτΛ؂ࢹ͠ ͯɺͦΕʹԠͯ͡ΞΫγϣϯΛى͜͢࢓૊ΈΛ࣮૷͢Δ • ؔ࿈͢ΔαʔϏε • CloudTrailʢAPI ૢ࡞ͷϩΪϯάʣ • CloudWatch Eventsʢ֤छΠϕϯτΛݕ஌ͯ͠ΞΫγϣϯʣ • Configʢมߋ؅ཧʣ 31 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 32

Slide 32 text

Proactive Monitoring ͷσϞ 32 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 33

Slide 33 text

Proactive Monitoring ͷσϞ 33 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 34

Slide 34 text

ࢀߟ URL • https:/ /www.youtube.com/watch?v=s5JD82594uY ! • https:/ /d0.awsstatic.com/events/jp/2017/summit/devday/ D3T7-2.pdf ! • http:/ /qiita.com/sgp/items/07a9d1a40870b3faf75f ! • http:/ /dev.classmethod.jp/cloud/aws-summit-2017-report-devday-d3t7-2/ ! • https:/ /www.fsz.co.jp/?press=aws-summit-dev-day-2017-tokyo- 34 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5

Slide 35

Slide 35 text

͓ΘΓ 35 JAWS-UG ෱Ԭ@ूஂࢁݟͤͱ AWS Summit Tokyo ৼΓฦΒ Night#5