JAWSUG初心者支部 IAMの「あ」の話

by Takuro SASAKI

Embed

Start on current slide

Slide 1

Slide 1 text

*".ͷʮɹɹʯ /3*ωοτίϜגࣜձࣾɹ ࠤʑ໦୓࿠ +"846(ॳ৺ऀࢧ෦-5େձʂʂ #jawsug_bgnr ͋

Slide 2

Slide 2 text

ࠤʑ໦୓࿠ CMPHIUUQTCMPHUBLVSPTOFU 5XJUUFS!ELGK ࣗݾ঺հ #jawsug_bgnr

Slide 3

Slide 3 text

+BQBO"1/"NCBTTBEPS બग़͞Ε·ͨ͠ ࣗݾ঺հ #jawsug_bgnr

Slide 4

Slide 4 text

4""ͷରࡦຊ͕վగ͞Ε·ͨ͠ "84ೝఆࢿ֨ࢼݧςΩετ "84ೝఆιϦϡʔγϣϯΞʔΩςΫτ ΞιγΤΠτվగୈ൛ IUUQTBN[OUP,R;WK, "84ೝఆιϦϡʔγϣϯΞʔΩςΫτΞιγͷษڧͷ࢓ํͱ "84ͷೖ໳ͷ࢓ํΛࣥචʢͨͭ͠΋Γʣ ൃച։࢝ʂʂ #jawsug_bgnr

Slide 5

Slide 5 text

Ξ΢τϓοτΛ͠Α͏ ୔ࢁΞ΢τϓοτͨ͠ਓʹϓϨθϯτ ຊ೔தͰɺϋογϡλά෇͖ͰπΠʔτͨ͠ਓʢ্Ґ໊̑ʣ ϒϩάͰ·ͱΊͨਓɹઌண໊̑ #jawsug_bgnr ࣗݾਃࠂͰ5XJUUFSͰϝϯγϣϯ͍ͩ͘͞

Slide 6

Slide 6 text

ࠓ೔࿩͢ςʔϚ "84ͱηΩϡϦςΟ "84ΞΧ΢ϯτͱ*". *".ͷػೳ ઃܭํ਑ͱ࠷খݖݶ ͓·͚ #jawsug_bgnr

Slide 7

Slide 7 text

"84ͱηΩϡϦςΟ

Slide 8

Slide 8 text

"84ͱηΩϡϦςΟ #jawsug_bgnr ͍Ζ͍Ζ΍Δ͜ͱ͕ଟͯ͘ɺ ΍΍͍͜͠ͱࢥͬͨ͜ͱ͋Γ·ͤΜ͔ શମ૾Λ೺Ѳ͢ΔͨΊʹɺͬ͘͟Γͱ ෼ྨͯ͠Έ·͠ΐ͏

Slide 9

Slide 9 text

"84ͱηΩϡϦςΟ #jawsug_bgnr "84ͷηΩϡϦςΟ͸ͭͷ࣠Ͱߟ͑Δ ᶃ"84಺ʹߏஙͨ͠ωοτϫʔΫͱαʔόʔͷηΩϡϦςΟ ᶄ"84ͷαʔϏε܈ͷઃܭɾઃఆ ᶅ"84ૢ࡞ʹؔ͢Δݖݶʢ*".ʣ ᶆηΩϡϦςΟΛҡ࣋؅ཧ͢ΔͨΊͷ"84αʔϏε AWS Management Console Role VPC AWS Cloud Subnet Internet gateway Amazon Simple Storage Service (S3) VPN gateway Endpoints User ૢ࡞ݖݶ Instance Instance Instance AWS Lambda Role ᶅ ᶄ ᶃ AWS Command Line Interface AWS Config AWS Systems Manager AWS Service Catalog AWS Trusted Advisor AWS CloudTrail ᶆ ηΩϡϦςΟΛҡ࣋ ؅ཧ͢ΔαʔϏε

Slide 10

Slide 10 text

ᶃ"84಺ʹߏஙͨ͠ωοτϫʔΫͱ αʔόʔͷηΩϡϦςΟ #jawsug_bgnr ੹೚ڞ༗Ϟσϧͷ੺࿮ͷ෦෼ ઃܭͷߟ͑ํ͸ΦϯϓϨͱେ͖͘ҧΘͳ͍͕ɺઃఆͷ࢓ ํ͸"84ͷྲّྀʹै͏ඞཁ͕͋Δ IUUQTBXTBNB[PODPNKQDPNQMJBODFTIBSFESFTQPOTJCJMJUZNPEFM

Slide 11

Slide 11 text

ᶄ"84ͷαʔϏε܈ͷઃܭɾઃఆ ͍ΘΏΔϚωʔδυαʔϏε Ϣʔβʔࣗ਎ͰΧόʔ͢Δൣғ͸গͳ͍͕ɺαʔϏε͝ ͱʹಛੑΛཧղ͢Δඞཁ͕͋Δ 㱺·ͣ͸ɺ࢖͏΋ͷ͚֮ͩ͑Ε͹ྑ͍ IUUQTXXXTMJEFTIBSFOFU"NB[PO8FC4FSWJDFT+BQBOBXTXIJUFCFMUPOMJOFTFNJOBSBXT

Slide 12

Slide 12 text

ᶅ"84ͷૢ࡞ʹؔ͢Δݖݶʢ*".ʣ #jawsug_bgnr "84ͷηΩϡϦςΟͷத֩ͷҰͭ ͲΜͳʹωοτϫʔΫ΍αʔόʔͷηΩϡϦςΟΛڧݻʹ ͍ͯͯ͠΋ɺ"84Λ௚઀ૢ࡞͞ΕΔͱ͕݀։͚ΒΕΔ "84ͷബ͍ຊɹ*".ͷϚχΞοΫͳ࿩ IUUQTCPPUIQNKBJUFNT

Slide 13

Slide 13 text

ᶆηΩϡϦςΟΛҡ࣋؅ཧ͢Δ ͨΊͷ"84αʔϏε #jawsug_bgnr "84ಠࣗͷ෦෼ ར༻͠ͳͯ͘΋γεςϜΛηΩϡΞͳঢ়ଶΛҡ࣋Ͱ͖Δ͕ɺ ্ख͘׆༻͢ΔͱࣗྗͰ΍ΔΑΓഒָʹͳΔ "84ͷബ͍ຊᶘΞΧ΢ϯτηΩϡϦςΟͷϕʔγοΫηΦϦʔ IUUQTCPPUIQNKBJUFNT

Slide 14

Slide 14 text

"84ΞΧ΢ϯτͱ*".

Slide 15

Slide 15 text

"84ͷ̎ͭͷΞΧ΢ϯτ؅ཧ #jawsug_bgnr "84ΞΧ΢ϯτʢ3PPUϢʔβʔʣ "84ΞΧ΢ϯτ࡞੒࣌ʹར༻ ॳظઃఆ͕ऴΘΕ͹ར༻͠ͳ͍ͷ͕ݪଇ *".ʢ͜ΕΛ࢖͏ʣ "84ͷΞΫηε؅ཧͷ؊ ϢʔβʔɾϓϩάϥϜɾଞͷϦιʔε͔Β"84Λѻ͏ࣄ͕Ͱ͖Δ "84Λ࢖͏ʹ͸ɺ·ͣ*".Λཧղ͢Δඞཁ͕͋Δ

Slide 16

Slide 16 text

"84ΞΧ΢ϯτ #jawsug_bgnr "84ΞΧ΢ϯτʢ3PPUϢʔβʔʣ ̍ΞΧ΢ϯτʹ̍ͭͷΈͰɺΞΧ΢ϯτ಺ͷશͯͷૢ࡞͕Ͱ͖Δ *".ͷ஀ੜલ͸ɺ"84ΞΧ΢ϯτͰૢ࡞͢Δͱ͍͏຀Վతͳ࣌୅ͩͬͨ ΞΧ΢ϯτ୯ମͰ͸ɺ"84ΞΧ΢ϯτͷૢ࡞ͷ੍ݶ͕Ͱ͖ͳ͍ 㱺*1ΞυϨεʹΑΔ઀ଓݩ੍ݶ౳͕Ͱ͖ͳ͍ ݫີʹӡ༻͢Δ৔߹͸ɺ෺ཧ.'"Λઃఆۚ͠ݿͰ؅ཧ͢Δ৔߹΋͋Δ ˞"840SHBOJ[BUJPOTͰ࡞ͬͨ"84ΞΧ΢ϯτ͸ɺ ɹͦ΋ͦ΋ύεϫʔυ͕ൃߦ͞Εͣɺ"84440Λར༻લఏͩͬͨΓ͢Δ

Slide 17

Slide 17 text

#jawsug_bgnr "84Ϧιʔε΁ͷΞΫηε؅ཧ *".ͱ͸ʁ

Slide 18

Slide 18 text

*".ͷجຊػೳ

Slide 19

Slide 19 text

ᶃ*% 1BTTXPSE౳ ར༻ऀ ᶄਖ਼౰ੑͷ֬ೝ ೝূہ ᶅຊਓੑͷอূ ᶆϦιʔεͷׂ౰ αʔϏε *".ͷઆ໌ͷલʹ ೝূͱೝՄ ೝূ "VUIFOUJDBUJPOʣ ೝՄ ʢ"VUIPSJ[BUJPOʣ ୭Ͱ͋Δ͔ʁ ԿΛ࢖ΘͤΔͷ͔ʁ

Slide 20

Slide 20 text

*".ͷجຊػೳ #jawsug_bgnr *".͸୭ʹԿΛ࢖͑Δͷ͔؅ཧ͢Δػೳ *".Ϣʔβʔ ʜ ར༻ऀͷೝূ *".άϧʔϓ ʜ *".ϢʔβʔͷάϧʔϓԽ *".ϩʔϧ ʜ ਓؒҎ֎ʹ΋Ұ࣌తͳૢ࡞ݖݶΛ෇༩͢Δ࢓૊Έ *".ϙϦγʔ ʜ ෇༩͢ΔݖݶΛهड़ͨ͠΋ͷ ར༻ऀ ֎෦ Ϧιʔε "84 Ϧιʔε *".άϧʔϓ *".Ϣʔβʔ *".ϩʔϧ *". ϙϦγʔ "84 Ϧιʔε ୭ʹʁ ԿΛڐՄېࢭ͢Δ

Slide 21

Slide 21 text

*".Ϣʔβʔ #jawsug_bgnr *".Ϣʔβʔͷೝূͷ࢓ํ *%ύεϫʔυ ΞΫηεΩʔγʔΫϨοτΞΫηεΩʔ 㱺ͲͪΒ΋ݫີʹ؅ཧ͢Δඞཁ͕͋Δɻ ɹϚϧν"84ΞΧ΢ϯτ͕ҰൠԽͨ͠࠷ۙͰ͸ɺ ɹ͍͔ʹ*".ϢʔβʔΛ࡞Βͳ͍ͰઃܭʹͰ͖Δ͔͕ϙΠϯτʹͳΔ

Slide 22

Slide 22 text

*".ϩʔϧ #jawsug_bgnr *".ϩʔϧͱ͸ʁ ʢར༻ऀ͕ҙࣝͤͣʹʣҰ࣌తͳݖݶΛऔಘ͢Δ࢓૊Έ "84Ϧιʔε΍֎෦Ϧιʔε͔Β"84ϦιʔεΛར༻͢Δ৔߹ʹ࢖༻ "84440Ͱ*".Ϣʔβʔͷ୅ସ͢Δ৔߹ʹ΋*".ϩʔϧΛ࢖༻ Role AWS STS ΫϨσϯγϟϧ ϓϩάϥϜ *".Ϣʔβʔͷ৔߹ *".ϩʔϧͷ৔߹ EC2 Πϯελϯε ϓϩάϥϜ EC2 Πϯελϯε Πϯελϯε಺ʹΞΫη εΩʔɾγʔΫϨοτΞ ΫηεΩʔΛຒΊࠐΉඞ ཁ͕͋Δ *".ϩʔϧ͕Ұ࣌తͳೝ ূ৘ใΛऔಘ͢Δɻ

Slide 23

Slide 23 text

ઃܭํ਑ͱ࠷খݖݶ

Slide 24

Slide 24 text

*".ઃܭͷجຊํ਑ #jawsug_bgnr कΔ΂͖جຊํ਑͸͚̎ͭͩ ೝূ৘ใΛ౪·Εͳ͍Α͏ʹ͢Δӡ༻ઃܭ ΞΫηεΩʔʗγʔΫϨοτΞΫηεΩʔͰ͸ͳ͘ϩʔϧͷར༻ HJUTFDSFUTͷར༻΋ݕ౼ ೝূ৘ใ͕౪·Εͯ΋ඃ֐Λ࠷খݶʹ͢Δݖݶઃܭ .'"ඞਢԽ΍*1੍ݶ΍ͳͲͷར༻੍ݶ ࠷খݖݶͷઃఆ

Slide 25

Slide 25 text

ύλʔϯͷݪଇΛ౿·্͑ͨͰ ۩ମతͳઃܭʹམͱ͠ࠐΉ

Slide 26

Slide 26 text

ڞ௨Ͱར༻͢ΔϙϦγʔͰ·ͣݕ౼͢Δͷ͸͜ͷͭ .'"ඞਢԽ͸ඞͣ͢Δ͜ͱ *1੍ݶ͸ɺӡ༻ϙϦγʔͱ૬ஊɻ࡞ۀ৔ॴΛ੍ݶͰ͖Δͱ͍͏ޮՌ͕͋Δ #jawsug_bgnr .'"ඞਢԽͱ*1੍ݶ \ &⒎FDU%FOZ "DUJPO $POEJUJPO\ /PU*Q"EESFTT\ BXT4PVSDF*Q< > ^ ^ 3FTPVSDF ^ \ &⒎FDU%FOZ /PU"DUJPO< JBN > 3FTPVSDF $POEJUJPO\ #PPM*G&YJTUT\ BXT.VMUJ'BDUPS"VUI1SFTFOUGBMTF ^ ^ ^

Slide 27

Slide 27 text

"ENJOݖݶΛ෇༩্ͨ͠Ͱ੍ݶΛՃ͑Δ .'"ඞਢˍ*1ΞυϨε੍ݶ *1੍ݶΛͳͨ͘͢Ίͷ؅ཧऀ༻ϩʔϧ #jawsug_bgnr ؅ཧऀݖݶͷઃܭ 㱺εΠονલΛࢀরݖݶͷΈʹ͢Δͱ͍͏ઃܭ΋Α͋͘Δ

Slide 28

Slide 28 text

ϩάΠϯ࣌͸ࢀরݖݶͷΈ ࢀরݖݶͱ4XJUDI3PMFΛڐՄ͢ΔݖݶΛ෇༩ εΠονϩʔϧ͢Δ͜ͱʹΑΓ؅ཧऀݖݶ͕ར༻Մೳ ஈΫογϣϯΛஔ͘͜ͱʹΑΓɺΦϖϛεͷ๷ࢭޮՌΛૂ͏ #jawsug_bgnr ؅ཧऀݖݶͷ҆શઃܭ

Slide 29

Slide 29 text

Ұ൪೰·͍͠ͷ͕։ൃऀ޲͚ݖݶ "84ͷ։ൃʹ͸*".ϩʔϧͷ࡞੒ݖݶ͕ඞཁʹͳ͖͍ͬͯͯΔ ؅ཧऀݖݶΛ෇༩্ͨ͠Ͱɺ1FSNJTTJPO#PVOEBSZͷ׆༻͔ʁ αϯυϘοΫεΞΧ΢ϯτͷํָ͕ͩͬͨΓʁ #jawsug_bgnr ։ൃऀͷઃܭ ͋ͱ࡞ͬͨ*".ϩʔϧɾϙϦγʔͷςετํ๏ΛԿͱ͔͍ͨ͠

Slide 30

Slide 30 text

1SJODJQBMΛߜΒͳ͍ͱɺશϢʔβʔ͕εΠονͰ͖Δ σϑΥϧτςϯϓϨʔτͷઃఆ͸ɺΞΧ΢ϯτ಺ͷϢʔβʔʹରͯ͠ ߜΔඞཁ͕͋ΓɺϢʔβʔࢦఆͰߜΔʢάϧʔϓ͸Ͱ͖ͳ͍ʣ ผղͱͯ͠"TTVNF3PMFͷݖݶΛ͢΂ͯണୣͷ͏͑ͰɺඞཁͳϢʔβʔʹ ෇༩͢Δͱ͍͏ํ๏΋͋Δ #jawsug_bgnr εΠονϩʔϧͷ஫ҙ఺ \ 7FSTJPO 4UBUFNFOU< \ &⒎FDU"MMPX 1SJODJQBM\ "84 BSOBXTJBNSPPU ^ "DUJPOTUT"TTVNF3PMF $POEJUJPO\^ ^ > ^ \ 7FSTJPO 4UBUFNFOU< \ &⒎FDU"MMPX 1SJODJQBM\ "84BSOBXTJBNVTFSUFTU VTFS ^ "DUJPOTUT"TTVNF3PMF $POEJUJPO\^ ^ > ^

Slide 31

Slide 31 text

ϕετϓϥΫςΟε͚ͩͲɻɻɻ ઃܭ͕ݻ·্ͬͨͰɺ*".ʹؔ͢Δߴ౓ͳ஌͕ࣝඞཁ ϓϩάϥϜతͳར༻ʹ͸޲͍͍ͯΔ͕ɺ"84ίϯιʔϧ͔Βͷར༻͸޲͍ ͍ͯͳ͍ ৽نαʔϏεͷ௥Ճʹऑ͍ ͦ΋ͦ΋"ENJOݖݶΛ͍࣋ͬͯΔਓ͔͠࠷খݖݶΛ௥ٻͰ͖ͳ͍ ઃܭɾӡ༻޻਺͕େ͖͍ ݱ࣮తͳӡ༻ ఆܕతͳ࡞ۀʢ-BNCEBɾόον౳ʣͷΈ࠷খݖݶΛ෇༩ ਓؒܥͷ࡞ۀ͸ɺϒϥοΫϦετͷ׆༻΋ࢹ໺ʹ ηΩϡϦςΟࣄނΛى͜͞ͳ͍ͱ͍͏؍఺Ͱ࠷খݖݶΛ୳ٻ #jawsug_bgnr ࠷খݖݶͷδϨϯϚ