Slide 1
Slide 1 text
AWS Control Tower
SESSION 04
Slide 2
Slide 2 text
@modokkin
2018
Youtube
🙇
https://www.youtube.com/c/timesyappliradio
Slide 3
Slide 3 text
INDEX
01
02
03
04
05
AWS
AWS Control Tower
AWS Control Tower
AWS Control Tower
Slide 4
Slide 4 text
01
AWS
Slide 5
Slide 5 text
AWS CloudTrail
AWS
AWS Con
fi
g
AWS
AWS Organizations
AWS IAM Identity Center
(AWS Single Sign-On )
Slide 6
Slide 6 text
AWS
Production Staging
Production Account
Develop
AWS CloudTrail AWS Con
fi
g
Slide 7
Slide 7 text
Production Staging
Production Account
Develop
Develop Account
AWS CloudTrail AWS Con
fi
g AWS CloudTrail AWS Con
fi
g
Slide 8
Slide 8 text
Production Staging
Production
Corporate
AWS CloudTrail AWS Con
fi
g
Develop Corporate
Develop
AWS CloudTrail AWS Con
fi
g AWS CloudTrail AWS Con
fi
g
Slide 9
Slide 9 text
Production Staging
Production
etc.
Develop
Develop
Corporate
Corporate
Slide 10
Slide 10 text
AWS Organizations
Workloads OU
Production OU
SCP
Staging OU
Develop OU
SCP
SCP
Security OU
SCP
SCP
Exceptions OU
SCP
Slide 11
Slide 11 text
AWS IAM Identity Center
(AWS Single Sign-On )
IAM User
IAM
AWS IAM Identity Center
okta
Slide 12
Slide 12 text
AWS IAM Identity Center IAM
AWS Organizations
( OU SCP )
SCP( )
1
AWS Config
Slide 13
Slide 13 text
AWS
Slide 14
Slide 14 text
02 AWS Control Tower
Slide 15
Slide 15 text
AWS
: https://aws.amazon.com/jp/controltower/
Slide 16
Slide 16 text
Guardrails( )
AWS Control Tower
Amazon S
3
SSH DB
Slide 17
Slide 17 text
Landing Zone ( )
• AWS
( )
AWS Control Tower
H
Slide 18
Slide 18 text
AWS CloudTrail AWS Con
fi
g
AWS Organizations
AWS ControlTower
Slide 19
Slide 19 text
03 AWS Control Tower
Slide 20
Slide 20 text
1
. AWS
2
.
3. AWS
4
. AWS Control Tower
5
.
6
.
Control Tower Workshops https://controltower.aws-management.tools/ja/
Slide 21
Slide 21 text
( )
AWS Control Tower 🤗
Slide 22
Slide 22 text
AWS Control Tower
Slide 23
Slide 23 text
04 AWS Control Tower
Slide 24
Slide 24 text
•
https://docs.aws.amazon.com/ja_jp/controltower/latest/userguide/accounts.html
AWS Organizations
Slide 25
Slide 25 text
AWS CloudTrail
Amazon S3 🆕
KMS
Slide 26
Slide 26 text
No content
Slide 27
Slide 27 text
築
Slide 28
Slide 28 text
05
Slide 29
Slide 29 text
AWS IAM MFA
Amazon S3
Slide 30
Slide 30 text
Slack
AWS Chat Bot Amazon CloudWatch
Slide 31
Slide 31 text
Okta 築
• AWS Control Tower AWS IAM Identity Center(AWS SSO)
• Okta
Okta
Okta AWS IAM Identity Center 築
Slide 32
Slide 32 text
No content
Slide 33
Slide 33 text
AWS Control Tower
AWS
AWS Control Tower
Slide 34
Slide 34 text
AWS
Slide 35
Slide 35 text
No content
Slide 36
Slide 36 text
AWS Control Tower
Yappli Tech Blog
https://tech.yappli.io/entry/
yapplitechconf2022-sre
Slide 37
Slide 37 text
🙇