Tweet
Tweet

Slide 1

Slide 1 text

AWS IAM Ͱ MFA ༗ޮͰͳ͍ϢʔβΛ
 awscli + Mackerel Ͱ؂ࢹ͢Δ Kosen10s LT#14 do_su_0805

Slide 2

Slide 2 text

ΞδΣϯμ w 5-%3 w ߏ੒ਤ w ֤छઃఆ

Slide 3

Slide 3 text

5-%3 • awscli ͷ `aws iam` Λ࢖͏ͱɺMFA ͕༗ޮͰͳ͍Ϣʔβ͕ൈ͖ग़ͤΔ
 ◦ ҰൃͰ͸ൈ͖ग़ͤͳ͍ͷͰɺ૊Έ߹Θ͍ͤͯ͘
 ◦ ϋʔυ΢ΣΞΩʔͳϢʔβ͚ͩൈ͖ग़͢ͷ͕ͪΐͬͱେม
 • ͦͷ਺Λ Mackerel ͷϝτϦοΫͱͯ͠౤ߘ͠ɺ؂ࢹ͢Δ
 ◦ ϝτϦοΫͱͯ͠ඞཁͳ͍ͳΒɺνΣοΫ؂ࢹͰ΋ಉ͜͡ͱ͕Ͱ͖Δ

Slide 4

Slide 4 text

ߏ੒ਤ ਤߏ੒ਤ

Slide 5

Slide 5 text

BXTDMJʹ͍ͭͯ l"84ίϚϯυϥΠϯΠϯλʔϑΣΠε $-* ͸ɺ"84αʔϏεΛ؅ཧ͢ ΔͨΊͷ౷߹πʔϧͰ͢ɻμ΢ϯϩʔυ͓Αͼઃఆ༻ͷ୯ҰͷπʔϧͷΈΛ ࢖༻ͯ͠ɺίϚϯυϥΠϯ͔Βෳ਺ͷ"84αʔϏεΛ੍ޚ͠ɺεΫϦϓτ Λ࢖༻ͯ͜͠ΕΒΛࣗಈԽ͢Δ͜ͱ͕Ͱ͖·͢ɻz 
 "84ίϚϯυϥΠϯΠϯλʔϑΣΠεIUUQTBXTBNB[PODPNKQDMJ
 !5

Slide 6

Slide 6 text

.BDLFSFMʹ͍ͭͯ l.BDLFSFMʢϚΧϨϧʣ͸ɺӡ༻தͷΫϥ΢υ΋͘͠͸ΦϯϓϨϛεͷαʔ όʹΤʔδΣϯτΛͭೖΕΔ͚ͩͰɺ؆୯ʹαʔό؅ཧΛ࢝ΊΒΕ·͢ɻ ؂ࢹαʔόࣗ਎ͷߏஙɾӡ༻͸ෆཁͰ͢ɻ͞ΒʹෛՙͷϦιʔεঢ়گͳͲͷ ਺஋ΛάϥϑʹՄࢹԽ͠·͢ɻো֐ൃੜ࣌ʹ͸Ξϥʔτ͕ه࿥͞Εɺ༷ʑͳ πʔϧʹ௨஌Ͱ͖·͢ɻγεςϜӡ༻อकʹ࠷దͳ؂ࢹαʔϏεͰ͢ɻz 
 ಛ௕ͱػೳಛ௕z l.BDLFSFMʢϚΧϨϧʣ৽ੈ୅ͷαʔό؅ཧɾ؂ࢹαʔϏε
 IUUQTNBDLFSFMJPKBGFBUVSFT
 !6

Slide 7

Slide 7 text

ਤ.BDLFSFM
 IUUQTNBDLFSFMJPKB

Slide 8

Slide 8 text

BXTDMJΛ࢖ͬͯ৘ใΛऔಘ͢Δ w ొ৔͢ΔίϚϯυ͸ͭ w BXTJBNMJTUVTFST w "84*".ϢʔβͷҰཡΛऔಘ w BXTJBNMJTUWJSUVBMNGBEFWJDFT w "84*".ʹొ࿥͞Ε͍ͯΔԾ૝.'"σόΠεҰཡΛऔಘ w BXTJBNMJTUNGBEFWJDFTVTFSOBNF\VTFS^ w "84*".ʹొ࿥͞Ε͍ͯΔɺಛఆϢʔβͷ.'"σόΠεҰཡΛऔಘ

Slide 9

Slide 9 text

BXTDMJΛ࢖ͬͯ৘ใΛऔಘ͢Δ  MJTUVTFSTͰϢʔβҰཡΛग़͢ w BXTJBNMJTUVTFSTcKR6TFST<>cTFMFDU 1BTTXPSE-BTU6TFEOVMM c6TFS/BNFScTPSU w JBNMJTUVTFSTͷ݁Ռ͔ΒɺʮύεϫʔυϩάΠϯͨ͠ϢʔβʯͷҰཡ Λऔಘ

Slide 10

Slide 10 text

BXTDMJΛ࢖ͬͯ৘ใΛऔಘ͢Δ  MJTUWJSUVBMNGBEFWJDFTͰ༗ޮͳԾ૝.'"σόΠεͷॴ༗ऀΛग़͢ w BXTJBNMJTUWJSUVBMNGBEFWJDFTcKR7JSUVBM.'"%FWJDFT<>cTFMFDU &OBCMF%BUFOVMM a
 c6TFS6TFS/BNFScTPSU w JBNMJTUWJSUVBMNGBEFWJDFTͷ݁Ռ͔ΒɺԼهͷΑ͏ʹߜΓࠐΉ w ʮԾ૝.'"σόΠεҰཡ͔Βʯ w ʮ༗ޮͳσόΠεͷҰཡΛग़͠ʯ w ʮͦͷॴ༗ऀΛऔಘ͢Δʯ

Slide 11

Slide 11 text

BXTDMJΛ࢖ͬͯ৘ใΛऔಘ͢Δ  MJTUNGBEFWJDFTͰಛఆϢʔβʹ༗ޮͳ.'"σόΠε͕͋Δ͔Λௐ΂Δ w GPSVTFSJO ʮʯͷ݁Ռͱʮʯͷ݁Ռͷࠩ෼Ϣʔβ EP
 BXTJBNMJTUNGBEFWJDFTVTFSOBNF\VTFS^cKR.'"%FWJDFT<>a
 cTFMFDU &OBCMF%BUFOVMM c6TFS/BNFS
 EPOF w ʮʯͱʮʯͷ݁Ռͷࠩ෼ͱͯ͠දࣔ͞ΕͨϢʔβ͕ɺଞʹσόΠε͕ͳ͍͔Λௐ΂Δ w ʮʯͷ݁Ռ͸ʰԾ૝.'"σόΠεʱͳͷͰϋʔυ΢ΣΞΩʔ͸ೖΒͳ͍ w ͔ͱ͍ͬͯɺʮʯͰऔಘͨ͠શϢʔβΛ্هͰݕࡧ͢Δͷ΋ͳ͊ɾɾɾ w ௐ΂ͯɺݟ͔ͭͬͨΒʮʯಉ༷ʹϢʔβ໊Λऔಘ͢Δ

Slide 12

Slide 12 text

BXTDMJΛ࢖ͬͯ৘ใΛऔಘ͢Δ  औಘ݁ՌΛ΋ͱʹ·ͱΊΔ w ʮʯͷ݁ՌશϢʔβʜ" w ʮʯͷ݁ՌԾ૝.'"σόΠεͰ.'"͍ͯ͠ΔϢʔβʜ# w ʮʯͷ݁Ռϋʔυ΢ΣΞσόΠεͰ.'"͍ͯ͠ΔϢʔβʜ$ w #ͱ$ͷVOJR߹ܭ.'"༗ޮͳϢʔβʜ% w "ͱ%ͷࠩ෼.'"͕༗ޮͰͳ͍Ϣʔβ

Slide 13

Slide 13 text

.BDLFSFMͰ؂ࢹ͢Δ w ࢼ͠ʹ ϗετϝτϦοΫͱͯ͠.BDLFSFMʹ౤ߘ͢Δ w NBDLFSFMBHFOUDPOGʹ͜Μͳײ͡ʹॻ͍ͯ w 
 DPNNBOEl Χ΢ϯτεΫϦϓτ l w ͜Μͳײ͡ʹεΫϦϓτ͕ग़ྗ͢Δͱ ۭന͸UBC  w "84@*".BMMVTFST
 "84@*".WJSUVBMNGBVTFST
 "84@*".IBSEXBSFNGBVTFST
 "84@*".XSPOH@VTFS

Slide 14

Slide 14 text

.BDLFSFMͰ؂ࢹ͢Δ w ࢼ͠ʹ ϗετϝτϦοΫͱͯ͠.BDLFSFMʹ౤ߘ͢Δ w ͜͏ͳΔ
 ਤ౤ߘྫ

Slide 15

Slide 15 text

.BDLFSFMͰ؂ࢹ͢Δ w αʔϏεϝτϦοΫͱͯ͠.BDLFSFMʹ౤ߘ͢Δͱ͖͸ w ͖ͬ͞ͷܭࢉ݁ՌΛ"1*ܦ༝Ͱ౤ߘͨ͠Γ w BQJWTFSWJDFTTFSWJDF/BNFUTECʹ1045͢Δ w ͖ͬ͞ͷܭࢉ݁ՌΛNLSUISPXͰ౤ߘͨ͠Γ w ্ه"1*ͷXSBQQFS

Slide 16

Slide 16 text

.BDLFSFMͰ؂ࢹ͢Δ w νΣοΫ؂ࢹͰ؂ࢹ͢Δ৔߹ʢϢʔβ਺͸͍Βͳ͍ਓ޲͚ʣ w NBDLFSFMBHFOUDPOGʹ͜Μͳײ͡ʹॻ͍ͯ w 
 DPNNBOEl Χ΢ϯτεΫϦϓτ l w εςʔλε ͱҰॹʹϝοηʔδ Λฦ͢εΫϦϓτΛஔ͘ w ʮ.'"༗ޮ͡Όͳ͍Ϣʔβ͕ʯͳΒ0, FYJU  w ʮ.'"༗ޮ͡Όͳ͍Ϣʔβ͕͡Όͳ͍ʯͳΒͩΊ
  FYJU

Slide 17

Slide 17 text

.BDLFSFMͰ؂ࢹ͢Δ w ؂ࢹϧʔϧͰ͢Δ৔߹ Ϣʔβ਺ͷਪҠͳͲ΋ཉ͍͠ਓ޲͚ʣ w ϗετPSαʔϏεϝτϦοΫͱͯ͠౤ߘ͢Δ w ؂ࢹϧʔϧΛӈͷΑ͏ʹ࡞੒͢Δ ਤ؂ࢹϧʔϧͷઃఆྫ