테라폼으로 ECR 관리하기 (How to Manage ECR with Terraform)

Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022
All Rights Reserved. పۄಬਵ۽ ECR ҙܻೞӝ How to Manage AWS ECR with Terraform ߅ ߽૓ (Byungjin Park) · ௿۽٘ (Claud) · Site Reliability Engineer @ ׼Ӕಕ੉ AWS KRUG Container Jul 12, 2022

speaker ߊ಴੗ ࣗѐ Byungjin Park · ⌂ posquit0.com · posquit0
Copyright © 2022 All Rights Reserved. ߅߽૓ / @posquit0 / ௿۽٘ (Claud) (അ) Site Reliability Engineer @ ׼Ӕಕ੉ (੹) Director of Infrastructure Division @ ஠ࢎ௏ܻই (੹) Software Architect @ ১פযझ   (੹) Co-founder & Software Engineer @ ஠೒ۖ HashiCorp Ambassador / AWS Community Builder   Ҵઁ೧ఊ؀ഥ DEFCON CTF ࠄࢶ 6ഥ ૓୹ ೞद௏೐ ೠҴ ࢎਊ੗ ݽ੐ ਍৔ ೠҴ੄ য়೑ࣗझ ઺ GitHub 15,000ѐ ੉࢚੄ झఋܳ ߉਷ ೐۽ં౟

All Rights Reserved. Agenda intro AWS ECR 101 Terraform Modules for AWS ECR AWS ECR ࢲ࠺झ੄ ӝࠄ੸ੋ ղਊী ؀೧ ࢓ಝࠇפ׮. AWS ECRਸ ബਯ੸ਵ۽ ҙܻೞӝ ਤೠ పۄಬ ݽٕਸ ݅ٚ җ੿ী ؀೧ ҕਬ೤פ׮. Terraform Workspace for AWS ECR పۄಬ ਕ௼झಕ੉झ ࢚ীࢲ पઁ۽ AWS ECRਸ ҙܻೞח ߑߨਸ ҕਬ೤פ׮. Extra for AWS ECR AWS ECRҗ ా೤ؼ ࣻ ੓ח ׮ܲ AWS ࢲ࠺झܳ рױೞѱ ࢓ಝࠇפ׮.

All Rights Reserved. ઱ਃ ҳࢿਃࣗ ECR਷ ೐ۄ੉ࡁ ੷੢ࣗ৬ ಌ࠶ܼ ੷੢ࣗܳ ઁҕ೤פ׮. Private Registry Private Repository Public Registry Container Image Container Image Container Image Container Image Private Repository Public Repository Public Repository AWS ECR 101

All Rights Reserved. ઱ਃ ҳࢿਃࣗ ੉ߣ दрীח ೐ۄ੉ࡁ ੉޷૑ ੷੢ࣗী ؀೧ࢲ݅ ׮ܛפ׮. 😁 Private Registry Private Repository Public Registry Container Image Container Image Container Image Container Image Private Repository Public Repository Public Repository AWS ECR 101

All Rights Reserved. ECR Private Registry AWS ҅੿੄ п ܻ੹ ױਤ۽ ஶప੉ց ੉޷૑ ੷੢ࣗ ਍৔ ೞա੄ ۨ૑झ౟ܻח ৈ۞ ੉޷૑ ۨನ૑షܻ ҙܻ ૑৉ ࢲ࠺झ (Regional Service) ੉޷૑ ੷੢ࣗ р ࠂઁ (Replication) — Cross Regions / Cross Accounts ੉޷૑ ࠙ࢳਸ ాೠ ࠁউ ஂড੼ Ѩࢎ (Scanning) ಽ झܖ நद (Pull-through Cache) ׮নೠ ࠗо ӝמ ઁҕ ࢎਊ੗ח ۨ૑झ౟ܻী ؀ೠ ࣁࠗ ࢸ੿݅ ߸҃ೡ ࣻ ੓णפ׮. ECR ೐ۄ੉ࡁ ۨ૑झ౟ܻח AWS ҅੿੄ п ܻ੹݃׮ ೞաঀ ੉޷ ٜ݅যઉ ੓ਵݴ AWS ECR 101

All Rights Reserved. ޖट పۄಬ ݽٕਸ ٜ݅ Ѫੋо? Terraform Modules for AWS ECR ੉ۧѱ 7ѐ੄ పۄಬ ܻࣗझী ؀೧ࢲ Ҋ޹೧ࠁݶ غѷҵਃ? aws_ecr_lifecycle_policy aws_ecr_pull_through_cache_rule aws_ecr_registry_policy aws_ecr_registry_scanning_con fi guration aws_ecr_repository aws_ecr_repository_policy aws_ecr_replication_con fi guration

ecr-registry ecr-repository Byungjin Park · ⌂ posquit0.com · posquit0 Copyright
© 2022 All Rights Reserved. ޖट పۄಬ ݽٕਸ ٜ݅ Ѫੋо? Terraform Modules for AWS ECR ۨ૑झ౟ܻ৬ ۨನ૑షܻ пп ҙ۲ػ ܻࣗझٜਸ ޘযࠇद׮! 💪💪 aws_ecr_lifecycle_policy aws_ecr_pull_through_cache_rule aws_ecr_registry_policy aws_ecr_registry_scanning_con fi guration aws_ecr_repository aws_ecr_repository_policy aws_ecr_replication_con fi guration

All Rights Reserved. పۄಬ ݽٕ: ecr-registry Terraform Modules for AWS ECR ECR ۨ૑झ౟ܻ੄ ੿଼ ࠂઁ(Replication)৬ ಽ झ۽ நद(Pull-through Cache) ੿଼ ੘ࢿ aws_ecr_registry_policy ecr-registry aws_ecr_pull_through_cache_rule aws_ecr_registry_policy aws_ecr_registry_scanning_con fi guration aws_ecr_replication_con fi guration 0..1 1 0..N 0..1 ECR ۨ૑झ౟ܻ੄ ࠁউ झந׬ ࢸ੿ਵ۽ ӝࠄ ч਷ BASIC ఋੑ झந׬ ENHANCED ఋੑ झந׬ਸ ా೧ AWS Inspector ӝ߈ ࠁউ Ѩࢎ оמ aws_ecr_registry_scanning_con fi guration ECR੉ ૑ਗೞח ಌ࠶ܼ ੷੢ࣗ(quay.io / ECR Public)੄ நय ҃۽ ࢸ੿ aws_ecr_pull_through_cache_rule ECR ۨನ૑షܻٜਸ ࠂઁೡ ݾ੸૑ ECR ۨ૑झ౟ܻ ੿ࠁ ࢸ੿ aws_ecr_replicatoin_con fi guration

All Rights Reserved. పۄಬ ݽٕ: ecr-repository Terraform Modules for AWS ECR ecr-repository aws_ecr_lifecycle_policy aws_ecr_repository aws_ecr_repository_policy 1 0..1 0..1 ECR ۨನ૑షܻ aws_ecr_repository ECR ۨನ૑షܻ੄ ܻࣗझ ੿଼ਵ۽ ۨನ૑షܻী ؀ೠ ੽Ӕ ాઁ aws_ecr_repository_policy ECR ۨನ૑షܻ੄ ੉޷૑ ۄ੉೐ࢎ੉௿ ੿଼ ࢸ੿ aws_ecr_lifecycle_policy

All Rights Reserved. పۄಬ ݽٕ Ѿҗޛ Terraform Modules for AWS ECR https://github.com/tedilabs/terraform-aws-container tedilabs/terraform-aws-container https://registry.terraform.io/modules/tedilabs/container/aws/ झఋ / ನ௼ / ஶ౟ܻ࠭࣌ / झಪࢲ ݽف ജ৔೤פ׮…! 🥕 🥕

All Rights Reserved. VPC PrivateLink ా೤ Extra for AWS ECR AWS VPC৬ ؀࢚ ࢲ࠺झ р উ੹ೠ োѾਸ ਤೠ ӝࣿ Ҋоਊࢿ (High Availability) ߂ ഛ੢ࢿ (Scalability) ઁҕ ૑ਗೞח ؀࢚ ࢲ࠺झ - AWS ࢲ࠺झ (S3, ECR, KMS ١) - ׮ܲ AWS ҅੿ ࢚ীࢲ ઁҕೞח ࢲ࠺झ (VPC Endpoint Service) - AWS ݃௄೒ۨ੉झ ࢚੄ ౵౟ց ࢲ࠺झ AWS VPC PrivateLink A highly available, scalable technology that enables you to privately connect your VPC to supported AWS services,   services hosted by other AWS accounts (VPC endpoint services), and supported AWS Marketplace partner services.

All Rights Reserved. VPC PrivateLink ా೤ Extra for AWS ECR بழ ۨ૑झ౟ܻ APIܳ ਤೠ ূ٘ನੋ౟ ৈ۞ ࢲ࠳ بݫੋ — *.dkr.ecr.ap-northeast-2.amazonaws.com com.amazonaws.region.ecr.dkr AWS ECR APIܳ ਤೠ ূ٘ನੋ౟ ױੌ بݫੋ — api.ecr.ap-northeast-2.amazonaws.com com.amazonaws.region.ecr.api

All Rights Reserved. Con fi g ҙܻഋ ӏ஗ ഝਊ Extra for AWS ECR AWS ܻࣗझ ҳࢿਸ ૑ࣘ੸ਵ۽ ݽפఠ݂ ߂ ӝ۾ೞҊ ӏ੿ ળࣻ ಣоܳ ૑ਗೞח ҙܻഋ ࢲ࠺झ - ఋ੐ۄੋ ࠭ܳ ా೧ ܻࣗझ ߸҃ࢎ೦ ୶੸ - ܻࣗझ р ੄ઓࢿ ҙ҅ ୶੸ - AWS SNS োزਸ ా೧ ܻࣗझ ߸҃ ঌۈ - Compliance as Codeܳ ాೠ Ѣߡքझ ߂ ӏ੿ ળࣻ ৈࠗ ઑࢎ AWS Con fi g Record and evaluate con fi gurations of your AWS resources

ࣻಣ੸ੋ ࣗా — ૒ә X / ৔য੉ܴ / न܉৬ ୽ج
/ ైݺೠ ੿ࠁ ҕਬ ੗ਯҗ ଼੐ — מز੸ সޖ ࣻ೯ / ੗ਯ੸ ౸ױ ૌѩѱ ࢿ੢ — աࠁ׮ ڪযդ زܐ / ౱ ਕ௼ / ૌѢ਑ ࢎਊ੗ ઺ब ࢎҊ — ࢎਊ੗ о஖ ୭਋ࢶ / ࢎਊ੗৬ ੿ࢲ੸ োѾ recruiting ੋ೐ۄ ౱ীࢲ ೣԋ ೡ زܐܳ ଺ইਃ! 👋 Byungjin Park · ⌂ posquit0.com · posquit0 Copyright © 2022 All Rights Reserved. ੗ࣁೠ ղਊ਷ daangn.team ਸ ߑޙ೧઱ࣁਃ! :) SRE (Site Reliability Engineer) ׼Ӕಕ੉ ੋ೐ۄ ҳ୷ ߂ ਍৔ Data Engineer ׼Ӕಕ੉ ؘ੉ఠ ೒ۖಬ ҳ୷ ߂ ਍৔ ਋ܻח ੉ۧѱ ੌ೧ਃ ഌఖ ߂ ࠂ૑ ੗ਯ੸ੋ ോо / ਬো ୹ృӔ / ੗ਯ ध࠺ ߂ рध࠺ ૑ਗ झగ٬ ؘझ௼ & ೲݢ޻۞ ੄੗ ઁҕ / بࢲ ҳݒ ߂ Үਭ࠺ ૑ਗ

테라폼으로 ECR 관리하기 (How to Manage ECR wi...

테라폼으로 ECR 관리하기 (How to Manage ECR with Terraform)

More Decks by Byungjin Park

Other Decks in Programming

Featured

Transcript