Upgrade to Pro — share decks privately, control downloads, hide ads and more …

AliEaters#2_AliCloudを自分なりに整理してみた

Qiu
March 20, 2018

 AliEaters#2_AliCloudを自分なりに整理してみた

本資料はAliEaters#5(2018/03/20)での発表資料になります。イベントの詳細は下記のリングにてご確認ください
https://alibabacloud.connpass.com/event/80249/

Qiu

March 20, 2018
Tweet

More Decks by Qiu

Other Decks in Technology

Transcript

  1. 8IPBN* ᧉ 2JV #JOCJO  தࠃ͔Βདྷ೔  େֶଔۀޙɺ๭௨৴ձࣾʹब৬  "84ηΩϡϦςΟ؅ཧ౷੍ɺར༻αϙʔτ

     ΞδϟΠϧ։ൃ ๏ਓ޲͚γεςϜͷΦϑγϣΞ։ൃ ݸਓతͳ׆ಈ  ίϛϡχςΟͰमۀத  +"84%":4౰೔ελοϑ  +"84%":4ࠃࡍϘϥϯςΟதࠃޠͰͷ4/413
  2. "MJCBCB$MPVEͷϓϩμΫτ঺հ Ұ෦ Alibaba Cloud)*&#'   AWS$+(%  1 

    " Remake & Enhance   ! "UUFOUJPO
  3. جຊతͳαʔϏε͔Β "* #JH%BUB .-·Ͱ ϓϩμΫτ  "MJCBCB$MPVE தࠃαΠτ ϓϩμΫτҰཡ 18/03/18

     https://cn.aliyun.com/ Alibaba Cloud    Ծ૝αʔό "* #JH%BUB .-
  4. "MJCBCB$MPVEΛࣗ෼ͳΓʹ੔ཧͯ͠Έͨ $% #% %% !%     %$

    $%/ ίϯϐϡʔτ  ηΩϡϦςΟ  ωοτϫʔΫ  Ϛωʔδϝϯτ  σʔλϕʔε  $%/  ετϨʔδόοΫΞοϓ  7  " 
  5. "MJCBCB$MPVE αʔϏε֓ཁ "84 Ӡ෰ث&$4 &MBTUJD$PNQVUF4FSWJDF ֤छԾ૝ίϯϐϡʔςΟϯάαʔό &$ ੑߴੑೳࢉ &)1$ &)1$

    (16Ӡ෰ث &MBTUJD(164FSWJDF '1("Ӡ෰ثʢᬐதʣ ੑདۚଐ෰ث ਆ ެத 9%SBHPO$MPVE4FSWFS ϕΞϝλϧ ྔ༻෰ث 4JNQMF"QQMJDBUJPO4FSWFS &$4ΑΓ௿εϖοΫͷ Ծ૝ίϯϐϡʔςΟϯάαʔό -JHIUTBJM "MJCBCB$MPVE ίϐϡʔςΠϯά              $%/
  6. "MJCBCB$MPVE ίϐϡʔςΠϯά  "MJCBCB$MPVE αʔϏε֓ཁ "84 ੑ৳ "VUP4DBMJOH &$4Ϧιʔεͷར༻ঢ়گʹΑΓɺࣗಈతʹ εέʔϧ͢ΔαʔϏε

    "VUP4DBMJOH ༰ث෰ $POUBJOFS4FSWJDF %PDLFSίϯςφαʔϏε &$4 ༰ث෰,VCFSOFUFT൛ʢެ தʣ ,VCFSOFUFTͷίϯςφαʔϏε ,$4 ༰ث૾෰ʢެதʣ $POUBJOFS3FHJTUSZ ίϯςφΠϝʔδΛ؅ཧ͢ΔαʔϏε &$3 ൷ྔࢉ #BUDI$PNQVUF όονॲཧαʔϏε #BUDI വ਺ࢉ 'VODUJPO$PNQVUF αʔόϨεͰϓϩάϥϜΛ࣮ߦ͢ΔαʔϏε -BNCEB             $%/
  7. "MJCBCB$MPVE ωοτϫʔΫ  "MJCBCB$MPVE αʔϏε֓ཁ "84 ༗᠓71$ 7JSUVBM1SJWBUF$MPVE Ծ૝ϓϥΠϕʔτωοτʔϫʔΫαʔϏε 71$

    ۉߧ 4-# 4FSWFS-PBE#BMBODFS Ծ૝ϩʔυόϥϯαʔ &-# /"5᠓䎔 /"5(BUFXBZ /"5 /"5(BUFXBZ ੑެ᠓ *1 &MBTUJD*1"EESFTT άϩʔόϧ*1 &*1 %%P4ߴ๷*1 %%P4ରࡦʹಛԽͨ͠άϩʔόϧ*1 &*1             $%/
  8. "MJCBCB$MPVE ωοτϫʔΫ  "MJCBCB$MPVE αʔϏε֓ཁ "84 ߴ଎௨ಓ &YQSFTT$POOFDU ҟͳΔ71$ؒɺΫϥ΢υͱΦϯϓϨϛεΛ઀ଓ͢Δ ϚωʔδυωοτϫʔΫαʔϏε

    %JSFDU$POOFDU 71$1FFSJOH 71/᠓䎔 71/(BUFXBZ ҟͳΔωοτϫʔΫؒͷ71/઀ଓαʔϏε 7JSUVBM1SJWBUF (BUFXBZ ڞڗྲྀྔแ &$4ɺ&*1ɺ4-#ͱ/"5͕ফඅ͢ΔωοτϫʔΫτ ϥϑΟοΫͷܖ໿ύοέʔδ ରԠαʔϏε͕ ͳ͍͕ɺ 3*తͳ ίετΛ҆͘͠ ͯ͘ΕΔ΋ͷ ڞڗ &$4ɺ&*1ɺ4-#ͱ/"5͕ফඅ͢ΔωοτϫʔΫଳ Ҭͷܖ໿ύοέʔδ             $%/
  9. "MJCBCB$MPVE σʔλϕʔε  "MJCBCB$MPVE αʔϏε֓ཁ "84 Ӡ਺ਾ .Z42-൛ "QTBSB%# GPS.Z42-

    "MJCBCB$MPVEͷ .Z42-൛σʔλϕʔεαʔϏε 3%4 Ӡ਺ਾ 42-4FSWFS൛ "QTBSB%# GPS4FSWFS "MJCBCB$MPVEͷ 42-4FSWFS൛σʔλϕʔεαʔϏε Ӡ਺ਾ 1PTUHSF42-൛ "QTBSB%# GPS1PTUHSF42- "MJCBCB$MPVEͷ 1PTUHSF42-൛σʔλϕʔεαʔϏε Ӡ਺ਾ 10-"3%#ʢެத "QTBSB%# GPS10-"3%# "MJCBCB$MPVEಠࣗ։ൃͨ͠σʔλϕʔε "VSPSB ෼෍ࣜ䎔ܥܕ਺ਾ෰ %JTUSJCVUFE3FMBUJPOBM %BUBCBTF4FSWJDF "MJCBCB$MPVEಠࣗ։ൃͨ͠෼ࢄܕ3%4 εςʔτϨεɺϑϨΩγϒϧɺߴ͍҆ఆੑ "VSPSB 4FSWFSMFTT Ӡ਺ਾ .POHP%# ൛ "QTBSB%# GPS.POHP%# "MJCBCB$MPVEͷ .POHP%#൛σʔλϕʔεαʔϏε              $%/
  10. "MJCBCB$MPVE σʔλϕʔε  "MJCBCB$MPVE αʔϏε֓ཁ "84 "QTBSB%# GPS11"4 "MJCBCB$MPVEͱ&OUFSQSJTF%#͕ࣾڞಉ։ൃͨ͠ 1PTUHSF42-Λϕʔεʹɺ0SBDMFจ๏Λαϙʔτ͢

    ΔσʔλϕʔεαʔϏε  "QTBSB%# GPS)CBTF "MJCBCB$MPVEͷ )CBTF൛σʔλϕʔεαʔϏε &.3 "QTBSB%# GPS.FNDBDIFE "MJCBCB$MPVEͷ .FNDBDIFE൛σʔλϕʔεαʔϏε &MBTUJ$BDIF "QTBSB%# GPS3FEJT "MJCBCB$MPVEͷ 3FEJT൛σʔλϕʔεαʔϏε &MBTUJ$BDIF )ZCSJE%# GPS.Z42- )ZCSJE%# GPS.Z42- )ZCSJE5SBOTBDUJPO"OBMZUJDBM1SPDFTTJOH "MJCBCB$MPVEͷ.Z42-൛σʔλϕʔεαʔϏε  )ZCSJE%# GPS1PTUHSF42- )ZCSJE%# GPS1PTUHSF42- )ZCSJE5SBOTBDUJPO"OBMZUJDBM1SPDFTTJOH "MJCBCB$MPVEͷ1PTUHSF42-൛σʔλϕʔε 3FETIJGU             $%/
  11. "MJCBCB$MPVE σʔλϕʔε  "MJCBCB$MPVE αʔϏε֓ཁ "84 ද֨ଘ 5BCMF4UPSF /P42-σʔλϕʔε %ZOBNP%#

    ༻༩਺ਾ䥆Ҡ "EWBODFE %BUBCBTF"QQMJDBUJPO .JHSBUJPO σʔλϕʔεͱΞϓϦέʔγϣϯͷϛάϨʔγϣϯ αʔϏε %.4 ਺ਾ؅ཧ %BUB.BOBHFNFOU4FSWJDF 3%4ͱ/P42-Λαϙʔτ͠ɺσʔλอଘɺमਖ਼ɺ ෼ੳͱ͍ͬͨҰ࿈ͷ࡞ۀ͕Ͱ͖Δσʔλ؅ཧαʔϏ ε  ࠞ߹Ӡ਺ਾ؅ཧ )ZCSJE$MPVE%BUBCBTF .BOBHFNFOU ϋΠϒϦοτܕ ΦϯϓϨ Ϋϥ΢υ σʔλϕʔε؅ཧαʔϏε  ਺ਾ㟨 %BUBCBTF#BDLVQ σʔλϕʔεόοΫΞοϓαʔϏε ˞֤%#ͷ #BDLVQɺ 3FTUPSFػೳ             $%/
  12. "MJCBCB$MPVE    "MJCBCB$MPVE αʔϏε֓ཁ "84 ৅ଘ 0CKFDU4UPSBHF4FSWJDF ΦϒδΣΫτετϨʔδαʔϏε

    4 ଘ #MPDL4UPSBHF ϒϩοΫετϨʔδ &#4 จ݅ଘ /FUXPSL"UUBDIFE4UPSBHF /"4 &'4 ᑆଘ "SDIJWF4UPSBHF    (MBDJFS Ӡଘ᠓䎔 $MPVE4UPSBHF(BUFXBZ ΦϯϓϨϛεͱΫϥ΢υΛγϜϨεʹ౷߹͢ΔΫϥ ΢υετϨʔδ 4UPSBHF (BUFXBZ          $%/
  13. "MJCBCB$MPVE "   "MJCBCB$MPVE αʔϏε֓ཁ "84 ཱํ -JHIUOJOH$VCF "

    " 4OPXCBMM ࠞ߹Ӡଘྻ )ZCSJE$MPVE4UPSBHF"SSBZ ֤छετϨʔδΛαϙʔτ͠ɺ ΦϯϓϨϛεͱΫϥ΢υΛγϜϨεʹ౷߹͢ΔΫϥ ΢υετϨʔδ  ࠞ߹Ӡ㟨෰ʢެதʣ )ZCSJE#BDLVQ3FDPWFSZ ϋΠϒϦουܕ όοΫΞοϓͱϦΧόϦαʔϏε  ࠞ߹Ӡ༰㦞෰ʢެதʣ )ZCSJE%JTBTUFS3FDPWFSZ ϋΠϒϦουܕ%3ରࡦαʔϏε  !"  " "" "   " ! $%/
  14. "MJCBCB$MPVE    "MJCBCB$MPVE αʔϏε֓ཁ "84 8FC༻๷Ր 8FC"QQMJDBUJPO'JSFXBMM 8FC"QQMJDBUJPO'JSFXBMM

    8"' ᕟ६ (BNF4IJFME ήʔϜۀքʹಛԽͨ͠ ηΩϡϦςΟอޢαʔϏε  ҆ ࢜ 4FSWFS(VBSE *%4*14 αʔόʹΤʔδΣϯτඞཁ  ײ஌ ηΩϡϦςΟΠϯγσϯτͷݕ஌ɺ༧ଌɺ௥੻ͳͲ ͕Ͱ͖ΔηΩϡϦςΟอޢαʔϏε (VBSE%VUZ  .BDJF ෰ $FSUJGJDBUFT4FSWJDF ূ໌ॻΛ؅ཧ͢ΔαʔϏε "$. ಺༰҆શ ςΩετɺը૾ɺಈըͳͲͷίϯςϯπ৹ࠪαʔϏ ε  Ҡ҆શ .PCJMF4FDVSJUZ ϞόΠϧΞϓϦ޲͚ηΩϡϦςΟอޢαʔϏε              $%/
  15. "MJCBCB$MPVE    "MJCBCB$MPVE αʔϏε֓ཁ "84 ᆙ ص #BTUJPO*OTUBODF

    ౿Έ୆  Ճີ෰ %BUB&ODSZQUJPO4FSWJDF ҉߸ԽΩʔΛ࡞੒ɺར༻ɺ؅ཧͰ͖Δ)8ܕηΩϡ ϦςΟϞδϡʔϧαʔϏε $MPVE)4. ີ ؅ཧ෰ ,FZ.BOBHFNFOU4FSWJDF ҉߸ԽΩʔΛ࡞੒ɺར༻ɺ؅ཧ͢ΔαʔϏε ,.4 ਺ਾ σʔλϕʔε΁ͷ໰͍߹ΘͤΛϦΞϧλΠϜʹϞχ λʔϦϯά͢ΔαʔϏε %#ʹΤʔδΣϯτඞཁ  Ӡ๷Ր 'JSFXBMM 4FDVSJUZ(SPVQ ҆શ؅Ո $POTVMUJOH4FSWJDF "MJCBCB $MPVEͷϕετϓϥΫςΟεΛج͍ͮͨί ϯαϧςΟϯάαʔϏε 5SVTUFE"EWJTPS ᠓࿙ಎඳܥʢެதʣ γεςϜ੬ऑੑݕ஌αʔϏε              $%/
  16. "MJCBCB$MPVE *+  "MJCBCB$MPVE αʔϏε֓ཁ "84 ਓ ໊࣮ೝূαʔϏε  ౳อ

         / $  ઌ஌ɾ҆શ෰ 9*"/;)* 4FDVSJUZ4FSWJDF "MJCBCBೝূࡁͷύʔτφʔ͕ηΩϡϦςΟαʔϏ εΛఏڙͰ͖ΔϓϥοτϑΥʔϜ  ٸ㠳 "MJCBCBೝূࡁͷύʔτφʔ͕ηΩϡϦςΟࣄނ΁ ͷରԠɺࣄނ෼ੳɺ௥੻ɺใࠂͳͲΛఏڙ͢Δαʔ Ϗε 4IFJME "EWBODFE ˞%%P4ʹಛԽ ҆શ "MJCBCBೝূࡁͷύʔτφʔ͕γεςϜͷηΩϡϦ ςΟ໰୊Λൃݟͯ͘͠ΕΔαʔϏε  ਺ਾ ߇ #JHEBUBΛ׆༻ͨ͠Ϣʔβͷෆਖ਼ߦҝΛݕ஌ɾରԠ ͯ͘͠ΕΔαʔϏε  .%*/! "!-/ /'/ !,/#& *+ ("/).! $%/
  17. "MJCBCB$MPVE Ϛωʔδϝϯτ "MJCBCB$MPVE αʔϏε֓ཁ "84 Ӡ߇ $MPVE.POJUPS "MJCBCB$MPVEͷϞχλϦϯάαʔϏε $MPVE8BUDI ߇੍

    3FTPVSDF"DDFTT.BOBHFNFOU ϢʔβΞΫηεݖݶΛ؅ཧ͢ΔαʔϏε *". ૢ࡞ "DUJPO5SBJM "MJCBCB $MPVE্ͷૢ࡞Λه࿥͢ΔαʔϏε $MPVE5SBJM ݯഉ 3FTPVSDF0SDIFTUSBUJPO 4FSWJDF "MJCBCB$MPVEϦιʔεͷ࡞੒΍؅ཧΛޮ཰Խ͢ ΔαʔϏε $MPVE'PSNBUJPO ߇෰ "QQMJDBUJPO3FBM5JNF .POJUPSJOH4FSWJDF ΞϓϦέʔγϣϯ؂ࢹαʔϏε              $%/
  18. "MJCBCB$MPVE $%/ "MJCBCB$MPVE αʔϏε֓ཁ "84 $%/ $POUFOU%FMJWFSZ/FUXPSL ίϯςϯπσϦόϦʔαʔϏε $MPVE'SPOU 11$%/

    ϐΞπʔϐΞͷίϯςϯπσϦόϦʔαʔϏε ҆શՃ଎ 4$%/ 4FDVSF$POUFOU%FMJWFSZ /FUXPSL ηΩϡϦςΟΛڧԽͨ͠$%/αʔϏε 4:/'MPPEɺ"$,'MPPEɺ*$.1'MPPEɺ6%1 'MPPEɺ/51'MPPEɺ44%1'MPPEɺ%/4'MPPEɺ )551'MPPEɺ$IBMMFOHF$PMMBQTBS             $%/
  19. $PNQVUF &$ &$4 "VUP4DBMJOH "VUP4DBMJOH -BNCEB 'VODUJPO$PNQVUF &$4 $POUBJOFS4FSWJDF %#

    3%4 "QTBSB%# %ZOBNP%# 5BCMF4UPSF 4UPSBHF &#4 #MPDL4UPSBHF 4 044 (MBDJFS "SDIJWF4UPSBHF /FUXPSL 71$ 71$ &-# 4-# 3PVUF $MPVE%/4 %JSFDU$POOFDU &YQSFTT$POOFDU 4FDVSJUZ $MPVE5SBJM "DUJPO5SBJM *". 3". ,.4 ,.4 8"' 8"' 0UIFST "$. 44-$FSUJGJDBUF4FSWJDFT $MPVE'SPOU $MPVE$%/ $MPVE8BUDI $MPVE.POJUPS &$3 $POUBJOFS3FHJTUSZ ,JOFTJT 4USFBN$PNQVUF 424 .FTTBHF2VFVF 4/4 .FTTBHF4FSWJDF "84 "MJCBCB$MPVE "84 "MJCBCB$MPVE ˞ԫ৭ͷϓϩμΫτ೔ຊϦʔδϣϯʹ͸·ͩདྷ͍ͯͳ͍΋ͷ ࣗࣾ"84ར༻ঢ়گ͔Βࢥͬͨ͜ͱ
  20. ୭ ͕ Ͳͷ৚݅Ͱ ͲΕ ʹରͯ͠ɺ Կ Λ Ͱ͖ΔͰ͖ͳ͍ Α͏ʹ؅ཧͰ͖Δ Ϣʔβͷ

    ݖݶΛ؅ཧ͢ΔαʔϏε ͓ؾʹೖΓαʔϏε఺  3FTPVSDF"DDFTT.BOBHFNFOU
  21. ୭ ͕ Ͳͷ৚݅Ͱ ͲΕ ʹରͯ͠ɺ Կ Λ Ͱ͖ΔͰ͖ͳ͍ Α͏ʹ؅ཧͰ͖Δ Ϣʔβͷ

    ݖݶΛ؅ཧ͢ΔαʔϏε "84ͩͬͨΒ *EFOUJUZ  "DDFTT .BOBHFNFOU ͓ؾʹೖΓαʔϏε఺  3FTPVSDF"DDFTT.BOBHFNFOU [ ] RAM& (*)%!" 18/05/23&AliEaters #4  +&AlibabaCloud#&SAML(SSO)'AWS$'   &&) Alibaba Cloud&RAM&SSO ' AWS&IAM&SSO$ $$#
  22. Ϋϥ΢υར༻͸ རศੑ͕ߴ͍͕ɺ ϦεΫ΋͋Δ Ϋϥ΢υͷϝϦουΛ ҆৺͔ͭ ࠷େݶʹڗड͢ΔͨΊʹ͸ ద੾ͳ ݖݶ੍ޚ͕ඞਢͱࢥ͍ͬͯΔ Resource Access

    Management*IAM'(%, "84ܦݧऀͩͬͨΒɺ ͙͢ʹཧղͰ͖Δ ͓ؾʹೖΓαʔϏε఺  3FTPVSDF"DDFTT.BOBHFNFOU [ ] RAM)+-,($% 18/05/23)AliEaters #4  .)AlibabaCloud&)SAML(SSO)*AWS'* "#! )), Alibaba Cloud)RAM)SSO * AWS)IAM)SSO' ''& !
  23. ؂ࠪػೳ "MJCBCB$MPVEதࠃαΠτΑΓ        

      ͓ؾʹೖΓαʔϏε఺  #BTUJPO*OTUBODF
  24. γεςϜ্͕ ѻ͏σʔλʹΑͬͯ͸ɺ ΞΫηεܦ࿏ ΍ ࣮ߦݖݶ ΍ ΦϖϨʔγϣϯ Λ ݫ֨తʹ؅ཧ͢Δ৔߹͕͋Δ ΞΫηεܦ࿏ͷ໌֬ԽɺҰݩԽ

    ໾ׂ͝ͱͷݖݶٴͼΞΧ΢ϯτ؅ཧ ηΩϡΞͳೝূ ૢ࡞ͷه࿥ ͓ؾʹೖΓαʔϏε఺  #BTUJPO*OTUBODF
  25. γεςϜ্͕ ѻ͏σʔλʹΑͬͯ͸ɺ ΞΫηεܦ࿏ ΍ ࣮ߦݖݶ ΍ ΦϖϨʔγϣϯ Λ ݫ֨తʹ؅ཧ͢Δ৔߹͕͋Δ ΞΫηεܦ࿏ͷ໌֬ԽɺҰݩԽ

    ໾ׂ͝ͱͷݖݶٴͼΞΧ΢ϯτ؅ཧ ηΩϡΞͳೝূ ૢ࡞ͷه࿥ ͓ؾʹೖΓαʔϏε఺  #BTUJPO*OTUBODF #BTUJPO*OTUBODF͸ ηΩϡϦςΟཁ݅Λ४ڌ͢Δʹ खॿ͚ͯ͘͠ΕΔ