Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up for free
20180122-jawsug-terada
re__ma
January 22, 2018
Technology
0
150
20180122-jawsug-terada
20180122 JAWS-UG 長野で発表したスライド
タイトル: re:Invent 2017 で発表された積極的に使いたいサービス5つ!
re__ma
January 22, 2018
Tweet
Share
More Decks by re__ma
See All by re__ma
クラウドってなんだっけ? WordPressとどう関わるの? という話 / wpshinshu-20190413-terada
re__ma
0
19
イチからWordPressのインフラを考えてみる
re__ma
1
57
Staging環境を考えよう (インフラ目線から)
re__ma
2
150
Other Decks in Technology
See All in Technology
PUTとPOSTどっち使う?
hankehly
0
280
Custom AppをIP制限ありのままで審査に通す方法
yusuga
0
700
ドメイン知識の蓄積が開発に起こす100のこと
codmoninc
0
100
Security Hub のマルチアカウント 管理・運用をサーバレスでやってみる
ch6noota
0
930
データ分析基盤のはじめかた
chanyou0311
0
130
History of the ML system in KARTE
kargo113
1
670
Swift Regex Builder
kumamotone
1
110
Azure Arc Virtual MachineとAzure Arc Resource Bridge / VM provisioning through Azure portal on Azure Stack HCI (preview)
sashizaki
0
160
OCI Service Mesh 概要 / OCI Service Mesh ovewview
oracle4engineer
PRO
0
100
Lessons Learned from Scaling Infrastructure as Code
joatmon08
0
800
Inside out - abusing archive file formats
ange
3
280
Empath Company Deck
empathpr
0
150
Featured
See All Featured
Optimizing for Happiness
mojombo
365
63k
The MySQL Ecosystem @ GitHub 2015
samlambert
238
11k
KATA
mclloyd
7
8.7k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
237
19k
Stop Working from a Prison Cell
hatefulcrawdad
261
17k
JavaScript: Past, Present, and Future - NDC Porto 2020
reverentgeek
37
3.3k
BBQ
matthewcrist
74
7.9k
Done Done
chrislema
174
14k
Designing for humans not robots
tammielis
241
23k
The Pragmatic Product Professional
lauravandoore
19
3k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
soudai
39
13k
A designer walks into a library…
pauljervisheath
196
16k
Transcript
re:Invent 2017 Ͱൃද ͞Εͨੵۃతʹ͍͍ͨ αʔϏε5ͭʂ JAWS-UG ࢧ෦ ࣉా ྯਅ
Α͏ͦ͜দຊ • લ͔ΒɺদຊͰJAWS-UGΛΓ͔ͨͬͨ • 11݄ͷࢧ෦ͷRebootʹମௐෆྑͰߦ͚ͣɻɻɻ • ͜ʹΌ͞Μ͕ɺ΅ͦͬͱͭͿ͍ͨͷΛؾʹɺদຊͰΔ͜ͱʹ! • 1ʹճߦ͍͍ͨͱࢥ͍ͬͯ·͢ɻ࣍ 3
or 4݄͝ΖʹΕΕ • ࢢͱ࿈ܞاըߟ͑த • ͪͳΈʹɺݝத෦ͰձΛି͚͚ͯ͠Δاۀ༷͕͋Εɺඇ ৗʹخ͍͠Ͱ͢
• ࣉా ྯਅ(Reima TERADA) • ॴଐ1ɿ גࣜձࣾαʔόʔϫʔΫε ΫϥυΠϯςάϨʔγϣϯ෦ ٕज़2՝ (AWSΤϯδχΞ)
• ॴଐ2ɿ ৴भେֶେֶӃ ߴΤωϧΪʔཧֶݚڀࣨ ത࢜1 • Twitterɿ@re__maɹfacebook: https://www.facebook.com/reima.terada
ֶੜͬͯʁ • ͍ΘΏΔɺ͘͝ී௨ͷࣾձਓυΫλʔ • ౦ژΛԕ͘Εͯɺݝࡏॅ • جຊɺϦϞʔτϫʔΫͰશͯͷࣄΛ • னؒࣄͯ͠ɺே൩+ٳʹݚڀɾ࣮ ݧɾղੳ
ݚڀ༰ • ߴΤωϧΪʔཧֶ͕ઐ • εΠεɺδϡωʔϒͷڊେͳՃثͱ͔ʹԑ͕͋Γ ·͢ • ͍ͬͯΔͷɺ౦ʹ࡞Ζ͏ͱߦ͍ͬͯΔɺϦχ ΞίϥΠμʔܭըͷଌఆثR&D
ࣄͷํͷ • ΠϯϑϥΤϯδχΞΛ͍ͬͯ·͢ • ओʹɺVPCͱEC2ͱRDSΛຖ݄࡞͍ͯ͠·͢ • CloudFormation৬ਓʹͳΕ·͢ • ίʔυPythonͰগ͠ॻ͚·͕͢ɺࣄͰίʔ σΟϯά͍ͯ͠·ͤΜ
• ࠷ۙɺӡ༻ͱ͔ηΩϡϦςΟपΓ͕ଟΊͰ͢
re:InventͰൃද͞ΕͨαʔϏε • 2ϲ݄΄Ͳܦաͯ͠͠·ͬͨͷͰɺ؆୯ʹ͓ ͞Β͍Λ • ৽αʔϏεͱͯ͠ɺ60ݸఔग़ͨΑ͏Ͱ͢ https://aws.amazon.com/jp/new/reinvent/ • re:Inventલޙʹز͔͕ͭ͋Γ·ͨ͠
ಠஅͱภݟͱࣗͷࣄ͔ Β͑ΒͿɺ͍͍ͨαʔϏε • ྑ͍ͳͱࢥ͍ͬͯΔαʔϏεΛ5ͭબΜͰ͠·͢ • AWS Fargate • Amazon Time
Sync Service • Amazon Aurora Serverless • Inter-Region VPC Peering • Amazon GuardDuty
AWS Fargate • ͓ͳ͡ΈͷίϯςφͷϑϧϚωʔδυαʔϏε • ͍͍ͱ͜Ζ • ίϯςφΛಈ͔͢αʔόʔͷӡ༻Λ͠ͳ͍͍ͯ͘ (ECSͰ͕͜͜ωοΫͩͬͨ •
AutoScalingΑΓىಈ͕ૣ͍ • AutoScalingͷνϡʔχϯάෆཁ • ҙ • ·ͩɺ౦ژϦʔδϣϯʹདྷ͍ͯͳ͍ • ྉۚɺECS ͱ͔ EKS ͱ͔ΑΓߴΊ (αʔόʔӡ༻ͷίετΛߟ͑Εଟଥ
AWS Fargate ͜͜ͷཧͨ͘͠ͳ͔ͬͨ AutoScalingͩͱνϡʔχϯάඞཁ εέʔϦϯά͢Δ͔͔࣌ؒΔ FargateͩͱEC2ͷϦιʔεཧෆཁʂ ίϯςφͩͱىಈඵͰՄೳʂ
Amazon Time Sync Service • NTPΛVPCͳ͍͔Β͑Δɺ͋ΔҙຯຯͳαʔϏεͰ͢ • αʔϏε͕ग़Δલ • NTPͷઃఆͰɺ
ntp.nict.jp ͱ͔ʹ͚͍ͯͨɻ • GIPΛ͍࣋ͬͯΔαʔόʔɺΠϯλʔωοτ͔ΒΞΫηε͕Մೳ ϓϥΠϕʔταϒωοτ͔ΒɺNAT͕ඞཁ NAT͓͚ͳ͍߹ɺNTPதܧαʔόʔ͕ඞཁ • ࠓճͷαʔϏεͷ͍͍ͱ͜Ζ • 169.254.169.123 Λࢦఆ͢ΕVPCͳΒͲ͜ͰΞΫηεՄೳʂ • ҙ • ͱ͘ʹͳ͠ (ͲΜͲΜ͑ྑ͍ʂ
Amazon Time Sync Service ͍Ζ͍Ζ༨ʹඞཁ NTPαʔόʔࢹඞཁ
Amazon Aurora Serverless • ͷ RDB ͷServerlessͷαʔϏε • ΞϓϦΛ No
SQL (Dynamo DB)͚ʹॻ͖͑ͳͯ͘ར༻Մ ೳ • ߟ͑ΒΕΔϢʔεέʔε • Serveless (Lambda) Λओʹ༻͍ͨΞϓϦέʔγϣϯ • RDB͕ඞཁͳϨΨγʔͳαʔϏε͔ͭɺখنͳαʔϏε • ex) ͚ࣾͷ؆୯ͳཧγεςϜɺࣗલͷblogαΠτ
Amazon Aurora Serverless • ݸਓతʹ·ͣਪ͍ͨ͠ɺখنͳγεςϜͰͷར༻ • খنͳ߹Ͱɺt2ܥΛར༻͠ͳͯ͘αʔϏε͕Մೳ ͔ͭɺطଘt2.smallͱ΄ͱΜͲಉ͡ஈʹͳΔͱߟ͑ΒΕΔ • ͠ɺΞΫηε͕૿͑Εɺࣗಈతʹεέʔϧ
(εέʔϧʹ ඞཁͳ࣌ؒཁݕূ • RDSͷαʔόʔͷఀࢭػೳग़͕ͨɺ͜ΕΛར༻͢Ε αʔόʔͷఀࢭ͕ෆཁ
Amazon Aurora Serverless • ଞͷྫͱͯ͠ɺEC2͕AutoScaling͢ΔγεςϜͰͷ ར༻ • RDSͷΩϟύγςΟ͕ωοΫͱͳΓɺγεςϜશମ͕ εέʔϧ͠ͳ͘ͳΔͷΛ͛Δ •
Aurora ReadReplica AutoScaling Ͱ͍ۙ͜ͱՄ ೳ͕ͩɺύϥϝʔλνϡʔχϯάෆཁ (EC2ͷ AutoScalingͱLambdaͱ͔ɺFargateͷؔͱҰॹʂ
Inter-Region VPC Peering • ࠓ·Ͱͳ͔ͬͨɺϦʔδϣϯؒͷVPCͷଓ͕Մೳʹ • άϩʔόϧʹ·͕ͨΔγεςϜΛ࡞Δͱ͖ʹཉ͔ͬͨ͠ ͭ • ·ͨɺDRରࡦͱͯ͠ར༻Մೳ
• جຊతͳ༻ɺVPC-Peeringͱ΄΅ಉ͡ • ҙ • ౦ژ·ͩ
Inter-Region VPC Peering Transit VPC͕ඞཁͩͬͨ https://aws.amazon.com/jp/answers/networking/aws-multiple-region-multi-vpc-connectivity/ Transit VPCଆͷϧʔλʔ ϧʔςΟϯάอकϥΠηϯείετඞཁ ϧʔλෆཁ
ϧʔςΟϯάͷઃఆ VPCͰ݁
Amazon GuardDuty • AWSͷ௨৴ͳͲΛࢹ͠ɺෆ৹ͳߦಈ͕͋ͬͨ߹ʹΞϥʔτΛ͛ͯ͘ΕΔ αʔϏε • ྑ͍ • AgentΛΠϯετʔϧ͢Δඞཁ͕ͳ͍(Agent Less)
• طଘͷͷʹ؆୯ʹՃՄೳ • ͍··ͰͷηΩϡϦςΟιϑτͱൺΔͱ͍҆ʂ • ԿΑΓେࣄͳͷɺ໘ͳηΩϡϦςΟͷࢹӡ༻ͱ௨ΛࣗಈͰͬͯ͘ ΕΔͱ͜Ζ (͔͠AWSͷ͍࣋ͬͯΔσʔλͱ͖߹Θ͕ͤߦΘΕΔͨΊɺࣗͰಘΒΕ ΔใΑΓͨ͘͞Μͷใͱಥ͖߹Θͤͯ͘ΕΔ
Amazon GuardDuty • ҙ • ΟϧεରࡦιϑτͰͳ͍ (DeepSecurityͳͲͷ୯७ͳஔ͖͑ ʹͳΒͳ͍ • WAFͰͳ͍
(WAF AWS WAF Λઃఆ͢Δඞཁ͋Γ • ݱࡏͷରEC2ͱIAM (ͱ͍͑ɺඞཁ࠷ݶΧόʔ͞Ε͍ͯΔ • Ξϥʔτ্͕͕ͬͨΒɺࣗͰରԠ͕ඞཁ • શମతͳηΩϡϦςΟࢹ͕͚ͨ͠ΕɺAlert LogicͳͲΛͬͨ΄ ͏͕͍͍ (͓͔͔ͨͩۚ͠Δ
ଞʹαʔϏεଟ • Cloud9 (IDE • Amazon MQ (ϝοηʔδϒϩʔΧʔαʔϏε • ৽͍͠ΠϯελϯελΠϓ
(M5, H1 • Aurora Multi-Master • Dynamo DB Global Tables (ϦʔδϣϯΛ͑ͨϚϧνϚε λ • etc
·ͱΊ • ྫͷ͜ͱͳ͕Βɺ re:Invent ͰͷଟͷαʔϏε͕ग़·͠ ͨΑͱ • ͓͢͢ΊͰ͖ΔαʔϏεΛϐοΫΞοϓͯ͠5ͭհͯ͠Έ ·ͨ͠ •
ઃఆෆཁͳαʔϏεͱ͔ɺ͜ΕͰ͖Δͱӡ༻͕ΉͬͪΌָ ʹͳΔαʔϏεͱ͔Λ·ͱΊͯΈͨͭΓͰ͢ • IoT·ΘΓͱ͔MLपΓͱ͔͍͍͚͍ͭͯͯͳ͍ͷͰɺؤ ுͬͯΩϟονΞοϓ͠ͳͯ͘ɻɻɻ
JAWS DAYS 2018 ! • https://jawsdays2018.jaws-ug.jp