$30 off During Our Annual Pro Sale. View Details »

JAWSUG初心者支部 IAMの「あ」の話

Takuro SASAKI
January 19, 2021

JAWSUG初心者支部 IAMの「あ」の話

JAWS-UG初心者支部 第35回の登壇資料です
IAMの「あ」ということで、基本的なところの解説です

Takuro SASAKI

January 19, 2021
Tweet

More Decks by Takuro SASAKI

Other Decks in Technology

Transcript

  1. *".ͷʮɹɹʯ
    /3*ωοτίϜגࣜձࣾɹ
    ࠤʑ໦୓࿠

    +"846(ॳ৺ऀࢧ෦-5େձʂʂ
    #jawsug_bgnr
    ͋

    View Slide

  2. ࠤʑ໦୓࿠
    CMPHIUUQTCMPHUBLVSPTOFU
    5XJUUFS!ELGK
    ࣗݾ঺հ #jawsug_bgnr

    View Slide

  3. +BQBO"1/"NCBTTBEPS
    બग़͞Ε·ͨ͠
    ࣗݾ঺հ #jawsug_bgnr

    View Slide

  4. 4""ͷରࡦຊ͕վగ͞Ε·ͨ͠
    "84ೝఆࢿ֨ࢼݧςΩετ
    "84ೝఆιϦϡʔγϣϯΞʔΩςΫτ
    ΞιγΤΠτվగୈ൛
    IUUQTBN[OUP,R;WK,
    "84ೝఆιϦϡʔγϣϯΞʔΩςΫτΞιγͷษڧͷ࢓ํͱ
    "84ͷೖ໳ͷ࢓ํΛࣥචʢͨͭ͠΋Γʣ
    ൃച։࢝ʂʂ
    #jawsug_bgnr

    View Slide

  5. Ξ΢τϓοτΛ͠Α͏
    ୔ࢁΞ΢τϓοτͨ͠ਓʹϓϨθϯτ
    ຊ೔தͰɺϋογϡλά෇͖ͰπΠʔτͨ͠ਓʢ্Ґ໊̑ʣ
    ϒϩάͰ·ͱΊͨਓɹઌண໊̑
    #jawsug_bgnr
    ࣗݾਃࠂͰ5XJUUFSͰϝϯγϣϯ͍ͩ͘͞

    View Slide

  6. ࠓ೔࿩͢ςʔϚ
    "84ͱηΩϡϦςΟ
    "84ΞΧ΢ϯτͱ*".
    *".ͷػೳ
    ઃܭํ਑ͱ࠷খݖݶ
    ͓·͚
    #jawsug_bgnr

    View Slide

  7. "84ͱηΩϡϦςΟ

    View Slide

  8. "84ͱηΩϡϦςΟ #jawsug_bgnr
    ͍Ζ͍Ζ΍Δ͜ͱ͕ଟͯ͘ɺ
    ΍΍͍͜͠ͱࢥͬͨ͜ͱ͋Γ·ͤΜ͔
    શମ૾Λ೺Ѳ͢ΔͨΊʹɺͬ͘͟Γͱ
    ෼ྨͯ͠Έ·͠ΐ͏

    View Slide

  9. "84ͱηΩϡϦςΟ #jawsug_bgnr
    "84ͷηΩϡϦςΟ͸ͭͷ࣠Ͱߟ͑Δ
    ᶃ"84಺ʹߏஙͨ͠ωοτϫʔΫͱαʔόʔͷηΩϡϦςΟ
    ᶄ"84ͷαʔϏε܈ͷઃܭɾઃఆ
    ᶅ"84ૢ࡞ʹؔ͢Δݖݶʢ*".ʣ
    ᶆηΩϡϦςΟΛҡ࣋؅ཧ͢ΔͨΊͷ"84αʔϏε
    AWS Management
    Console
    Role
    VPC
    AWS Cloud
    Subnet
    Internet gateway
    Amazon Simple Storage
    Service (S3)
    VPN gateway
    Endpoints
    User
    ૢ࡞ݖݶ
    Instance Instance Instance
    AWS Lambda
    Role
    ᶅ ᶄ ᶃ
    AWS Command Line
    Interface
    AWS Config AWS Systems Manager
    AWS Service Catalog AWS Trusted Advisor AWS CloudTrail

    ηΩϡϦςΟΛҡ࣋
    ؅ཧ͢ΔαʔϏε

    View Slide

  10. ᶃ"84಺ʹߏஙͨ͠ωοτϫʔΫͱ
    αʔόʔͷηΩϡϦςΟ #jawsug_bgnr
    ੹೚ڞ༗Ϟσϧͷ੺࿮ͷ෦෼
    ઃܭͷߟ͑ํ͸ΦϯϓϨͱେ͖͘ҧΘͳ͍͕ɺઃఆͷ࢓
    ํ͸"84ͷྲّྀʹै͏ඞཁ͕͋Δ
    IUUQTBXTBNB[PODPNKQDPNQMJBODFTIBSFESFTQPOTJCJMJUZNPEFM

    View Slide

  11. ᶄ"84ͷαʔϏε܈ͷઃܭɾઃఆ
    ͍ΘΏΔϚωʔδυαʔϏε
    Ϣʔβʔࣗ਎ͰΧόʔ͢Δൣғ͸গͳ͍͕ɺαʔϏε͝
    ͱʹಛੑΛཧղ͢Δඞཁ͕͋Δ
    㱺·ͣ͸ɺ࢖͏΋ͷ͚֮ͩ͑Ε͹ྑ͍
    IUUQTXXXTMJEFTIBSFOFU"NB[PO8FC4FSWJDFT+BQBOBXTXIJUFCFMUPOMJOFTFNJOBSBXT

    View Slide

  12. ᶅ"84ͷૢ࡞ʹؔ͢Δݖݶʢ*".ʣ
    #jawsug_bgnr
    "84ͷηΩϡϦςΟͷத֩ͷҰͭ
    ͲΜͳʹωοτϫʔΫ΍αʔόʔͷηΩϡϦςΟΛڧݻʹ
    ͍ͯͯ͠΋ɺ"84Λ௚઀ૢ࡞͞ΕΔͱ͕݀։͚ΒΕΔ
    "84ͷബ͍ຊɹ*".ͷϚχΞοΫͳ࿩
    IUUQTCPPUIQNKBJUFNT

    View Slide

  13. ᶆηΩϡϦςΟΛҡ࣋؅ཧ͢Δ
    ͨΊͷ"84αʔϏε
    #jawsug_bgnr
    "84ಠࣗͷ෦෼
    ར༻͠ͳͯ͘΋γεςϜΛηΩϡΞͳঢ়ଶΛҡ࣋Ͱ͖Δ͕ɺ
    ্ख͘׆༻͢ΔͱࣗྗͰ΍ΔΑΓഒָʹͳΔ
    "84ͷബ͍ຊᶘΞΧ΢ϯτηΩϡϦςΟͷϕʔγοΫηΦϦʔ
    IUUQTCPPUIQNKBJUFNT

    View Slide

  14. "84ΞΧ΢ϯτͱ*".

    View Slide

  15. "84ͷ̎ͭͷΞΧ΢ϯτ؅ཧ #jawsug_bgnr
    "84ΞΧ΢ϯτʢ3PPUϢʔβʔʣ
    "84ΞΧ΢ϯτ࡞੒࣌ʹར༻
    ॳظઃఆ͕ऴΘΕ͹ར༻͠ͳ͍ͷ͕ݪଇ
    *".ʢ͜ΕΛ࢖͏ʣ
    "84ͷΞΫηε؅ཧͷ؊
    ϢʔβʔɾϓϩάϥϜɾଞͷϦιʔε͔Β"84Λѻ͏ࣄ͕Ͱ͖Δ
    "84Λ࢖͏ʹ͸ɺ·ͣ*".Λཧղ͢Δඞཁ͕͋Δ

    View Slide

  16. "84ΞΧ΢ϯτ #jawsug_bgnr
    "84ΞΧ΢ϯτʢ3PPUϢʔβʔʣ
    ̍ΞΧ΢ϯτʹ̍ͭͷΈͰɺΞΧ΢ϯτ಺ͷશͯͷૢ࡞͕Ͱ͖Δ
    *".ͷ஀ੜલ͸ɺ"84ΞΧ΢ϯτͰૢ࡞͢Δͱ͍͏຀Վతͳ࣌୅ͩͬͨ
    ΞΧ΢ϯτ୯ମͰ͸ɺ"84ΞΧ΢ϯτͷૢ࡞ͷ੍ݶ͕Ͱ͖ͳ͍
    㱺*1ΞυϨεʹΑΔ઀ଓݩ੍ݶ౳͕Ͱ͖ͳ͍
    ݫີʹӡ༻͢Δ৔߹͸ɺ෺ཧ.'"Λઃఆۚ͠ݿͰ؅ཧ͢Δ৔߹΋͋Δ
    ˞"840SHBOJ[BUJPOTͰ࡞ͬͨ"84ΞΧ΢ϯτ͸ɺ
    ɹͦ΋ͦ΋ύεϫʔυ͕ൃߦ͞Εͣɺ"84440Λར༻લఏͩͬͨΓ͢Δ

    View Slide

  17. #jawsug_bgnr
    "84Ϧιʔε΁ͷΞΫηε؅ཧ
    *".ͱ͸ʁ

    View Slide

  18. *".ͷجຊػೳ

    View Slide

  19. ᶃ*% 1BTTXPSE౳
    ར༻ऀ
    ᶄਖ਼౰ੑͷ֬ೝ
    ೝূہ
    ᶅຊਓੑͷอূ
    ᶆϦιʔεͷׂ౰
    αʔϏε
    *".ͷઆ໌ͷલʹ
    ೝূͱೝՄ
    ೝূ
    "VUIFOUJDBUJPOʣ
    ೝՄ
    ʢ"VUIPSJ[BUJPOʣ
    ୭Ͱ͋Δ͔ʁ
    ԿΛ࢖ΘͤΔͷ͔ʁ

    View Slide

  20. *".ͷجຊػೳ #jawsug_bgnr
    *".͸୭ʹԿΛ࢖͑Δͷ͔؅ཧ͢Δػೳ
    *".Ϣʔβʔ ʜ ར༻ऀͷೝূ
    *".άϧʔϓ ʜ *".ϢʔβʔͷάϧʔϓԽ
    *".ϩʔϧ ʜ ਓؒҎ֎ʹ΋Ұ࣌తͳૢ࡞ݖݶΛ෇༩͢Δ࢓૊Έ
    *".ϙϦγʔ
    ʜ ෇༩͢ΔݖݶΛهड़ͨ͠΋ͷ
    ར༻ऀ
    ֎෦
    Ϧιʔε
    "84
    Ϧιʔε
    *".άϧʔϓ
    *".Ϣʔβʔ
    *".ϩʔϧ
    *".
    ϙϦγʔ
    "84
    Ϧιʔε
    ୭ʹʁ ԿΛڐՄېࢭ͢Δ

    View Slide

  21. *".Ϣʔβʔ #jawsug_bgnr
    *".Ϣʔβʔͷೝূͷ࢓ํ
    *%ύεϫʔυ
    ΞΫηεΩʔγʔΫϨοτΞΫηεΩʔ
    㱺ͲͪΒ΋ݫີʹ؅ཧ͢Δඞཁ͕͋Δɻ
    ɹϚϧν"84ΞΧ΢ϯτ͕ҰൠԽͨ͠࠷ۙͰ͸ɺ
    ɹ͍͔ʹ*".ϢʔβʔΛ࡞Βͳ͍ͰઃܭʹͰ͖Δ͔͕ϙΠϯτʹͳΔ

    View Slide

  22. *".ϩʔϧ #jawsug_bgnr
    *".ϩʔϧͱ͸ʁ
    ʢར༻ऀ͕ҙࣝͤͣʹʣҰ࣌తͳݖݶΛऔಘ͢Δ࢓૊Έ
    "84Ϧιʔε΍֎෦Ϧιʔε͔Β"84ϦιʔεΛར༻͢Δ৔߹ʹ࢖༻
    "84440Ͱ*".Ϣʔβʔͷ୅ସ͢Δ৔߹ʹ΋*".ϩʔϧΛ࢖༻
    Role
    AWS STS
    ΫϨσϯγϟϧ
    ϓϩάϥϜ
    *".Ϣʔβʔͷ৔߹ *".ϩʔϧͷ৔߹
    EC2
    Πϯελϯε
    ϓϩάϥϜ
    EC2
    Πϯελϯε
    Πϯελϯε಺ʹΞΫη
    εΩʔɾγʔΫϨοτΞ
    ΫηεΩʔΛຒΊࠐΉඞ
    ཁ͕͋Δ
    *".ϩʔϧ͕Ұ࣌తͳೝ
    ূ৘ใΛऔಘ͢Δɻ

    View Slide

  23. ઃܭํ਑ͱ࠷খݖݶ

    View Slide

  24. *".ઃܭͷجຊํ਑ #jawsug_bgnr
    कΔ΂͖جຊํ਑͸͚̎ͭͩ
    ೝূ৘ใΛ౪·Εͳ͍Α͏ʹ͢Δӡ༻ઃܭ
    ΞΫηεΩʔʗγʔΫϨοτΞΫηεΩʔͰ͸ͳ͘ϩʔϧͷར༻
    HJUTFDSFUTͷར༻΋ݕ౼
    ೝূ৘ใ͕౪·Εͯ΋ඃ֐Λ࠷খݶʹ͢Δݖݶઃܭ
    .'"ඞਢԽ΍*1੍ݶ΍ͳͲͷར༻੍ݶ
    ࠷খݖݶͷઃఆ

    View Slide

  25. ύλʔϯͷݪଇΛ౿·্͑ͨͰ
    ۩ମతͳઃܭʹམͱ͠ࠐΉ

    View Slide

  26. ڞ௨Ͱར༻͢ΔϙϦγʔͰ·ͣݕ౼͢Δͷ͸͜ͷͭ
    .'"ඞਢԽ͸ඞͣ͢Δ͜ͱ
    *1੍ݶ͸ɺӡ༻ϙϦγʔͱ૬ஊɻ࡞ۀ৔ॴΛ੍ݶͰ͖Δͱ͍͏ޮՌ͕͋Δ
    #jawsug_bgnr
    .'"ඞਢԽͱ*1੍ݶ
    \
    &⒎FDU%FOZ
    "DUJPO
    $POEJUJPO\
    /PU*Q"EESFTT\
    BXT4PVSDF*Q<

    >
    ^
    ^
    3FTPVSDF
    ^
    \
    &⒎FDU%FOZ
    /PU"DUJPO<
    JBN
    >
    3FTPVSDF
    $POEJUJPO\
    #PPM*G&YJTUT\
    BXT.VMUJ'BDUPS"VUI1SFTFOUGBMTF
    ^
    ^
    ^

    View Slide

  27. "ENJOݖݶΛ෇༩্ͨ͠Ͱ੍ݶΛՃ͑Δ
    .'"ඞਢˍ*1ΞυϨε੍ݶ
    *1੍ݶΛͳͨ͘͢Ίͷ؅ཧऀ༻ϩʔϧ
    #jawsug_bgnr
    ؅ཧऀݖݶͷઃܭ
    㱺εΠονલΛࢀরݖݶͷΈʹ͢Δͱ͍͏ઃܭ΋Α͋͘Δ

    View Slide

  28. ϩάΠϯ࣌͸ࢀরݖݶͷΈ
    ࢀরݖݶͱ4XJUDI3PMFΛڐՄ͢ΔݖݶΛ෇༩
    εΠονϩʔϧ͢Δ͜ͱʹΑΓ؅ཧऀݖݶ͕ར༻Մೳ
    ஈΫογϣϯΛஔ͘͜ͱʹΑΓɺΦϖϛεͷ๷ࢭޮՌΛૂ͏
    #jawsug_bgnr
    ؅ཧऀݖݶͷ҆શઃܭ

    View Slide

  29. Ұ൪೰·͍͠ͷ͕։ൃऀ޲͚ݖݶ
    "84ͷ։ൃʹ͸*".ϩʔϧͷ࡞੒ݖݶ͕ඞཁʹͳ͖͍ͬͯͯΔ
    ؅ཧऀݖݶΛ෇༩্ͨ͠Ͱɺ1FSNJTTJPO#PVOEBSZͷ׆༻͔ʁ
    αϯυϘοΫεΞΧ΢ϯτͷํָ͕ͩͬͨΓʁ
    #jawsug_bgnr
    ։ൃऀͷઃܭ

    ͋ͱ࡞ͬͨ*".ϩʔϧɾϙϦγʔͷςετํ๏ΛԿͱ͔͍ͨ͠

    View Slide

  30. 1SJODJQBMΛߜΒͳ͍ͱɺશϢʔβʔ͕εΠονͰ͖Δ
    σϑΥϧτςϯϓϨʔτͷઃఆ͸ɺΞΧ΢ϯτ಺ͷϢʔβʔʹରͯ͠
    ߜΔඞཁ͕͋ΓɺϢʔβʔࢦఆͰߜΔʢάϧʔϓ͸Ͱ͖ͳ͍ʣ
    ผղͱͯ͠"TTVNF3PMFͷݖݶΛ͢΂ͯണୣͷ͏͑ͰɺඞཁͳϢʔβʔʹ
    ෇༩͢Δͱ͍͏ํ๏΋͋Δ
    #jawsug_bgnr
    εΠονϩʔϧͷ஫ҙ఺
    \
    7FSTJPO
    4UBUFNFOU<
    \
    &⒎FDU"MMPX
    1SJODJQBM\
    "84
    BSOBXTJBNSPPU
    ^
    "DUJPOTUT"TTVNF3PMF
    $POEJUJPO\^
    ^
    >
    ^
    \
    7FSTJPO
    4UBUFNFOU<
    \
    &⒎FDU"MMPX
    1SJODJQBM\
    "84BSOBXTJBNVTFSUFTU
    VTFS
    ^
    "DUJPOTUT"TTVNF3PMF
    $POEJUJPO\^
    ^
    >
    ^

    View Slide

  31. ϕετϓϥΫςΟε͚ͩͲɻɻɻ
    ઃܭ͕ݻ·্ͬͨͰɺ*".ʹؔ͢Δߴ౓ͳ஌͕ࣝඞཁ
    ϓϩάϥϜతͳར༻ʹ͸޲͍͍ͯΔ͕ɺ"84ίϯιʔϧ͔Βͷར༻͸޲͍
    ͍ͯͳ͍
    ৽نαʔϏεͷ௥Ճʹऑ͍
    ͦ΋ͦ΋"ENJOݖݶΛ͍࣋ͬͯΔਓ͔͠࠷খݖݶΛ௥ٻͰ͖ͳ͍
    ઃܭɾӡ༻޻਺͕େ͖͍
    ݱ࣮తͳӡ༻
    ఆܕతͳ࡞ۀʢ-BNCEBɾόον౳ʣͷΈ࠷খݖݶΛ෇༩
    ਓؒܥͷ࡞ۀ͸ɺϒϥοΫϦετͷ׆༻΋ࢹ໺ʹ
    ηΩϡϦςΟࣄނΛى͜͞ͳ͍ͱ͍͏؍఺Ͱ࠷খݖݶΛ୳ٻ
    #jawsug_bgnr
    ࠷খݖݶͷδϨϯϚ

    View Slide