Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
202203_FinJAWS
Search
Takuya Yonezawa
March 24, 2022
Technology
380
1
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
202203_FinJAWS
Takuya Yonezawa
March 24, 2022
More Decks by Takuya Yonezawa
See All by Takuya Yonezawa
20260516_SecJAWS_Days
takuyay0ne
4
800
20260422_Midosuji_Tech
takuyay0ne
2
85
脱 雰囲気実装!AgentCoreを良い感じにWEBアプリケーションに組み込むために
takuyay0ne
3
580
20260228_JAWS_Beginner_Kansai
takuyay0ne
5
710
20260204_Midosuji_Tech
takuyay0ne
1
240
20260129_CB_Kansai
takuyay0ne
1
370
20260126_JAWS_Osaka
takuyay0ne
1
64
こんな時代だからこそ! 想定しておきたいアクセスキー漏洩後のムーブ
takuyay0ne
4
810
セキュリティは全員参加!_JAWSのイベントサイトで脅威モデリングを学んでみよう!
takuyay0ne
0
220
Other Decks in Technology
See All in Technology
AIとハーネスで育てるトランスコンパイラ / 20260722 Yasushi Katayama
shift_evolve
PRO
0
130
知らん間に、回ってる
ming_ayami
0
740
シンガポールで登壇してきます
yama3133
0
250
企業でAWS Organizationsを動かすための組織設計の考え方
nrinetcom
PRO
1
110
そのドキュメント、自動化しませんか?
yuksew
1
320
Gen3R: 3D Scene Generation Meets Feed-Forward Reconstruction
spatial_ai_network
0
140
伝票作成AIエージェントを支える、LLMOpsとインフラの選択肢 / AICon2026_takeda
rakus_dev
0
140
アップデートで何が変わった?デモで学んで使いこなすIBM Bob2.0
muehara
0
180
41歳でAWSが好きすぎてITエンジニアになったおっさんの話
yama3133
0
170
ruby.wasmとPicoRuby.wasmに対応した仮想DOMライブラリを作ってる話 #kaigieffect_kaigi
sue445
PRO
0
150
副作用のある Lambda でも Lambda Power Tuning は使えるのか / lambda-power-tuning-side-effects
koukihosaka
1
120
複数プロダクトで進めるAI機能実装 ── 実践から得たリアルな学びとロードマップ実現への挑戦 / AICon2026_yanari
rakus_dev
0
140
Featured
See All Featured
Docker and Python
trallard
47
4k
[RailsConf 2023] Rails as a piece of cake
palkan
59
6.8k
Fantastic passwords and where to find them - at NoRuKo
philnash
52
3.8k
Art, The Web, and Tiny UX
lynnandtonic
304
22k
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
234
17k
Navigating Weather and Climate Data
rabernat
0
380
Balancing Empowerment & Direction
lara
6
1.2k
Building AI with AI
inesmontani
PRO
1
1.1k
How to build a perfect <img>
jonoalderson
1
5.8k
Between Models and Reality
mayunak
4
370
B2B Lead Gen: Tactics, Traps & Triumph
marketingsoph
0
170
Optimising Largest Contentful Paint
csswizardry
37
3.8k
Transcript
ΞϓϦΤϯδχΞ͕Ή"84શף ଜ૯߹ݚڀॴ ถᖒ ҙࢤബऑͳ
͡Ίʹ ຊ͓͍͑ͨ͜͠ͱ ݩΦϯϓϨΞϓϦΤϯδχΞͰҙࢥͷڧ͘ͳ͍ถᖒ͕ ͲͷΑ͏ʹ"84ࢿ֨औಘͷϞνϕΛҡ࣋ͨ͠ͷ͔ ࢿ֨Λऔಘ͔ͯ͠ΒԿ͕มΘͬͨͷ͔ ຊ͓͑͠ͳ͍͜ͱ ֤ࢿ֨ࢼݧͷৄࡉͳ߈ུํ๏
͡Ίʹ ҙࢤബऑ ͍ J ͠ TIJ ͘ IBLV ͡Ό͘
KBLV ࣄΛબ·࣮ͨߦ͠Α͏ͱ͢Δࢤܾஅྗ͕ऑ͘ɺ ࣗͷߟ͑Λอͯͣɺਓͷݴಈʹࠨӈ͞Ε͍͢͞·ɻ HPPࣙॻ
͜Εʂ ʹଜ૯߹ݚڀॴʹ৽ଔೖࣾɻۚ༥ۀքͷ͓٬༷͚ʹ ϑϩϯτγεςϜͷߏஙΤϯϋϯεΛ୲ͨ͠ޙʹδϣϒνΣϯδɻ ݱࡏ࢈ۀۀքͷ͓٬༷͚ʹ"84ڥશൠͷઃܭߏஙΛ୲ɻ ࠷ۙ5BJMXJOE$44ʹڵຯɻࢦͤLTνϣοτσΩϧɻ ͖ͳ"84αʔϏε4". 4UFQ'VODUJPOT $PEF#VJME ͖ͳٕज़/FYUKT
5BJMXJOE$44 %PDLFS LT 3BODIFS UBLVZBZPOF ถᖒ 5BLVZB:POF[BXB
ҙࢤڧ͘ͳ͍͋Δ͋Δ
ถᖒҙࢥ͕͋·Γڧ͋͘Γ·ͤΜ ʹճ͔͠ड͚ΒΕͳ͍ࢼݧͳͷʹ Ӎ͕͍͔߱ͬͯͨΒडݧΛஅ೦ ࢼݧձͰචശΕͨ͜ͱʹؾ͘ˠؼ ࢼݧձۙ͘ͷߦྻ͕Ͱ͖Δϥʔϝϯٵ͍ࠐ·ΕΔˠؼ ৽͍͠ྲྀߦΓʹྲྀ͞ΕΔɺͰ͘ଓ͔ͳ͍ ݸਓ։ൃͰ͏8&#ϑϨʔϜϫʔΫΛ͜Ζ͜Ζม͑Δʢ"OHVMBSˠ7VFˠ3FBDUˠ/FYUKTʣ ʮ͖ͳ"84αʔϏεʯ͕݄Πν͘Β͍ͰมΘΔ Α͘͏*B$αʔϏε͜͜Ͱ͜Ζ͜ΖมΘΔʢ$MPVE'PSNBUJPOˠ$%,ˠ5FSSBGPSNʣ
ͨͩɺखΛಈ͔ͯ͠։ൃ͢Δͷ͖🧑💻
"84ֶशͷ͖͔͚ͬ
ࢿ֨औಘͷ͖͔͚ͬd"844VNNJUd
ࢿ֨औಘͷ͖͔͚ͬd"844VNNJUd ೝఆऀϥϯδʹೖΓ͍ͨͬʂʂʂ😇
"84ࢿ֨Λऔಘ͠Α͏ͱࢥ͖͔͚ͬͨͬ "844VNNJUͷೝఆऀϥϯδೖΓ͍ͨ ઐ༻8J'J͕͋ΔʂϊϕϧςΟ͕͋Δʂ͓͕ͭ͋Δʂˠ͕ɺແࢿ֨ͷҝೖΕͣ Ͱݟ͍ͯΔͱɺೝఆऀϥϯδ͕͘͢͝׆گˠ"84ࢿ֨Λ࣋ͬͯΔਓ͜Μͳʹ͍ΔΜͩʂͱϏϏΔ &$Ҏ֎ͷ"84αʔϏεΓ͔ͨͬͨ "844VNNJUͰ༷ʑͳαʔϏεΛͬͨࣄྫΛฉ͍ͯϏϏΔʢ͔͠͠த͔Γ·ͤΜͰͨ͠ɻɻʣ ͓٬༷ʮίετ͕ؾʹͳΔ͔Β&$ʓʓ࣌ʹͳͬͨΒҰׅγϟοτμϯ͢ΔεΫϦϓτ͕ಈ͖·͢ʯ ΅͘ʮຖεΫϦϓτ࣮ߦ໘͘͘͞ͳ͍ʁଞͷαʔϏε͑ͬͱίετ͑ΒΕΔ͚ͣͩͲɺ
ͲͷαʔϏεΛ͑ྑ͍ͷ͔͔ΒΜ͠ɺݟ͕ͳ͍😇ʯ ࣗͷεΩϧɾࢢՁ্ ྡΓʹ࠲͍ܹͬͯͨπϤΤϯδχΞͷํ͕ʮ"84ࢿ֨ྑ͍ͧʯͱݴ͍ͬͯͨ ΤϯδχΞٻਓαΠτݟͯΔͱʮ"84ΤϯδχΞืूʯͷจࣈ͕͍ͬͺ͍
ࢼݧରࡦ
ݸʑͷࢼݧରࡦάάΓ·͠ΐ͏ʂ ઌਓͷϊϋ͕ͨ͘͞Μ͋Γ·͢ʂ
ΞϓϦΤϯδχΞถᖒͷֶशϞνϕʔγϣϯ
ΦϯϓϨͳ8&#αʔϏεPO"84 ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet
&$ΛηΩϡΞʹͯ͠ΈΑ͏ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Private
Subnet
#BDLFOEɺαʔόʔϨεͰಉ͡ࣄͰ͖ΔΜ͡Όͳ͍ʁ %#ͷ&$Πϯελϯεɺ3%4ͷํ͕ӡ༻ָ͡Όͳ͍ʁ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB RDS Public Subnet Private
Subnet API Gateway API Gateway Lambda
8&#αʔόɺ4ͱ$MPVE'SPOUʹͨ͠Β҆͘ͳΔʁ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC RDS Private Subnet API Gateway API
Gateway Lambda S3 Cloud Front
ΞϓϦͷϏϧυˠσϓϩΠΛࣗಈԽָ͍ͯͨ͠͠ʂ ඞཁͳ࣌Ҏ֎ڥΛফͯ͠ίετݮ͍ͨ͠ʂ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC RDS Private Subnet API Gateway
API Gateway Lambda S3 Cloud Front Code Pipeline Cloud Formation
࠲ֶͰֶΜͩ"84αʔϏεΛͲΜͲΜΞϓϦʹऔΓࠐΜͰΈΔ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Code
Pipeline Cloud Formation Beanstalk ECS Cognito KMS Systems Manager Amplify DynamoDB
࠲ֶͰֶΜͩ"84αʔϏεΛͲΜͲΜΞϓϦʹऔΓࠐΜͰΈΔ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Code
Pipeline Cloud Formation Beanstalk ECS Cognito KMS Systems Manager Amplify DynamoDB ॳظͷແࠎͳΞϓϦ͕ͲΜͲΜߴԽ͞Εָ͍ͯ͠ʂ🎉 ͑ΔαʔϏεͷҾ͖ग़͕͠૿͑Δͱָ͍͠ʂ🎉
Ұ࣌͜ΜͳαΠΫϧͰςϯγϣϯϋΠʹͳͬͯ·ͨ͠ "84ࢼݧษڧͰ αʔϏεαʔϏεͷ͍ํΛֶͿ ֶΜͩαʔϏε͍ํΛ ࣮ફͯ͠Έͨ͘ͳΔ ࣗͷΞϓϦڥʹదԠͯ͠ΈΔ ˠಈ͘ͱָ͍͠
ͬͱߴͳ͍ํผαʔϏεΛ Γͨ͘ͳΔ
ࢿ֨શ෦औΔͷʹ͕͔͔࣌ؒΓ·ͨ͠ɺɺ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ SAA࠲ֶʢࢀߟॻʣΦϯϦʔͰ ษڧ͢Δɺ2ճͷෆ߹֨Λୟ͖ग़͢ɻ ϘϩϘϩʹͳΓͳ͕ΒԿͱ͔߹֨͠ɺ શʹ೩͑ਚ͖Δ ಉظʹʮAWSࢿ֨औͬͯͳ͍ͷʁʯͱ ἤΒΕͯCLFΛडݧ͢Δ Ζ͘ʹษڧͤͣʹ߹֨ɺຯΛΊΔ ࠲ֶͰษڧ࢝͠ΊΔɻ༰͕ΞϓϦدΓ ͩͬͨͷͰɺ໘ന͘ͳͬͯ͘Δ&࣮ػͰࢼ ͣ͞ʹ͍ΒΕͳ͘ͳΔ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ SAAͰۤ࿑ͨ͠ɺAWSશൠͷ͕ࣝ ͍ͬͯͨɻจ͕ඇৗʹจͳͷͰ ಡղྗͷ্ҙࣝͭͭ͠ɺԋशͰ ग़͖ͯͨࡉ͔͍Φϓγϣϯܥ࣮ػͰಈ ࡞֬ೝɻ།ҰͷSAPରࡦຊ(※)ಡΈࠐΈ ૯্͛ɻ͔ͳΓ࣌ؒΛ͔͚ͨɻ ˞ IUUQXXXSJDDPKQDSFBUFCPPLDPOUFOUTCPPL@IUNM ʘૣ͞Μஶʂʗ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ ςϯγϣϯϋΠظɻAWSઐଐ෦ୂʹҟಈ ͨ͜͠ͱ͋Γɺֶशҙཉ͕MAXʹɻ ܧଓͯ͠खಈ͔ͭͭ͠ɺԋशͬ ͍ͯͨɻ௨ۈ࣌ؒʹBlackbeltಡΜͩΓɻ What'sNewಡΈ࢝ΊΔ δϣϒνΣϯδ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH શ෦औಘ͔ͯ͠Βࢥ͏͜ͱ Solution ArchitectʢAssociate,Professionalʣ ΊͪΌͪ͘ΌେࣄɻSpecialty͜ͷ2ͭͷ ࢿ֨ͷ͕͔ࣝͬ͠Γʹ͍͍ͭͯΕ Ұؾʹϋʔυϧ͕Լ͕Δ
ࢿ֨Λऔͬͨޙ
"84ࢿ֨Λ࣋ͬͯΔͱ͍͍ࣄ͕ͨ͘͞Μ ᶃνϟϯε͕͕ͬͨ ύϒϦοΫΫϥυઐ෦ୂʹҟಈɺ"84ઐʹͳΔ ଞ෦ॺͷํͱͷίωΫγϣϯɺࣾ֎Ξτϓοτͷػձ ᶄͭΑ্͍࢘ͷݴͬͯΔ͜ͱ͕ཧղͰ͖ΔΑ͏ʹͳͬͨ ʙʙ"84ઃܭͷٞதʙʙ ্࢘ʮ$PO fi
Hɺ(VBSE%VUZɺ*"."DDFTT"OBMZ[FSͷݕ݁ՌΛ4FDVSJUZ)VCʹूͯ͠ 0SHBOJ[BUJPO౷߹Ͱʙʙʯ ถᖒʮ͓ʁܹπϤ্͕࢘ݴ͍ͬͯΔ୯ޠ͕͔ΔͧʂʁͳΜ͔خ͍͠ʯ ᶅγεςϜΛΉࡍͷϓϥΫςΟεֶ͕Δ ֶशΛ௨ͯ͠8FMM"SDIJUFDUFEֶ͕Δ 8FMM"SDIJUFDUFEͳࢥ"84ͷੈքΛඈͼӽ͑ͯʹཱͭ ᶆࢢՁ͕ര্͕Γͨ͠ ΊͬͪΌϝοηʔδΛ͚ΔΑ͏ʹͳΓ·ͨ͠
"84ࢿ֨Λ࣋ͬͯΔͱ͍͍ࣄ͕ͨ͘͞Μ ᶃνϟϯε͕͕ͬͨ ύϒϦοΫΫϥυઐ෦ୂʹҟಈɺ"84ઐʹͳΔ ଞ෦ॺͷํͱͷίωΫγϣϯɺࣾ֎Ξτϓοτͷػձ ᶄͭΑ্͍࢘ͷݴͬͯΔ͜ͱ͕ཧղͰ͖ΔΑ͏ʹͳͬͨ ʙʙ"84ઃܭͷٞதʙʙ ্࢘ʮ$PO fi
Hɺ(VBSE%VUZɺ*"."DDFTT"OBMZ[FSͷݕ݁ՌΛ4FDVSJUZ)VCʹूͯ͠ 0SHBOJ[BUJPO౷߹Ͱʙʙʯ ถᖒʮ͓ʁܹπϤ্͕࢘ݴ͍ͬͯΔ୯ޠ͕͔ΔͧʂʁͳΜ͔خ͍͠ʯ ᶅγεςϜΛΉࡍͷϓϥΫςΟεֶ͕Δ ֶशΛ௨ͯ͠8FMM"SDIJUFDUFEֶ͕Δ 8FMM"SDIJUFDUFEͳࢥ"84ͷੈքΛඈͼӽ͑ͯʹཱͭ ᶆࢢՁ͕ര্͕Γͨ͠ ΊͬͪΌϝοηʔδΛ͚ΔΑ͏ʹͳΓ·ͨ͠
ΤϯδχΞٻਓαΠτ ࢢՁ͕ര্͕Γͨ͠
ΤϯδχΞٻਓαΠτ ࢢՁ͕ര্͕Γͨ͠ खಈฦࣄͩͱ͍͔ͭͳ͍ఔʹֻ͓͚͚·͢🙇
·ͱΊ ࢿֶ֨शΛ௨ͯ͠ʮ"84ͷ͍ํʯҎ্ͷ͜ͱֶ͕Δ 8FMM"SDIJUFDUFEͳߟ͑ํγεςϜߏஙʹඞͣੜ͖Δ ͭͷ͜ͱΛΓൈ͍ͨʂͱڳΛுΕΔ "84ͷֶशʹΑΓνϟϯε͕͍ࠐΜͰ͘Δ "84ࢿ֨*5ք۾Ͱඇৗʹߴ͘ධՁ͞Ε͍ͯΔ δϣϒνΣϯδର֎Ξτϓοτͷۙಓ څྉ্͕͕Δ͔͠Εͳ͍ঢਐͰ͖Δ͔͠Εͳ͍ ʮͱΓ͋͑ͣಈ͔ͯ͠ΈΔʯΛڧ͓͘͢͢Ί ࠲ֶͷΈͩͱͲ͏ͯ͠٫͕ͪ͠ɻखΛಈ͔͢ͱఆண͕·ΔͰҧ͏
·ͣࣗͷ͖ͳಘҙͳྖҬ͔Βֶशͯ͠ΈΔ
·ͱΊ ࢿֶ֨शΛ௨ͯ͠ʮ"84ͷ͍ํʯҎ্ͷ͜ͱֶ͕Δ 8FMM"SDIJUFDUFEͳߟ͑ํγεςϜߏஙʹඞͣੜ͖Δ ͭͷ͜ͱΛΓൈ͍ͨʂͱڳΛுΕΔ "84ͷֶशʹΑΓνϟϯε͕͍ࠐΜͰ͘Δ "84ࢿ֨*5ք۾Ͱඇৗʹߴ͘ධՁ͞Ε͍ͯΔ δϣϒνΣϯδର֎Ξτϓοτͷۙಓ څྉ্͕͕Δ͔͠Εͳ͍ঢਐͰ͖Δ͔͠Εͳ͍ ʮͱΓ͋͑ͣಈ͔ͯ͠ΈΔʯΛڧ͓͘͢͢Ί ࠲ֶͷΈͩͱͲ͏ͯ͠٫͕ͪ͠ɻखΛಈ͔͢ͱఆண͕·ΔͰҧ͏
·ͣࣗͷ͖ͳಘҙͳྖҬ͔Βֶशͯ͠ΈΔ ೦ئͷೝఆऀϥϯδʹ·ͩೖΕͳͦ͞͏Ͱ͢ɻɻ😇
5IBOL:PV