Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
202203_FinJAWS
Search
Takuya Yonezawa
March 24, 2022
Technology
390
1
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
202203_FinJAWS
Takuya Yonezawa
March 24, 2022
More Decks by Takuya Yonezawa
See All by Takuya Yonezawa
20260516_SecJAWS_Days
takuyay0ne
5
1k
20260422_Midosuji_Tech
takuyay0ne
2
130
脱 雰囲気実装!AgentCoreを良い感じにWEBアプリケーションに組み込むために
takuyay0ne
3
720
20260228_JAWS_Beginner_Kansai
takuyay0ne
5
790
20260204_Midosuji_Tech
takuyay0ne
1
270
20260129_CB_Kansai
takuyay0ne
1
410
20260126_JAWS_Osaka
takuyay0ne
1
78
こんな時代だからこそ! 想定しておきたいアクセスキー漏洩後のムーブ
takuyay0ne
4
850
セキュリティは全員参加!_JAWSのイベントサイトで脅威モデリングを学んでみよう!
takuyay0ne
0
240
Other Decks in Technology
See All in Technology
Post AI時代のリファクタリング実践記 / Refactoring in the post AI era
kaminashi
1
210
全PRの83%が AIレビューだけでマージできるようになった開発組織は その後どうなったか @2026/10
athug
0
150
TinyGoでオブザーバビリティ?OpenTelemetryはTinyGoで使えるのか / Is OpenTelemetry available in TinyGo environment?
ymotongpoo
2
140
味覇で作るパスタが美味い - 20261001_yabaubuki.dev
livesense
PRO
0
130
Railsで挑む大量データ永続化 〜600億件を永続化するための設計とボトルネックとの戦い〜
occhi
1
370
実体験から学ぶ分析エージェントの開発と運⽤
recruitengineers
PRO
8
2.3k
Optunaの最新リリースv5.0について
pfn
PRO
0
100
Loop Engineering これくらいでいい
mikanichinose
0
240
Persisting Massive Data with Rails ~Designing for 60 billion rows, and fighting the bottlenecks~ Railsで挑む大量データ永続化 〜600億件を永続化するための設計とボトルネックとの戦い〜
occhi
0
620
二歩目のフロントエンド・ウェブアクセシビリティ
camiha
2
480
ハードウェアコンペでもAI駆動開発が進んでいる話
iotengineer22
1
720
大型犬好きによるPugの紹介
yamanoku
1
150
Featured
See All Featured
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
stephaniewalter
287
14k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
35
2.6k
Data-driven link building: lessons from a $708K investment (BrightonSEO talk)
szymonslowik
1
1.4k
SEO for Brand Visibility & Recognition
aleyda
0
4.8k
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
234
18k
The #1 spot is gone: here's how to win anyway
tamaranovitovic
4
1.2k
Max Prin - Stacking Signals: How International SEO Comes Together (And Falls Apart)
techseoconnect
PRO
0
490
Leo the Paperboy
mayatellez
10
2.4k
The Language of Interfaces
destraynor
162
27k
JavaScript: Past, Present, and Future - NDC Porto 2020
reverentgeek
52
6.1k
[RailsConf 2023] Rails as a piece of cake
palkan
59
7.1k
Design in an AI World
tapps
1
350
Transcript
ΞϓϦΤϯδχΞ͕Ή"84શף ଜ૯߹ݚڀॴ ถᖒ ҙࢤബऑͳ
͡Ίʹ ຊ͓͍͑ͨ͜͠ͱ ݩΦϯϓϨΞϓϦΤϯδχΞͰҙࢥͷڧ͘ͳ͍ถᖒ͕ ͲͷΑ͏ʹ"84ࢿ֨औಘͷϞνϕΛҡ࣋ͨ͠ͷ͔ ࢿ֨Λऔಘ͔ͯ͠ΒԿ͕มΘͬͨͷ͔ ຊ͓͑͠ͳ͍͜ͱ ֤ࢿ֨ࢼݧͷৄࡉͳ߈ུํ๏
͡Ίʹ ҙࢤബऑ ͍ J ͠ TIJ ͘ IBLV ͡Ό͘
KBLV ࣄΛબ·࣮ͨߦ͠Α͏ͱ͢Δࢤܾஅྗ͕ऑ͘ɺ ࣗͷߟ͑Λอͯͣɺਓͷݴಈʹࠨӈ͞Ε͍͢͞·ɻ HPPࣙॻ
͜Εʂ ʹଜ૯߹ݚڀॴʹ৽ଔೖࣾɻۚ༥ۀքͷ͓٬༷͚ʹ ϑϩϯτγεςϜͷߏஙΤϯϋϯεΛ୲ͨ͠ޙʹδϣϒνΣϯδɻ ݱࡏ࢈ۀۀքͷ͓٬༷͚ʹ"84ڥશൠͷઃܭߏஙΛ୲ɻ ࠷ۙ5BJMXJOE$44ʹڵຯɻࢦͤLTνϣοτσΩϧɻ ͖ͳ"84αʔϏε4". 4UFQ'VODUJPOT $PEF#VJME ͖ͳٕज़/FYUKT
5BJMXJOE$44 %PDLFS LT 3BODIFS UBLVZBZPOF ถᖒ 5BLVZB:POF[BXB
ҙࢤڧ͘ͳ͍͋Δ͋Δ
ถᖒҙࢥ͕͋·Γڧ͋͘Γ·ͤΜ ʹճ͔͠ड͚ΒΕͳ͍ࢼݧͳͷʹ Ӎ͕͍͔߱ͬͯͨΒडݧΛஅ೦ ࢼݧձͰචശΕͨ͜ͱʹؾ͘ˠؼ ࢼݧձۙ͘ͷߦྻ͕Ͱ͖Δϥʔϝϯٵ͍ࠐ·ΕΔˠؼ ৽͍͠ྲྀߦΓʹྲྀ͞ΕΔɺͰ͘ଓ͔ͳ͍ ݸਓ։ൃͰ͏8&#ϑϨʔϜϫʔΫΛ͜Ζ͜Ζม͑Δʢ"OHVMBSˠ7VFˠ3FBDUˠ/FYUKTʣ ʮ͖ͳ"84αʔϏεʯ͕݄Πν͘Β͍ͰมΘΔ Α͘͏*B$αʔϏε͜͜Ͱ͜Ζ͜ΖมΘΔʢ$MPVE'PSNBUJPOˠ$%,ˠ5FSSBGPSNʣ
ͨͩɺखΛಈ͔ͯ͠։ൃ͢Δͷ͖🧑💻
"84ֶशͷ͖͔͚ͬ
ࢿ֨औಘͷ͖͔͚ͬd"844VNNJUd
ࢿ֨औಘͷ͖͔͚ͬd"844VNNJUd ೝఆऀϥϯδʹೖΓ͍ͨͬʂʂʂ😇
"84ࢿ֨Λऔಘ͠Α͏ͱࢥ͖͔͚ͬͨͬ "844VNNJUͷೝఆऀϥϯδೖΓ͍ͨ ઐ༻8J'J͕͋ΔʂϊϕϧςΟ͕͋Δʂ͓͕ͭ͋Δʂˠ͕ɺແࢿ֨ͷҝೖΕͣ Ͱݟ͍ͯΔͱɺೝఆऀϥϯδ͕͘͢͝׆گˠ"84ࢿ֨Λ࣋ͬͯΔਓ͜Μͳʹ͍ΔΜͩʂͱϏϏΔ &$Ҏ֎ͷ"84αʔϏεΓ͔ͨͬͨ "844VNNJUͰ༷ʑͳαʔϏεΛͬͨࣄྫΛฉ͍ͯϏϏΔʢ͔͠͠த͔Γ·ͤΜͰͨ͠ɻɻʣ ͓٬༷ʮίετ͕ؾʹͳΔ͔Β&$ʓʓ࣌ʹͳͬͨΒҰׅγϟοτμϯ͢ΔεΫϦϓτ͕ಈ͖·͢ʯ ΅͘ʮຖεΫϦϓτ࣮ߦ໘͘͘͞ͳ͍ʁଞͷαʔϏε͑ͬͱίετ͑ΒΕΔ͚ͣͩͲɺ
ͲͷαʔϏεΛ͑ྑ͍ͷ͔͔ΒΜ͠ɺݟ͕ͳ͍😇ʯ ࣗͷεΩϧɾࢢՁ্ ྡΓʹ࠲͍ܹͬͯͨπϤΤϯδχΞͷํ͕ʮ"84ࢿ֨ྑ͍ͧʯͱݴ͍ͬͯͨ ΤϯδχΞٻਓαΠτݟͯΔͱʮ"84ΤϯδχΞืूʯͷจࣈ͕͍ͬͺ͍
ࢼݧରࡦ
ݸʑͷࢼݧରࡦάάΓ·͠ΐ͏ʂ ઌਓͷϊϋ͕ͨ͘͞Μ͋Γ·͢ʂ
ΞϓϦΤϯδχΞถᖒͷֶशϞνϕʔγϣϯ
ΦϯϓϨͳ8&#αʔϏεPO"84 ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet
&$ΛηΩϡΞʹͯ͠ΈΑ͏ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Private
Subnet
#BDLFOEɺαʔόʔϨεͰಉ͡ࣄͰ͖ΔΜ͡Όͳ͍ʁ %#ͷ&$Πϯελϯεɺ3%4ͷํ͕ӡ༻ָ͡Όͳ͍ʁ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB RDS Public Subnet Private
Subnet API Gateway API Gateway Lambda
8&#αʔόɺ4ͱ$MPVE'SPOUʹͨ͠Β҆͘ͳΔʁ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC RDS Private Subnet API Gateway API
Gateway Lambda S3 Cloud Front
ΞϓϦͷϏϧυˠσϓϩΠΛࣗಈԽָ͍ͯͨ͠͠ʂ ඞཁͳ࣌Ҏ֎ڥΛফͯ͠ίετݮ͍ͨ͠ʂ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC RDS Private Subnet API Gateway
API Gateway Lambda S3 Cloud Front Code Pipeline Cloud Formation
࠲ֶͰֶΜͩ"84αʔϏεΛͲΜͲΜΞϓϦʹऔΓࠐΜͰΈΔ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Code
Pipeline Cloud Formation Beanstalk ECS Cognito KMS Systems Manager Amplify DynamoDB
࠲ֶͰֶΜͩ"84αʔϏεΛͲΜͲΜΞϓϦʹऔΓࠐΜͰΈΔ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Code
Pipeline Cloud Formation Beanstalk ECS Cognito KMS Systems Manager Amplify DynamoDB ॳظͷແࠎͳΞϓϦ͕ͲΜͲΜߴԽ͞Εָ͍ͯ͠ʂ🎉 ͑ΔαʔϏεͷҾ͖ग़͕͠૿͑Δͱָ͍͠ʂ🎉
Ұ࣌͜ΜͳαΠΫϧͰςϯγϣϯϋΠʹͳͬͯ·ͨ͠ "84ࢼݧษڧͰ αʔϏεαʔϏεͷ͍ํΛֶͿ ֶΜͩαʔϏε͍ํΛ ࣮ફͯ͠Έͨ͘ͳΔ ࣗͷΞϓϦڥʹదԠͯ͠ΈΔ ˠಈ͘ͱָ͍͠
ͬͱߴͳ͍ํผαʔϏεΛ Γͨ͘ͳΔ
ࢿ֨શ෦औΔͷʹ͕͔͔࣌ؒΓ·ͨ͠ɺɺ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ SAA࠲ֶʢࢀߟॻʣΦϯϦʔͰ ษڧ͢Δɺ2ճͷෆ߹֨Λୟ͖ग़͢ɻ ϘϩϘϩʹͳΓͳ͕ΒԿͱ͔߹֨͠ɺ શʹ೩͑ਚ͖Δ ಉظʹʮAWSࢿ֨औͬͯͳ͍ͷʁʯͱ ἤΒΕͯCLFΛडݧ͢Δ Ζ͘ʹษڧͤͣʹ߹֨ɺຯΛΊΔ ࠲ֶͰษڧ࢝͠ΊΔɻ༰͕ΞϓϦدΓ ͩͬͨͷͰɺ໘ന͘ͳͬͯ͘Δ&࣮ػͰࢼ ͣ͞ʹ͍ΒΕͳ͘ͳΔ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ SAAͰۤ࿑ͨ͠ɺAWSશൠͷ͕ࣝ ͍ͬͯͨɻจ͕ඇৗʹจͳͷͰ ಡղྗͷ্ҙࣝͭͭ͠ɺԋशͰ ग़͖ͯͨࡉ͔͍Φϓγϣϯܥ࣮ػͰಈ ࡞֬ೝɻ།ҰͷSAPରࡦຊ(※)ಡΈࠐΈ ૯্͛ɻ͔ͳΓ࣌ؒΛ͔͚ͨɻ ˞ IUUQXXXSJDDPKQDSFBUFCPPLDPOUFOUTCPPL@IUNM ʘૣ͞Μஶʂʗ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ ςϯγϣϯϋΠظɻAWSઐଐ෦ୂʹҟಈ ͨ͜͠ͱ͋Γɺֶशҙཉ͕MAXʹɻ ܧଓͯ͠खಈ͔ͭͭ͠ɺԋशͬ ͍ͯͨɻ௨ۈ࣌ؒʹBlackbeltಡΜͩΓɻ What'sNewಡΈ࢝ΊΔ δϣϒνΣϯδ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH શ෦औಘ͔ͯ͠Βࢥ͏͜ͱ Solution ArchitectʢAssociate,Professionalʣ ΊͪΌͪ͘ΌେࣄɻSpecialty͜ͷ2ͭͷ ࢿ֨ͷ͕͔ࣝͬ͠Γʹ͍͍ͭͯΕ Ұؾʹϋʔυϧ͕Լ͕Δ
ࢿ֨Λऔͬͨޙ
"84ࢿ֨Λ࣋ͬͯΔͱ͍͍ࣄ͕ͨ͘͞Μ ᶃνϟϯε͕͕ͬͨ ύϒϦοΫΫϥυઐ෦ୂʹҟಈɺ"84ઐʹͳΔ ଞ෦ॺͷํͱͷίωΫγϣϯɺࣾ֎Ξτϓοτͷػձ ᶄͭΑ্͍࢘ͷݴͬͯΔ͜ͱ͕ཧղͰ͖ΔΑ͏ʹͳͬͨ ʙʙ"84ઃܭͷٞதʙʙ ্࢘ʮ$PO fi
Hɺ(VBSE%VUZɺ*"."DDFTT"OBMZ[FSͷݕ݁ՌΛ4FDVSJUZ)VCʹूͯ͠ 0SHBOJ[BUJPO౷߹Ͱʙʙʯ ถᖒʮ͓ʁܹπϤ্͕࢘ݴ͍ͬͯΔ୯ޠ͕͔ΔͧʂʁͳΜ͔خ͍͠ʯ ᶅγεςϜΛΉࡍͷϓϥΫςΟεֶ͕Δ ֶशΛ௨ͯ͠8FMM"SDIJUFDUFEֶ͕Δ 8FMM"SDIJUFDUFEͳࢥ"84ͷੈքΛඈͼӽ͑ͯʹཱͭ ᶆࢢՁ͕ര্͕Γͨ͠ ΊͬͪΌϝοηʔδΛ͚ΔΑ͏ʹͳΓ·ͨ͠
"84ࢿ֨Λ࣋ͬͯΔͱ͍͍ࣄ͕ͨ͘͞Μ ᶃνϟϯε͕͕ͬͨ ύϒϦοΫΫϥυઐ෦ୂʹҟಈɺ"84ઐʹͳΔ ଞ෦ॺͷํͱͷίωΫγϣϯɺࣾ֎Ξτϓοτͷػձ ᶄͭΑ্͍࢘ͷݴͬͯΔ͜ͱ͕ཧղͰ͖ΔΑ͏ʹͳͬͨ ʙʙ"84ઃܭͷٞதʙʙ ্࢘ʮ$PO fi
Hɺ(VBSE%VUZɺ*"."DDFTT"OBMZ[FSͷݕ݁ՌΛ4FDVSJUZ)VCʹूͯ͠ 0SHBOJ[BUJPO౷߹Ͱʙʙʯ ถᖒʮ͓ʁܹπϤ্͕࢘ݴ͍ͬͯΔ୯ޠ͕͔ΔͧʂʁͳΜ͔خ͍͠ʯ ᶅγεςϜΛΉࡍͷϓϥΫςΟεֶ͕Δ ֶशΛ௨ͯ͠8FMM"SDIJUFDUFEֶ͕Δ 8FMM"SDIJUFDUFEͳࢥ"84ͷੈքΛඈͼӽ͑ͯʹཱͭ ᶆࢢՁ͕ര্͕Γͨ͠ ΊͬͪΌϝοηʔδΛ͚ΔΑ͏ʹͳΓ·ͨ͠
ΤϯδχΞٻਓαΠτ ࢢՁ͕ര্͕Γͨ͠
ΤϯδχΞٻਓαΠτ ࢢՁ͕ര্͕Γͨ͠ खಈฦࣄͩͱ͍͔ͭͳ͍ఔʹֻ͓͚͚·͢🙇
·ͱΊ ࢿֶ֨शΛ௨ͯ͠ʮ"84ͷ͍ํʯҎ্ͷ͜ͱֶ͕Δ 8FMM"SDIJUFDUFEͳߟ͑ํγεςϜߏஙʹඞͣੜ͖Δ ͭͷ͜ͱΛΓൈ͍ͨʂͱڳΛுΕΔ "84ͷֶशʹΑΓνϟϯε͕͍ࠐΜͰ͘Δ "84ࢿ֨*5ք۾Ͱඇৗʹߴ͘ධՁ͞Ε͍ͯΔ δϣϒνΣϯδର֎Ξτϓοτͷۙಓ څྉ্͕͕Δ͔͠Εͳ͍ঢਐͰ͖Δ͔͠Εͳ͍ ʮͱΓ͋͑ͣಈ͔ͯ͠ΈΔʯΛڧ͓͘͢͢Ί ࠲ֶͷΈͩͱͲ͏ͯ͠٫͕ͪ͠ɻखΛಈ͔͢ͱఆண͕·ΔͰҧ͏
·ͣࣗͷ͖ͳಘҙͳྖҬ͔Βֶशͯ͠ΈΔ
·ͱΊ ࢿֶ֨शΛ௨ͯ͠ʮ"84ͷ͍ํʯҎ্ͷ͜ͱֶ͕Δ 8FMM"SDIJUFDUFEͳߟ͑ํγεςϜߏஙʹඞͣੜ͖Δ ͭͷ͜ͱΛΓൈ͍ͨʂͱڳΛுΕΔ "84ͷֶशʹΑΓνϟϯε͕͍ࠐΜͰ͘Δ "84ࢿ֨*5ք۾Ͱඇৗʹߴ͘ධՁ͞Ε͍ͯΔ δϣϒνΣϯδର֎Ξτϓοτͷۙಓ څྉ্͕͕Δ͔͠Εͳ͍ঢਐͰ͖Δ͔͠Εͳ͍ ʮͱΓ͋͑ͣಈ͔ͯ͠ΈΔʯΛڧ͓͘͢͢Ί ࠲ֶͷΈͩͱͲ͏ͯ͠٫͕ͪ͠ɻखΛಈ͔͢ͱఆண͕·ΔͰҧ͏
·ͣࣗͷ͖ͳಘҙͳྖҬ͔Βֶशͯ͠ΈΔ ೦ئͷೝఆऀϥϯδʹ·ͩೖΕͳͦ͞͏Ͱ͢ɻɻ😇
5IBOL:PV