Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
202203_FinJAWS
Search
Takuya Yonezawa
March 24, 2022
Technology
380
1
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
202203_FinJAWS
Takuya Yonezawa
March 24, 2022
More Decks by Takuya Yonezawa
See All by Takuya Yonezawa
20260516_SecJAWS_Days
takuyay0ne
5
940
20260422_Midosuji_Tech
takuyay0ne
2
120
脱 雰囲気実装!AgentCoreを良い感じにWEBアプリケーションに組み込むために
takuyay0ne
3
680
20260228_JAWS_Beginner_Kansai
takuyay0ne
5
780
20260204_Midosuji_Tech
takuyay0ne
1
260
20260129_CB_Kansai
takuyay0ne
1
400
20260126_JAWS_Osaka
takuyay0ne
1
74
こんな時代だからこそ! 想定しておきたいアクセスキー漏洩後のムーブ
takuyay0ne
4
830
セキュリティは全員参加!_JAWSのイベントサイトで脅威モデリングを学んでみよう!
takuyay0ne
0
230
Other Decks in Technology
See All in Technology
Slack上でインフラをトラブルシュートする! Agentic Platform Engineeringの第一歩
teru0x1
5
1.8k
リアーキテクチャ後の障害ゼロを目指したShadow Testingの取り組み
nihonbuson
PRO
1
160
Claude Codeを「使うほど育つ」AI秘書にするノウハウ
minorun365
PRO
33
29k
アプリをもっと"iOSアプリっぽく"する小さな工夫 / Small Touches That Make Your App Feel More Like an iOS App
matsuji
2
980
データ界隈LT祭 第1回LT登壇
taromatsui_cccmkhd
2
1.5k
技術的負債から考える、AI時代のエンジニアリング投資 — ビズリーチの技術的負債と向き合った経験から、変更し続けられるソフトウェアを考える/ technical-debt-con2026
visional_engineering_and_design
4
3.3k
作って終わりじゃないサーバーレス 〜9年運用する大規模EC物流API基盤の設計・運用のリアル〜
zozotech
PRO
0
360
ADKで始める業務改善 - AIエージェント開発時の考えと設計
harappa80
2
250
ScotSecure West 2026 - Glasgow
raybugg
0
130
アクセスキーこわい やめかたと漏らさない工夫
sassssan68
1
520
白金鉱業Meetup Vol.25 アウトカムが二値のデータに対するCausal Impact
brainpadpr
0
260
Goodbye ShellScript, Hello File-based App
shunsock
0
500
Featured
See All Featured
YesSQL, Process and Tooling at Scale
rocio
174
15k
A designer walks into a library…
pauljervisheath
211
25k
My Coaching Mixtape
mlcsv
0
320
What the history of the web can teach us about the future of AI
inesmontani
PRO
1
700
Pawsitive SEO: Lessons from My Dog (and Many Mistakes) on Thriving as a Consultant in the Age of AI
davidcarrasco
0
250
The Power of CSS Pseudo Elements
geoffreycrofte
82
6.6k
Winning Ecommerce Organic Search in an AI Era - #searchnstuff2025
aleyda
2
2.1k
A better future with KSS
kneath
240
18k
Building the Perfect Custom Keyboard
takai
2
880
Become a Pro
speakerdeck
PRO
31
6.3k
Unsuck your backbone
ammeep
672
58k
BBQ
matthewcrist
89
10k
Transcript
ΞϓϦΤϯδχΞ͕Ή"84શף ଜ૯߹ݚڀॴ ถᖒ ҙࢤബऑͳ
͡Ίʹ ຊ͓͍͑ͨ͜͠ͱ ݩΦϯϓϨΞϓϦΤϯδχΞͰҙࢥͷڧ͘ͳ͍ถᖒ͕ ͲͷΑ͏ʹ"84ࢿ֨औಘͷϞνϕΛҡ࣋ͨ͠ͷ͔ ࢿ֨Λऔಘ͔ͯ͠ΒԿ͕มΘͬͨͷ͔ ຊ͓͑͠ͳ͍͜ͱ ֤ࢿ֨ࢼݧͷৄࡉͳ߈ུํ๏
͡Ίʹ ҙࢤബऑ ͍ J ͠ TIJ ͘ IBLV ͡Ό͘
KBLV ࣄΛબ·࣮ͨߦ͠Α͏ͱ͢Δࢤܾஅྗ͕ऑ͘ɺ ࣗͷߟ͑Λอͯͣɺਓͷݴಈʹࠨӈ͞Ε͍͢͞·ɻ HPPࣙॻ
͜Εʂ ʹଜ૯߹ݚڀॴʹ৽ଔೖࣾɻۚ༥ۀքͷ͓٬༷͚ʹ ϑϩϯτγεςϜͷߏஙΤϯϋϯεΛ୲ͨ͠ޙʹδϣϒνΣϯδɻ ݱࡏ࢈ۀۀքͷ͓٬༷͚ʹ"84ڥશൠͷઃܭߏஙΛ୲ɻ ࠷ۙ5BJMXJOE$44ʹڵຯɻࢦͤLTνϣοτσΩϧɻ ͖ͳ"84αʔϏε4". 4UFQ'VODUJPOT $PEF#VJME ͖ͳٕज़/FYUKT
5BJMXJOE$44 %PDLFS LT 3BODIFS UBLVZBZPOF ถᖒ 5BLVZB:POF[BXB
ҙࢤڧ͘ͳ͍͋Δ͋Δ
ถᖒҙࢥ͕͋·Γڧ͋͘Γ·ͤΜ ʹճ͔͠ड͚ΒΕͳ͍ࢼݧͳͷʹ Ӎ͕͍͔߱ͬͯͨΒडݧΛஅ೦ ࢼݧձͰචശΕͨ͜ͱʹؾ͘ˠؼ ࢼݧձۙ͘ͷߦྻ͕Ͱ͖Δϥʔϝϯٵ͍ࠐ·ΕΔˠؼ ৽͍͠ྲྀߦΓʹྲྀ͞ΕΔɺͰ͘ଓ͔ͳ͍ ݸਓ։ൃͰ͏8&#ϑϨʔϜϫʔΫΛ͜Ζ͜Ζม͑Δʢ"OHVMBSˠ7VFˠ3FBDUˠ/FYUKTʣ ʮ͖ͳ"84αʔϏεʯ͕݄Πν͘Β͍ͰมΘΔ Α͘͏*B$αʔϏε͜͜Ͱ͜Ζ͜ΖมΘΔʢ$MPVE'PSNBUJPOˠ$%,ˠ5FSSBGPSNʣ
ͨͩɺखΛಈ͔ͯ͠։ൃ͢Δͷ͖🧑💻
"84ֶशͷ͖͔͚ͬ
ࢿ֨औಘͷ͖͔͚ͬd"844VNNJUd
ࢿ֨औಘͷ͖͔͚ͬd"844VNNJUd ೝఆऀϥϯδʹೖΓ͍ͨͬʂʂʂ😇
"84ࢿ֨Λऔಘ͠Α͏ͱࢥ͖͔͚ͬͨͬ "844VNNJUͷೝఆऀϥϯδೖΓ͍ͨ ઐ༻8J'J͕͋ΔʂϊϕϧςΟ͕͋Δʂ͓͕ͭ͋Δʂˠ͕ɺແࢿ֨ͷҝೖΕͣ Ͱݟ͍ͯΔͱɺೝఆऀϥϯδ͕͘͢͝׆گˠ"84ࢿ֨Λ࣋ͬͯΔਓ͜Μͳʹ͍ΔΜͩʂͱϏϏΔ &$Ҏ֎ͷ"84αʔϏεΓ͔ͨͬͨ "844VNNJUͰ༷ʑͳαʔϏεΛͬͨࣄྫΛฉ͍ͯϏϏΔʢ͔͠͠த͔Γ·ͤΜͰͨ͠ɻɻʣ ͓٬༷ʮίετ͕ؾʹͳΔ͔Β&$ʓʓ࣌ʹͳͬͨΒҰׅγϟοτμϯ͢ΔεΫϦϓτ͕ಈ͖·͢ʯ ΅͘ʮຖεΫϦϓτ࣮ߦ໘͘͘͞ͳ͍ʁଞͷαʔϏε͑ͬͱίετ͑ΒΕΔ͚ͣͩͲɺ
ͲͷαʔϏεΛ͑ྑ͍ͷ͔͔ΒΜ͠ɺݟ͕ͳ͍😇ʯ ࣗͷεΩϧɾࢢՁ্ ྡΓʹ࠲͍ܹͬͯͨπϤΤϯδχΞͷํ͕ʮ"84ࢿ֨ྑ͍ͧʯͱݴ͍ͬͯͨ ΤϯδχΞٻਓαΠτݟͯΔͱʮ"84ΤϯδχΞืूʯͷจࣈ͕͍ͬͺ͍
ࢼݧରࡦ
ݸʑͷࢼݧରࡦάάΓ·͠ΐ͏ʂ ઌਓͷϊϋ͕ͨ͘͞Μ͋Γ·͢ʂ
ΞϓϦΤϯδχΞถᖒͷֶशϞνϕʔγϣϯ
ΦϯϓϨͳ8&#αʔϏεPO"84 ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet
&$ΛηΩϡΞʹͯ͠ΈΑ͏ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Private
Subnet
#BDLFOEɺαʔόʔϨεͰಉ͡ࣄͰ͖ΔΜ͡Όͳ͍ʁ %#ͷ&$Πϯελϯεɺ3%4ͷํ͕ӡ༻ָ͡Όͳ͍ʁ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB RDS Public Subnet Private
Subnet API Gateway API Gateway Lambda
8&#αʔόɺ4ͱ$MPVE'SPOUʹͨ͠Β҆͘ͳΔʁ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC RDS Private Subnet API Gateway API
Gateway Lambda S3 Cloud Front
ΞϓϦͷϏϧυˠσϓϩΠΛࣗಈԽָ͍ͯͨ͠͠ʂ ඞཁͳ࣌Ҏ֎ڥΛফͯ͠ίετݮ͍ͨ͠ʂ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC RDS Private Subnet API Gateway
API Gateway Lambda S3 Cloud Front Code Pipeline Cloud Formation
࠲ֶͰֶΜͩ"84αʔϏεΛͲΜͲΜΞϓϦʹऔΓࠐΜͰΈΔ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Code
Pipeline Cloud Formation Beanstalk ECS Cognito KMS Systems Manager Amplify DynamoDB
࠲ֶͰֶΜͩ"84αʔϏεΛͲΜͲΜΞϓϦʹऔΓࠐΜͰΈΔ ͱΓ͋͑ͣΞϓϦΛҰຊ࡞ͬͯΈͨ VPC WEB Backend DB Public Subnet Code
Pipeline Cloud Formation Beanstalk ECS Cognito KMS Systems Manager Amplify DynamoDB ॳظͷແࠎͳΞϓϦ͕ͲΜͲΜߴԽ͞Εָ͍ͯ͠ʂ🎉 ͑ΔαʔϏεͷҾ͖ग़͕͠૿͑Δͱָ͍͠ʂ🎉
Ұ࣌͜ΜͳαΠΫϧͰςϯγϣϯϋΠʹͳͬͯ·ͨ͠ "84ࢼݧษڧͰ αʔϏεαʔϏεͷ͍ํΛֶͿ ֶΜͩαʔϏε͍ํΛ ࣮ફͯ͠Έͨ͘ͳΔ ࣗͷΞϓϦڥʹదԠͯ͠ΈΔ ˠಈ͘ͱָ͍͠
ͬͱߴͳ͍ํผαʔϏεΛ Γͨ͘ͳΔ
ࢿ֨શ෦औΔͷʹ͕͔͔࣌ؒΓ·ͨ͠ɺɺ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ SAA࠲ֶʢࢀߟॻʣΦϯϦʔͰ ษڧ͢Δɺ2ճͷෆ߹֨Λୟ͖ग़͢ɻ ϘϩϘϩʹͳΓͳ͕ΒԿͱ͔߹֨͠ɺ શʹ೩͑ਚ͖Δ ಉظʹʮAWSࢿ֨औͬͯͳ͍ͷʁʯͱ ἤΒΕͯCLFΛडݧ͢Δ Ζ͘ʹษڧͤͣʹ߹֨ɺຯΛΊΔ ࠲ֶͰษڧ࢝͠ΊΔɻ༰͕ΞϓϦدΓ ͩͬͨͷͰɺ໘ന͘ͳͬͯ͘Δ&࣮ػͰࢼ ͣ͞ʹ͍ΒΕͳ͘ͳΔ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ SAAͰۤ࿑ͨ͠ɺAWSશൠͷ͕ࣝ ͍ͬͯͨɻจ͕ඇৗʹจͳͷͰ ಡղྗͷ্ҙࣝͭͭ͠ɺԋशͰ ग़͖ͯͨࡉ͔͍Φϓγϣϯܥ࣮ػͰಈ ࡞֬ೝɻ།ҰͷSAPରࡦຊ(※)ಡΈࠐΈ ૯্͛ɻ͔ͳΓ࣌ؒΛ͔͚ͨɻ ˞ IUUQXXXSJDDPKQDSFBUFCPPLDPOUFOUTCPPL@IUNM ʘૣ͞Μஶʂʗ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH ถᖒͷडݧཤྺ ςϯγϣϯϋΠظɻAWSઐଐ෦ୂʹҟಈ ͨ͜͠ͱ͋Γɺֶशҙཉ͕MAXʹɻ ܧଓͯ͠खಈ͔ͭͭ͠ɺԋशͬ ͍ͯͨɻ௨ۈ࣌ؒʹBlackbeltಡΜͩΓɻ What'sNewಡΈ࢝ΊΔ δϣϒνΣϯδ
$MPVE1SBDUJUJPOFS 4PMVUJPO"SDIJUFDUʢ"TTPDJBUFʣ ˠམͪΔ ˠམͪΔ ˠड͔Δ %FWFMPQFSʢ"TTPDJBUFʣ 4ZT0QTʢ"TTPDJBUFʣ
4PMVUJPO"SDIJUFDUʢ1SPGFTTJPOBMʣ %FW0QTʢ1SPGFTTJPOBMʣ 4FDVSJUZ %BUBCBTF %BUB"MBOZUJDT .BDIJOF-FBSOJOH /FUXPSLJOH શ෦औಘ͔ͯ͠Βࢥ͏͜ͱ Solution ArchitectʢAssociate,Professionalʣ ΊͪΌͪ͘ΌେࣄɻSpecialty͜ͷ2ͭͷ ࢿ֨ͷ͕͔ࣝͬ͠Γʹ͍͍ͭͯΕ Ұؾʹϋʔυϧ͕Լ͕Δ
ࢿ֨Λऔͬͨޙ
"84ࢿ֨Λ࣋ͬͯΔͱ͍͍ࣄ͕ͨ͘͞Μ ᶃνϟϯε͕͕ͬͨ ύϒϦοΫΫϥυઐ෦ୂʹҟಈɺ"84ઐʹͳΔ ଞ෦ॺͷํͱͷίωΫγϣϯɺࣾ֎Ξτϓοτͷػձ ᶄͭΑ্͍࢘ͷݴͬͯΔ͜ͱ͕ཧղͰ͖ΔΑ͏ʹͳͬͨ ʙʙ"84ઃܭͷٞதʙʙ ্࢘ʮ$PO fi
Hɺ(VBSE%VUZɺ*"."DDFTT"OBMZ[FSͷݕ݁ՌΛ4FDVSJUZ)VCʹूͯ͠ 0SHBOJ[BUJPO౷߹Ͱʙʙʯ ถᖒʮ͓ʁܹπϤ্͕࢘ݴ͍ͬͯΔ୯ޠ͕͔ΔͧʂʁͳΜ͔خ͍͠ʯ ᶅγεςϜΛΉࡍͷϓϥΫςΟεֶ͕Δ ֶशΛ௨ͯ͠8FMM"SDIJUFDUFEֶ͕Δ 8FMM"SDIJUFDUFEͳࢥ"84ͷੈքΛඈͼӽ͑ͯʹཱͭ ᶆࢢՁ͕ര্͕Γͨ͠ ΊͬͪΌϝοηʔδΛ͚ΔΑ͏ʹͳΓ·ͨ͠
"84ࢿ֨Λ࣋ͬͯΔͱ͍͍ࣄ͕ͨ͘͞Μ ᶃνϟϯε͕͕ͬͨ ύϒϦοΫΫϥυઐ෦ୂʹҟಈɺ"84ઐʹͳΔ ଞ෦ॺͷํͱͷίωΫγϣϯɺࣾ֎Ξτϓοτͷػձ ᶄͭΑ্͍࢘ͷݴͬͯΔ͜ͱ͕ཧղͰ͖ΔΑ͏ʹͳͬͨ ʙʙ"84ઃܭͷٞதʙʙ ্࢘ʮ$PO fi
Hɺ(VBSE%VUZɺ*"."DDFTT"OBMZ[FSͷݕ݁ՌΛ4FDVSJUZ)VCʹूͯ͠ 0SHBOJ[BUJPO౷߹Ͱʙʙʯ ถᖒʮ͓ʁܹπϤ্͕࢘ݴ͍ͬͯΔ୯ޠ͕͔ΔͧʂʁͳΜ͔خ͍͠ʯ ᶅγεςϜΛΉࡍͷϓϥΫςΟεֶ͕Δ ֶशΛ௨ͯ͠8FMM"SDIJUFDUFEֶ͕Δ 8FMM"SDIJUFDUFEͳࢥ"84ͷੈքΛඈͼӽ͑ͯʹཱͭ ᶆࢢՁ͕ര্͕Γͨ͠ ΊͬͪΌϝοηʔδΛ͚ΔΑ͏ʹͳΓ·ͨ͠
ΤϯδχΞٻਓαΠτ ࢢՁ͕ര্͕Γͨ͠
ΤϯδχΞٻਓαΠτ ࢢՁ͕ര্͕Γͨ͠ खಈฦࣄͩͱ͍͔ͭͳ͍ఔʹֻ͓͚͚·͢🙇
·ͱΊ ࢿֶ֨शΛ௨ͯ͠ʮ"84ͷ͍ํʯҎ্ͷ͜ͱֶ͕Δ 8FMM"SDIJUFDUFEͳߟ͑ํγεςϜߏஙʹඞͣੜ͖Δ ͭͷ͜ͱΛΓൈ͍ͨʂͱڳΛுΕΔ "84ͷֶशʹΑΓνϟϯε͕͍ࠐΜͰ͘Δ "84ࢿ֨*5ք۾Ͱඇৗʹߴ͘ධՁ͞Ε͍ͯΔ δϣϒνΣϯδର֎Ξτϓοτͷۙಓ څྉ্͕͕Δ͔͠Εͳ͍ঢਐͰ͖Δ͔͠Εͳ͍ ʮͱΓ͋͑ͣಈ͔ͯ͠ΈΔʯΛڧ͓͘͢͢Ί ࠲ֶͷΈͩͱͲ͏ͯ͠٫͕ͪ͠ɻखΛಈ͔͢ͱఆண͕·ΔͰҧ͏
·ͣࣗͷ͖ͳಘҙͳྖҬ͔Βֶशͯ͠ΈΔ
·ͱΊ ࢿֶ֨शΛ௨ͯ͠ʮ"84ͷ͍ํʯҎ্ͷ͜ͱֶ͕Δ 8FMM"SDIJUFDUFEͳߟ͑ํγεςϜߏஙʹඞͣੜ͖Δ ͭͷ͜ͱΛΓൈ͍ͨʂͱڳΛுΕΔ "84ͷֶशʹΑΓνϟϯε͕͍ࠐΜͰ͘Δ "84ࢿ֨*5ք۾Ͱඇৗʹߴ͘ධՁ͞Ε͍ͯΔ δϣϒνΣϯδର֎Ξτϓοτͷۙಓ څྉ্͕͕Δ͔͠Εͳ͍ঢਐͰ͖Δ͔͠Εͳ͍ ʮͱΓ͋͑ͣಈ͔ͯ͠ΈΔʯΛڧ͓͘͢͢Ί ࠲ֶͷΈͩͱͲ͏ͯ͠٫͕ͪ͠ɻखΛಈ͔͢ͱఆண͕·ΔͰҧ͏
·ͣࣗͷ͖ͳಘҙͳྖҬ͔Βֶशͯ͠ΈΔ ೦ئͷೝఆऀϥϯδʹ·ͩೖΕͳͦ͞͏Ͱ͢ɻɻ😇
5IBOL:PV