AWSͰҎԼͷ2ͭͷࢥΛͬͯ։ൃ͕ਐΊΒΕ͍ͯΔ※1 • API First ͷઃܭΞϓϩʔν શͯͷνʔϜαʔϏεΠϯλϑΣʔεΛ௨ͯ͠σʔλΛެ։͢Δ • Two-Pizza Teams ίϥϘϨʔγϣϯ্ͷͨΊ2ͭͷϐβΛ͚߹͑ΔఔͷਓͰ νʔϜΛߏ͢Δ※2 6 AWSͷࢥ ※1ࢀߟʮAWS MACH ΞϥΠΞϯεʹࢀՃ͠·ͨ͠ʯhttps://aws.amazon.com/jp/blogs/news/aws-joins-mach-alliance/ ※2ʮIntroduction to DevOps on AWS - Two-Pizza Teamsʯhttps://docs.aws.amazon.com/whitepapers/latest/introduction-devops-aws/two-pizza-teams.html
͋ΔͷJeff Bezos͞ΜͷࢦࣔͷҾ༻※͕Α͘આ໌ʹΘΕΔ 7 API First ͷઃܭΞϓϩʔν ※ʮStevey's Google Platforms Rantʯhttps://gist.github.com/chitchcock/1281611 1.All teams will henceforth expose their data and functionality through service interfaces. 2.Teams must communicate with each other through these interfaces. 3.There will be no other form of interprocess communication allowed: no direct linking, no direct reads of another team's data store, no shared-memory model, no back-doors whatsoever. The only communication allowed is via service interface calls over the network. 4.It doesn't matter what technology they use. HTTP, Corba, Pubsub, custom protocols -- doesn't matter. Bezos doesn't care. 5.All service interfaces, without exception, must be designed from the ground up to be externalizable. That is to say, the team must plan and design to be able to expose the interface to developers in the outside world. No exceptions. 6.Anyone who doesn't do this will be fired. 7.Thank you; have a nice day!
2004͙Β͍ͷهࣄ※Ͱطʹݴ͍ͬͯͨɻ࣌ؒͷ߹ͰׂѪ 9 Two-Pizza Teams ※ʮIntroduction to DevOps on AWS - Two-Pizza Teamsʯhttps://docs.aws.amazon.com/ja_jp/whitepapers/latest/introduction-devops-aws/two-pizza-teams.html ެࣜࢿྉΑΓҾ༻ɿ ʮIntroduction to DevOps on AWS - Two-Pizza Teamsʯ※ The smaller the team the better the collaboration. Collaboration is also very important as the software releases are moving faster than ever. And a team’s ability to deliver the software can be a differentiating factor for your organization against your competition. Imagine a situation in which a new product feature needs to be released or a bug needs to be fixed you want this to happen as quickly as possible so you ca have a smaller go-to-market timed. This is also important as you don’t want the transformation to be a slow-moving process rather than an agile approach where waves of changes start to make an impact.
ҎԼͷ AWS API ͷهࣄ͕͓͢͢ΊͰ͢ ΫϥυαʔϏεͱԿͳͷ͔͔ΒAPIͷཪଆΛେ·͔ʹհ 11 AWS ͷ API ͱԿͳͷ͔ ʮAWS ͷ API Λཧղ͠Α͏ !ॳڃฤ ~ API ͷΈͱར༻ํ๏Λཧղ͠Α͏ʯ https://aws.amazon.com/jp/builders-flash/202209/way-to-operate-api/ هࣄΑΓҾ༻
16 ͜ΕԿͰ͠ΐ͏ʁ Jeff Barr͞ΜͷԞ͞Μͷ”༗໊ͳ”ΪϦγϟͷΠʔελʔϒϨουʂ CloudFormationͷGAهࣄ※Ͱొ ※ʮAWS CloudFormation – Create Your AWS Stack From a Recipeʯhttps://aws.amazon.com/jp/blogs/aws/cloudformation-create-your-aws-stack-from-a-recipe/
AWSϦιʔεΛελοΫͱ͍͏୯ҐͰཧ Ұճͷؔݺͼग़͠ͰελοΫશମΛߏՄೳʢ2011※ʣ 17 AWS CloudFormationͷొ ※ը૾Ҿ༻ݩʮAWS CloudFormation – Create Your AWS Stack From a Recipeʯhttps://aws.amazon.com/jp/blogs/aws/cloudformation-create-your-aws-stack-from-a-recipe/
CloudFormation͕ղܾͨ͠՝/ະղܾͷ՝ • ղܾͨ͠՝ • ൚༻త͔ͭ܁Γฦ͠ՄೳͳϓϩηεͰෳࡶͳγεςϜ͕ߏஙՄೳ • ӡ༻։ൃڥͳͲͷਖ਼֬ͳίϐʔ͕࡞Մೳ • ߏஙࣦഊ࣌ͷϩʔϧόοΫ͕Մೳʢ͋Δఔʣ • ະղܾͷ՝ • ςϯϓϨʔτͷهड़͕ʹͳΓ͘͢ෳࡶԽ͍͢͠※ • ಠಛͳهड़ʹ׳ΕΔͨΊͷ͕͔͔࣌ؒΔ • ύϥϝʔλͷ֬ೝ͕ஞҰඞཁ 19 AWS CloudFormation͕ͨΒͨ͠ͷ Description: This template deploys a VPC, with a pair of public and private subnets spread across two Availability Zones. It deploys an internet gateway, with a default route on the public subnets. It deploys a pair of NAT gateways (one in each AZ), and default routes for them in the private subnets. Parameters: EnvironmentName: Description: An environment name that is prefixed to resource names Type: String VpcCIDR: Description: Please enter the IP range (CIDR notation) for this VPC Type: String Default: 10.192.0.0/16 PublicSubnet1CIDR: Description: Please enter the IP range (CIDR notation) for the public subnet in the first Availability Zone Type: String Default: 10.192.10.0/24 PublicSubnet2CIDR: Description: Please enter the IP range (CIDR notation) for the public subnet in the second Availability Zone Type: String Default: 10.192.11.0/24 PrivateSubnet1CIDR: Description: Please enter the IP range (CIDR notation) for the private subnet in the first Availability Zone Type: String Default: 10.192.20.0/24 PrivateSubnet2CIDR: Description: Please enter the IP range (CIDR notation) for the private subnet in the second Availability Zone Type: String Default: 10.192.21.0/24 Resources: VPC: Type: AWS::EC2::VPC Properties: CidrBlock: !Ref VpcCIDR EnableDnsSupport: true EnableDnsHostnames: true Tags: - Key: Name Value: !Ref EnvironmentName InternetGateway: Type: AWS::EC2::InternetGateway Properties: Tags: - Key: Name Value: !Ref EnvironmentName InternetGatewayAttachment: Type: AWS::EC2::VPCGatewayAttachment Properties: InternetGatewayId: !Ref InternetGateway VpcId: !Ref VPC PublicSubnet1: Type: AWS::EC2::Subnet Properties: VpcId: !Ref VPC AvailabilityZone: !Select [ 0, !GetAZs '' ] CidrBlock: !Ref PublicSubnet1CIDR MapPublicIpOnLaunch: true Tags: - Key: Name Value: !Sub ${EnvironmentName} Public Subnet (AZ1) PublicSubnet2: Type: AWS::EC2::Subnet Properties: VpcId: !Ref VPC AvailabilityZone: !Select [ 1, !GetAZs '' ] CidrBlock: !Ref PublicSubnet2CIDR MapPublicIpOnLaunch: true Tags: - Key: Name Value: !Sub ${EnvironmentName} Public Subnet (AZ2) PrivateSubnet1: Type: AWS::EC2::Subnet Properties: VpcId: !Ref VPC AvailabilityZone: !Select [ 0, !GetAZs '' ] CidrBlock: !Ref PrivateSubnet1CIDR MapPublicIpOnLaunch: false Tags: - Key: Name Value: !Sub ${EnvironmentName} Private Subnet (AZ1) PrivateSubnet2: Type: AWS::EC2::Subnet Properties: VpcId: !Ref VPC AvailabilityZone: !Select [ 1, !GetAZs '' ] CidrBlock: !Ref PrivateSubnet2CIDR MapPublicIpOnLaunch: false Tags: - Key: Name Value: !Sub ${EnvironmentName} Private Subnet (AZ2) NatGateway1EIP: Type: AWS::EC2::EIP DependsOn: InternetGatewayAttachment Properties: Domain: vpc NatGateway2EIP: Type: AWS::EC2::EIP DependsOn: InternetGatewayAttachment Properties: Domain: vpc NatGateway1: Type: AWS::EC2::NatGateway Properties: AllocationId: !GetAtt NatGateway1EIP.AllocationId NatGateway2: Type: AWS::EC2::NatGateway Properties: AllocationId: !GetAtt NatGateway2EIP.AllocationId SubnetId: !Ref PublicSubnet2 PublicRouteTable: Type: AWS::EC2::RouteTable Properties: VpcId: !Ref VPC Tags: - Key: Name Value: !Sub ${EnvironmentName} Public Routes DefaultPublicRoute: Type: AWS::EC2::Route DependsOn: InternetGatewayAttachment Properties: RouteTableId: !Ref PublicRouteTable DestinationCidrBlock: 0.0.0.0/0 GatewayId: !Ref InternetGateway PublicSubnet1RouteTableAssociation: Type: AWS::EC2::SubnetRouteTableAssociation Properties: RouteTableId: !Ref PublicRouteTable SubnetId: !Ref PublicSubnet1 PublicSubnet2RouteTableAssociation: Type: AWS::EC2::SubnetRouteTableAssociation Properties: RouteTableId: !Ref PublicRouteTable SubnetId: !Ref PublicSubnet2 PrivateRouteTable1: Type: AWS::EC2::RouteTable Properties: VpcId: !Ref VPC Tags: - Key: Name Value: !Sub ${EnvironmentName} Private Routes (AZ1) DefaultPrivateRoute1: Type: AWS::EC2::Route Properties: RouteTableId: !Ref PrivateRouteTable1 DestinationCidrBlock: 0.0.0.0/0 NatGatewayId: !Ref NatGateway1 PrivateSubnet1RouteTableAssociation: Type: AWS::EC2::SubnetRouteTableAssociation Properties: RouteTableId: !Ref PrivateRouteTable1 SubnetId: !Ref PrivateSubnet1 PrivateRouteTable2: Type: AWS::EC2::RouteTable Properties: VpcId: !Ref VPC Tags: - Key: Name Value: !Sub ${EnvironmentName} Private Routes (AZ2) DefaultPrivateRoute2: Type: AWS::EC2::Route Properties: RouteTableId: !Ref PrivateRouteTable2 DestinationCidrBlock: 0.0.0.0/0 NatGatewayId: !Ref NatGateway2 PrivateSubnet2RouteTableAssociation: Type: AWS::EC2::SubnetRouteTableAssociation Properties: RouteTableId: !Ref PrivateRouteTable2 SubnetId: !Ref PrivateSubnet2 NoIngressSecurityGroup: Type: AWS::EC2::SecurityGroup Properties: GroupName: "no-ingress-sg" GroupDescription: "Security group with no ingress rule" VpcId: !Ref VPC Outputs: VPC: Description: A reference to the created VPC Value: !Ref VPC PublicSubnets: Description: A list of the public subnets Value: !Join [ ",", [ !Ref PublicSubnet1, !Ref PublicSubnet2 ]] PrivateSubnets: Description: A list of the private subnets Value: !Join [ ",", [ !Ref PrivateSubnet1, !Ref PrivateSubnet2 ]] PublicSubnet1: Description: A reference to the public subnet in the 1st Availability Zone Value: !Ref PublicSubnet1 PublicSubnet2: Description: A reference to the public subnet in the 2nd Availability Zone Value: !Ref PublicSubnet2 PrivateSubnet1: Description: A reference to the private subnet in the 1st Availability Zone Value: !Ref PrivateSubnet1 PrivateSubnet2: Description: A reference to the private subnet in the 2nd Availability Zone Value: !Ref PrivateSubnet2 NoIngressSecurityGroup: Description: Security group with no ingress rule Value: !Ref NoIngressSecurityGroup ※VPCͷαϯϓϧίʔυˠ
ҎԼCloudFormationͷGAهࣄ(2011)͔ΒҾ༻ɿ 20 CloudFormation͕࠷ऴతʹࢦ͍ͯͨ͠ͷʁ Ҿ༻ݩʮAWS CloudFormation – Create Your AWS Stack From a Recipeʯhttps://aws.amazon.com/jp/blogs/aws/cloudformation-create-your-aws-stack-from-a-recipe/ AWS is programmable, so it should be possible to build even complex systems (sometimes called “stacks”) using repeatable processes. ↓งғؾຊޠ༁ AWSϓϩάϥϚϒϧͳͷͰɺ܁Γฦ͠ՄೳͳϓϩηεͰෳࡶͳαʔϏε ʢ࣌ʑελοΫͱݺΕΔʣߏஙՄೳͳͣͰ͢ɻ The templates are just plain old text files. You can edit them with a text editor, keep them under source code control, or even generate them from another program. ↓งғؾຊޠ༁ ςϯϓϨʔτͨͩͷݹ͍ςΩετϑΝΠϧͰ͢ɻ͋ͳͨςΩετΤσΟλͰฤूͨ͠Γ ιʔείʔυཧͨ͠ΓɺผͷϓϩάϥϜ͔Βੜ͢Δ͜ͱͰ͖·͢ɻ
tomoki10
optim
sr2mg4
oracle4engineer
k1low
junkifurukawa
ks91
banjun
tacck
trrrrrys
ohmori_yusuke
line_developers
mongodb
sachag
cherdarchuk
danielanewman
zakiwarfel
tenderlove
quramy
addyosmani
sstephenson
philhawksworth
jennybc
dougneiner