rights reserved. ;M PO RI HL A F A C / DA CG A D C CA C C A A C A & DA AC 2 C C C A A A C E A / C C A D CDA A AC C C E AC F A C C C C A C D , ,! !& #,$, F6. K- *, ( :8 LN 2E 7A $ * + ?>G= (), PC (B/< $, I4 & ++ J3 "( 9@ 1C $, +& ( MH %' DO 05 * ,+
rights reserved. Chaincode basics Code executed on the network, and can query and update ledger Fabric supports chaincode in three languages: Chaincode execute within a docker container on peer nodes Chaincode has two operations in its interface: • Init()—initializes the chaincode with parameters • Invoke()—invokes the chaincode with parameters
rights reserved. Starter edition and standard edition Starter edition • Test and small production networks • Up to 5 members/network • Up to 2 peer nodes/member • bc.t3.small and bc.t3.medium • 1 TiB maximum/peer node • Ordering service provisioned has lower transaction throughput and availability than that in a Standard Edition network Membership pricing rate is different for each edition Standard edition • Production networks • Up to 30 members/network • Up to 10 peer nodes/member • bc.t3, bc.m5, and bc.c5 instance families • 15 TiB maximum/peer node • Ordering service provisioned has higher transaction throughput and availability than that in a Starter Edition network
rights reserved. Verifiability in Amazon QLDB J INSERT cars ID:1 Manufacturer: Tesla Model: Model S Year: 2012 VIN: 123456789 Owner: Traci Russell Metadata: { Date:07/16/2012 } H(T1 ) INSERT cars ID:1 Manufacturer: Tesla Model: Model S Year: 2012 VIN: 123456789 Owner: Traci Russell Metadata: { Date:07/16/2012 } H(T1 )=2526f16306c819d651af075934170d2430d246d9ab98d975d28a83baded47ca7 SHA-256
rights reserved. What is verifiability? 2/#,$ -031 )(*" &+ ! !.%'*" , Cryptographic technique Digest Customer, Ronnie can verify the date Traci sold the car to him was indeed 7/16
rights reserved. )0 5 10 059 0 2 0 ) • K t r • K s • S a m nvp W • I K i g ei • 0 6 215 ( y k IA K • AWS CloudTrail ci PM Data Key 1 Amazon S3 Object Amazon EBS Volume Amazon Redshift Cluster Data Key 2 Data Key 3 AWS KMS
rights reserved. • i HSM eM lC • FIPS 140-2 3 t • Amazon VPC V S A M v • PKCS#11, secp256k1, Java Cryptography Extensions (JCE), Microsoft CryptoNG (CNG) LW C n t API • BitCoin P p Ho secp256k1 Hu H da CloudHSM r H C H ( () L
rights reserved. Y e4 5 A f c R 3F C AWS Well-Architected Framework A https://wa.aws.amazon.com/wat.pillar.se curity.en.html AWS . 1 .1 12 https://pages.awscloud.com/fintech- reference-architecture-wp-jp.html FISC K PCI-DSS K https://www.fisc.or.jp/publication/guideline.php https://ja.pcisecuritystandards.org/
rights reserved. t D r Wu I benA W G t P rW I S W I R r Wu I • W G zy P W I • W wG oe P W I N Al T Nd m o ao P r C c hc W I • ikb oaA be P F p z L T W I AWS Amazon VPC Amazon GuardDuty AWS WAF AWS Shield
rights reserved. dD pD RDS/Aurora Datacenter Infrastructure OS rf Compute Storage ibe D sD Z e D dD uycR b bo s cg M IM L Z e D y D ( CdD pD D D( / dD uycR dD O C ) - Network: AZSubnetRoute TableSecurity Group sD : C BC- - b bo s cg s cg R f C ba Sr t y W / P - OS: RDSS O o l C bodDe rf dD pD neOo l : A Z muDey D O e D O ( A A eCdD DC C yD O t y W
rights reserved. S P c t P i ) - 1 D( P ciDo c e W )( -/ 1 : 3 D s o S r / Ds MS t ( g r ( g I P tBM a l - AZ: Multi-AZ KL n M - Subnet: L a I i Private Subnet - Route Table: i o - Security Group: S i oA y
rights reserved. S d s bi ) -1 1 5 5 D )bi c M 1 2 / nm (3 5 1 2 v LM /51 /5: 31 /51 /5: 31 s MB /51 M a c r ly D A l p a cr tp M RP R RP R M b s Qe s Qe M
rights reserved. Ga bgl Production Account KYC Account IAM Root User Secrets Manager KMS VPC KYC DB Aurora VPC Service App Back Office Tool CloudWatch Logs IAM Role KYC APP Other Region CloudTrail CloudTrail Rotation Copy CW Logs to S3 Log Check App Log Work Log Aurora audit log DB Snapshot w r KMS S3 P sy b e W L C B C : , N PRIE V b eL ncGdmo Y BA 3 3 R V B oiP K L C : B P . E Bsy b e W L BA 3 3 . A C P . E C B Bsy b e W L . B3B r 3 3r . oi BY L . aGk ndGP L BA 3 3 pS b eL M E B tu KMS S3 Secrets Manager
rights reserved. i rC • aki obePlo C aki N VB w W kp a ki 1 1A DB • 1 obe npg Cl dCb npg ClN VB • R . 3 KY b T Y R Y bP. 3 tEB yP/ 3 V 1 Nuv TWK 1 N S VB
rights reserved. • - g I K 3 A I b- oPr yR f R R I K 3 A I om oP I K 3 A I 1:,rut g R feo k R R R b5IG L KBG rut c f oPeV I K 3 A I o kg 13 u R ,31cSo SoP nf 1:,r yR WnYg13 igrw l o SoP • g R R I K 3 A I LIGI d pb o k c R R P R R g 2 E 5, f poP ( c f R R oYdl P R R g fa b Y n • 5, GB K I K 3 A Id13 g 5, GB K B 1:, GL K K I KN 5, . GB Kg s R c R 1:,r yR g s R d R R 2 E f oP g 5, GB K B 5IG L KBG GL K K M N KN 5, . GB K 5GDB Ncrw e 6 GLI g1:, f oP • I K 3 A I 13 igrw I K 3 A Id13 ) R Rc GIC I G g 3 6GD 5, . GB K grw g oP ) y Rc GIC I G g 3 6GD 5, . GB K grw g oP
rights reserved. ) . ( 2 Secrets Manager VPC KYC DB Aurora VPC KYC APP Rotation KMS IAM L 3K 3 3 3 Lkg nm P IAM Role Production Account KYC Account V a S bB M L nm 3 3 3 I 3 3 3 A A LR Y L 3KdE nm PA DG lL nm P Cie c c L V a S bB I g L V a S bB nm P S3 S3 KMS Secrets Manager c c L V a S bB I L V a S bB nm P
rights reserved. • s nl vn (5 /1 s nl vn hH K (5 AF C / LR E P hH • vI Ivn vI Ivn (DA A I Iy hH ys uy M(5 a y IrI hH • rIals y I / F F hR y IrI h I rI h hH/ F ( CA C A A C I I a r l Sih I I I Ll tI P h3 hHd DC/ F F D / F C C ( C . AC / F1 C A as m p I 1,( hH • rIa I I (5 a)1/ I I P ih y I a)1/ I I Si l tI W K)1/P iheL hHe I I K hK arI l n I h rIon ly I I hH • /1 a3 C 0 C /1 AF C ( . AF C ( . a A 0 CP hH I rI r hR /1 ca( .uI H
rights reserved. a ah • m n 4 3 . ah a t m n B P tB K PE R K n O tB n d RDb K n SR D n o Ds b K MC • RL m n h n B 4 3 t K DC s m n h n p • m n h n b K m n h n B
rights reserved. eu iEl • yEkE eu iEl fwE d C McPyEkE eu iEl A 3I SdrE T eu iEl R O D • . Y Ep O gE e n d O . .d O Ce n R D C 55 / d a B S B d O D • . e n d O B C R. e n d O Bd O D • eu iEl S u f eu iEl Es d KP C Es t E u n d O D PC IoE Es S u fd R d O D
rights reserved. b u M • u b u PR Ptc uLBY d I 66 d FK C 66 d R MF il P mt YDML P Y • aos eru d u u . ni aos eru P d Y FCR 6 FK B 6 6 A 6 LBY Y 6 d R MF il P mt YDML P Y L Y mt Y
rights reserved. ( • i 3 d 1 2 7 DC : . 2 d TaI id 4 D7 / :C / d 2 hmu rTaIesw l i PKW D d d TaI • i esw l id h wyt d TaI o MK d s nmd I L s nmP M ba) cb g d Ta . 2 3 , 7 AD 1 d Ta ehnm i d Ta S . p l d Ta
rights reserved. / WU g - 1. sw Ce d F - 1. L uw l o l prw Cs TL IRS c i uw l 1. c iT g g +- / o ltweC / Uo ltweC o U/: 3 + L uw l o ltweCU L n l C T g uw l Un l C T F P o P P g +- 8: : 2 / U T 8: : 2 A2 U +- L uw l n l C T g uw l 2 R 8: : U F TS
rights reserved. : FinTech - https://aws.amazon.com/jp/compliance/fintech/ ) s s c s ) t r s r e i s dm weR dm o U U Ur n s o c m weRc r r r s u dm weR ) t s r m o U s d wit U r e u rdm weR s U U t ) / / /7) u- )2 Es r r m ) r mt ) /)2 n eR/ FK KO F ) 2 F E FK /)2 n t dm U U/ s s m U Us U r U Us s r bo n weR U U n g e t sys rop m_jc R rt U U u w weRwi ) wit/)2 U U vs r 2-)W e y weR /)2s u rl m t s 1 _jc R AKK ( E PGF GE E s 1 dm_jc AKK ( G E PGF GE C :C /)2 D K K I.L K I K AKED Ts r m /)2 U rl mt e wit /)2s U m s/ ) K M I KGIO pWo e pdm e weR/)2n U e U s z2-) ps /)2n n weRhs s/)2s r e t s 1 _j c R AKK ( G E PGF GE C :C /)2 D K K I.L K I K AKED z n/ S U ps ) O K E 2 F Is I E K I KGI bon r e bo n U U z rh s U U e _ weR I E K I KGI rl mt s 1 dm_jc R AKK ( E PGF GE C O K E E F I I E K I KGI wi ) U vs r ) 0 O z I K ) 0 OWrl mt I FK D z s r s z ) 7 )E PGF G F KG bon hs ebo n zt U U a bo n r weR s z rl mt s 1 dm_j c R AKK ( G E PGF GE C :C /)2 D K K I.L : I FK D : K E AKED b s U U r m U U . K pW r d r dm_jc R) nt i s i s U dm weR rl mt s 1 _jc R AKK ( KAL GE D K I K
rights reserved. • AWS Loft Tokyo Meetup Blockchain • Tech Biz c • Slack • B @ • 2019/07/25 #00 Kick-Off i no f i Ginco double jump.tokyo i l Curvegrid i Jeff Wentworth i ALIS • 2019/09/30 #01 Tech AWS Senior Blockchain Specialist, Carl Youngblood Curvegrid i a AWS Japan Solutions Architect k h • 2019/11/29 #02 Biz i Ginco L i LayerX i t
zabbio
whisaiyo
yamaguchitk333
asei
line_developers_tw
hiroramos4
ry
_awache
kinunori
8maki
hamukazu
yoshimi0227
aleyda
techseoconnect
maggiecrowley
ianozsvald
sabderemane
coloredviolet
axbom
morganepeng
badams
jct
matthewcrist
jeffersonlam
