Upgrade to Pro — share decks privately, control downloads, hide ads and more …

元現場エンジニアが思う「もっとこうしておけばよかった」から学ぶDevSecOps / ...

ihcomega56
November 05, 2021

元現場エンジニアが思う「もっとこうしておけばよかった」から学ぶDevSecOps / DevSecOps Best Practices learned from my experiences

CloudNative Days Tokyo 2021

ihcomega56

November 05, 2021
Tweet

More Decks by ihcomega56

Other Decks in Technology

Transcript

  1. 1 Α͜ͳͰ͢ "ZBOB:PLPUB • +'SPHͷσϕϩούʔΞυϘέΠτ • લ৬·Ͱ͸ओʹόοΫΤϯυͷ։ൃ ʢ4*FS ޿ࠂձࣾ ূ݊ελʔτΞοϓʣ

    • 1PLFNPO (Pͷότϧ·ָ͍͡͠ ࠓ೔͸ΞϓϦέʔγϣϯ։ൃऀ໨ઢͰ ͓࿩͠͠·͢ʂ 5XJUUFS !JIDPNFHB
  2. ώϯτ̎ ηΩϡϦςΟνʔϜ΋Ұॹʹ΋ͷͮ͘ΓΛ͢Δ஥ؒͰ͢ 📘։ൃɾӡ༻ʹՃ͑ͯηΩϡϦςΟνʔϜͱ΋ڠۀ͢Δ • ͳΔ΂͘ΰʔϧΛڞ༗͠߹͏౒ྗΛ͠Α͏ • େ͖ͳಉ͡ΰʔϧΛ࣋ͭͱ͍͏ҙຯͰͷڞ༗ • ͦΕͧΕͷখ͞ͳΰʔϧΛ͓ޓ͍஌͓ͬͯ͘ͱ͍͏ҙຯͰͷڞ༗ •

    ඞཁͳ͚࣌ͩ࿈བྷ͢ΔͷͰͳ͘ɺීஈ͔Βίϛϡχέʔγϣϯ ΛऔΕΔؔ܎ੑΛங͜͏ • ૊৫ͷߏ଄తʹ೉͍͠৔߹͸Ͳ͏ؤுͬͯ΋ݫ͍͠ɾɾɾ • ಛʹେاۀʹ͓͚Δ ηΩϡϦςΟνʔϜͱͷؔΘΓํͰΦεεϝ΍ ੒ޭྫ͕͋Ε͹ڭ͍͑ͯͩ͘͞ʂ 13
  3. ώϯτ̑ ηΩϡϦςΟνΣοΫɺ౰ͨΓલʹ΍Γ·͠ΐ͏ 📘γϑτϨϑτɾ4%-$΁ͷ૊ΈࠐΈ • ࣗಈԽ͠ɺ$*$%ύΠϓϥΠϯͷதʹ૊ΈࠐΉ • ϦϦʔε௚લʹ·ͱΊͯߦ͏ͱϦϦʔεͷ஗Εʹܨ͕ΔͷͰආ͚Δ • ස౓΍λΠϛϯάΛܾΊΔΑΓɺ։ൃΛਐΊΔͱඞͣ௨ΔΑ͏ʹ͢Δ •

    ͍͟՝୊͕ݟ͔ͭͬͨͱ͖ͷରԠ΋͋Δఔ౓Πϝʔδ͓ͯ͘͠ • ఆྔతͳ݁Ռ ॏେ౓ɺ$744είΞͳͲ ʹԠͨ͡ϧʔϧΛఆΊ͓ͯ͘ • ʮ΍Βͳ͍͜ͱʯΛܾΊΔͷ΋େࣄ • ਓͷ൑அ͸ͳ͘ͳΒͳ͍͕ɺ ͦ͜ʹϦιʔεΛׂͨ͘Ίʹ΋ࣗಈԽ͢Δ 22 $744 $PNNPO7VMOFSBCJMJUZ4DPSJOH4ZTUFN ੬ऑੑΛධՁ͢ΔͨΊͷΦʔϓϯͳۀքඪ४
  4. 4%-$ʹηΩϡϦςΟΛ૊ΈࠐΉ νΣοΫ Ξ΢τ Ϗϧυ ςετ ϦϦʔε σϓϩΠ ڴҖ ϞσϦϯά 4"45

    %"45 ϖϯςετ 4$" ϑΝδϯά 4"45 ϒϥοΫϘοΫε ςετ %"45 ϖϯςετ ϗϫΠτϘοΫε ςετ ϑΝδϯά 4$" 23 શ෦ ͜͜Ͱ΍Δ ʘ·ͣ͸ॻ͍ͨίʔυʹ%"45ʗ ʘͦͯ͠044ʹ4$"ͱ͍͏ʗ ʘॱͰ࢝ΊͯΈͯ͸ʁʗ
  5. ؾ෇͖͔Β࢝·Δ • Կ͔଍Γͳ͍ͱײ͡Δ৔߹ɺ৽͍͜͠ͱ΍ۤखͳ͜ͱʹ௅ઓ͠ ͍͚ͨͲΠϚΠν౿Έग़ͤͳ͍ͱ͍͏৔߹͸ • ࣗ෼͕ࠓԿʹؔ৺͕͋Δͷ͔ʁԿ͕ग़དྷ͍ͯͳ͍ͷ͔ʁ෼ੳͯ͠ΈΔ • ౿Έग़ͤͳ͍ྖҬɺؔΘΓ͕ബ͍ਓʑ΋େ͖ͳ໨త ओʹϏδωε Λ

    ͱ΋ʹ໨ࢦ͢஥ؒͩͱଊ͑ɺ઀఺Λ୳͢ • ͜ΕΛ৐Γӽ͑ͨΒ۩ମతͳํ๏࿦͕ΑΓͬ͘͠Γ͖ͨΓɺͲ͔͜Β ࢝ΊΔ͔൑அ͠΍͘͢ͳͬͨΓ͢Δ͔΋ʂʁ • ࢲͱશવҧ͏ཱ৔ɾҙݟͷํ͸ͦͷʮҧ͏ͳʙʯͱ͍͏ײ૝΋ ͋Δҙຯؾ෇͖͔΋͠Ε·ͤΜ 29
  6. ϕετϓϥΫςΟε࣮ફͷώϯτ ΢ΣϏφʔ IUUQTKGSPHDPNKBSFTPVSDFTVQDPNJOHXFCJOBST • ͖ͬ͞ग़͖ͯͨʮΞʔςΟϑΝΫτ؅ཧʯʹ͍ͭͯ • ݄೔ʙ ։ൃɾӡ༻ޮ཰ͱηΩϡϦςΟ޲্Λॿ͚Δ ΞʔςΟϑΝΫτ؅ཧ •

    +'SPH 1MBUGPSNʹ͝ڵຯΛ͓࣋ͪͷํ ͋Γ͕ͱ͏͍͟͝·͢ʂ ޲͚ • ݄೔ʙ ͸͡Ίͯͷ +'SPH1MBUGPSN ࠷ޙʹΑΖ͚͠Ε͹ Ξϯέʔτʹ͝ڠྗ͍ͩ͘͞🐸 34