Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
AWS Organizationsでマルチアカウント戦略を始めよう
Search
Sponsored
·
SiteGround - Reliable hosting with speed, security, and support you can count on.
→
MasahiroKawahara
February 08, 2023
Technology
1
4.8k
AWS Organizationsでマルチアカウント戦略を始めよう
MasahiroKawahara
February 08, 2023
Tweet
Share
More Decks by MasahiroKawahara
See All by MasahiroKawahara
新 Security HubがついにGA!仕組みや料金を深堀り #AWSreInvent #regrowth / AWS Security Hub Advanced GA
masahirokawahara
1
3.1k
AWS環境のリソース調査を Claude Code で効率化 / aws investigate with cc devio2025
masahirokawahara
2
1.8k
ここ一年のCCoEとしてのAWSコスト最適化を振り返る / CCoE AWS Cost Optimization devio2025
masahirokawahara
1
2k
生まれ変わった AWS Security Hub (Preview) を紹介 #reInforce_osaka / reInforce New Security Hub
masahirokawahara
0
1.3k
Amazon DevOps Guru のベースラインを整備して1ヶ月ほど運用してみた #jawsug_asa / Amazon DevOps Guru trial
masahirokawahara
3
560
DuckDB MCPサーバーを使ってAWSコストを分析させてみた / AWS cost analysis with DuckDB MCP server
masahirokawahara
0
2.4k
セキュリティ系アップデート全体像と AWS Organizations 新ポリシー「宣言型ポリシー」を紹介 / reGrowth 2024 Security
masahirokawahara
0
1.1k
わたしとトラックポイント / TrackPoint tips
masahirokawahara
1
620
AWS CLIとシェルスクリプト、いつ使う?活用できる場面とTips紹介 #devio2024 / AWS CLI and Shell Tips
masahirokawahara
0
1.6k
Other Decks in Technology
See All in Technology
広告の効果検証を題材にした因果推論の精度検証について
zozotech
PRO
0
230
プレビュー版のDevOpsエージェントを現段階で触ってみた
ad_motsu
1
150
マネージャー視点で考えるプロダクトエンジニアの評価 / Evaluating Product Engineers from a Manager's Perspective
hiro_torii
0
250
pool.ntp.orgに ⾃宅サーバーで 参加してみたら...
tanyorg
1
2.5k
日本の85%が使う公共SaaSは、どう育ったのか
taketakekaho
1
270
【Oracle Cloud ウェビナー】[Oracle AI Database + AWS] Oracle Database@AWSで広がるクラウドの新たな選択肢とAI時代のデータ戦略
oracle4engineer
PRO
2
220
新規事業開発でのAWS活用
amixedcolor
1
140
AWS DevOps Agent x ECS on Fargate検証 / AWS DevOps Agent x ECS on Fargate
kinunori
3
380
Amazon Rekognitionで 「信玄餅きなこ問題」を解決する
usanchuu
1
220
デザインもAIに任せる!iPhoneで行うiOS開発
zozotech
PRO
0
170
#23 Turing × atmaCup 2nd 6th Place Solution + 取り組み方紹介
yumizu
0
130
Agile Leadership Summit Keynote 2026
m_seki
1
730
Featured
See All Featured
<Decoding/> the Language of Devs - We Love SEO 2024
nikkihalliwell
1
140
Java REST API Framework Comparison - PWX 2021
mraible
34
9.2k
Claude Code のすすめ
schroneko
67
210k
Faster Mobile Websites
deanohume
310
31k
Leveraging LLMs for student feedback in introductory data science courses - posit::conf(2025)
minecr
0
170
Templates, Plugins, & Blocks: Oh My! Creating the theme that thinks of everything
marktimemedia
31
2.7k
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
akademiya2063
PRO
1
61
VelocityConf: Rendering Performance Case Studies
addyosmani
333
24k
The Curse of the Amulet
leimatthew05
1
8.9k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
133
19k
Into the Great Unknown - MozCon
thekraken
40
2.3k
The browser strikes back
jonoalderson
0
700
Transcript
"840SHBOJ[BUJPOTͰ ϚϧνΞΧϯτઓུΛ࢝ΊΑ͏ ݪେ
εϥΠυޙʹೖखՄೳͰ͢ ൃදதͷ༰ΛϝϞ͢Δඞཁ͋Γ·ͤΜ Attention
Έͳ͞Μ͕ৗͰ͍ͬͯΔ AWSΞΧϯτΛࢥ͍ු͔͍ͯͩ͘͞
EC2Πϯελϯεͷ ϦιʔεҰཡը໘
Α͍ͬͯ͘Δ IAMϢʔβʔIAMϩʔϧ
AWSར༻ͷٻใ
͜Μͳײ͡ʹͳ͍ͬͯ·ͤΜ͔ʁ
͍ΖΜͳϓϩδΣΫτ/ڥͷ EC2Πϯελϯε͕ͪ͝Ό·ͥ
IAMϙϦγʔਫ਼ࠪʹർฐ͍ͯ͠Δ
ٯʹաͳIAMϙϦγʔΛ༩͍ͯ͠Δ
৭ΜͳϓϩδΣΫτͷ ίετ͕ͪ͝Ό·ͥ
ͯ·Δํɾɾɾ ͥͻϚϧνΞΧϯτઓུ with AWS OrganizationsΛʂ
͜Ε͔Β͢͜ͱ ɾϚϧνΞΧϯτઓུͳͥඞཁʁ ɾ"840SHBOJ[BUJPOTͳͥඞཁʁ ɾϚϧνΞΧϯτઓུɺԿ͔Β࢝ΊΔʁ ݪ େ ɾΫϥεϝιου ɾAWSࣄۀຊ෦ ίϯαϧςΟϯά෦ॴଐ
ɾ͖ͳAWSαʔϏε: AWS IAM ɾ2022 APN AWS Top Engineers (Service) https://dev.classmethod.jp/author/kawahara-masahiro/
ϚϧνΞΧϯτઓུͳͥඞཁʁ
ͦͦ ϚϧνΞΧϯτઓུͱʁ
"84ͷϚϧνΞΧϯτઓུ ʰಛఆͷ୯Ґج४Ͱ"84ΞΧϯτΛ͚Δʱઓུ
ͳͥඞཁʁ
AWSΞΧϯτͷಛੑΛ͏·͘׆༻ͯ͠ ΞδϦςΟͱΨόφϯεΛཱ྆ͤ͞ΔͨΊ Q. AWSϚϧνΞΧϯτઓུͳͥඞཁʁ
ϚϧνΞΧϯτઓུͷϝϦοτ
ϝϦοτηΩϡϦςΟ্ "84ΞΧϯτηΩϡϦςΟͷڥքઢ lશͳݖݶzΛ࣮ݱ
ϝϦοτ։ൃεϐʔυͷଅਐ "84ΞΧϯτϦιʔεͷڥքઢ ଞϦιʔεͱͷlґଘؔzΛഉআ
ϝϦοτίετ࠷దԽ "84ΞΧϯτίετͷڥքઢ l؆୯ʹz͔ͭlݫີʹzίετྨ
͜͜·Ͱͷ·ͱΊ ϚϧνΞΧϯτઓུͰʰಛఆͷ୯Ґج४ʱͰ "84ΞΧϯτΛׂͯ͠ӡ༻͍ͯ͘͠ɻ ΞδϦςΟͱΨόφϯεΛཱ྆ͤ͞ΔͨΊʹඞཁɻ "84ΞΧϯτͷಛੑ ༷ʑͳڥքઢ Λ͏·͘׆༻ɻ
AWS Organizationsͳͥඞཁʁ
"840SHBOJ[BUJPOT ෳ"84ΞΧϯτΛ৫Խͯ͠৭ʑͰ͖ΔΑ͏ʹ͢ΔαʔϏε ը૾Ҿ༻: AWS Organizations ͷ༻ޠͱ֓೦ - AWS Organizations
ͳͥඞཁʁ
ϚϧνΞΧϯτઓུͷಛੑ্ ౷੍͕ࡶʹͳΓ͕ͪͳ෦Λ αϙʔτ͢ΔͨΊ Q. AWS Organizationsͳͥඞཁʁ
AWS Organizations͕αϙʔτ͢Δ͜ͱ #ϐοΫΞοϓ
ྫٻͷ؆ૉԽ ϚϧνΞΧϯτઓུlΞΧϯτຖͷٻཧz͕ࡶʹͳΓ͕ͪ ➔lཧΞΧϯτzٻΛू 5JQT "840SHBOJ[BUJPOTͰ छྨͷ"84ΞΧϯτΛఆΊ·͢ ཧΞΧϯτ ͭ
0SHBOJ[BUJPOTΛ༗ޮԽͨ͠ΞΧϯτ ϝϯόʔΞΧϯτ ෳ ཧΞΧϯτʹཧ͞ΕΔΞΧϯτ 📝
ϚϧνΞΧϯτઓུlϩά౷੍z͕ࡶʹͳΓ͕ͪ ➔l"840SHBOJ[BUJPOT࿈ܞzͰ؆୯ʹूɺूதཧ ྫϩά ূ ͷूͱूதཧ 5JQT "840SHBOJ[BUJPOTଟ͘ͷ"84αʔϏεͱ ࿈ܞ͍ͯ͠·͢ɻ 📝
ྫΞΫηε੍ޚͷҰׅઃఆ ϚϧνΞΧϯτઓུlηΩϡϦςΟ౷੍z͕ࡶʹͳΓ͕ͪ ➔αʔϏείϯτϩʔϧϙϦγʔ 4$1 ͰҰׅΞΫηε੍ޚ 5JQT 0SHBOJ[BUJPOBM6OJU ৫୯Ґ06
ϝϯόʔΞΧϯτΛάϧʔϓԽ֊Խ ͢ΔͨΊͷ αʔϏείϯτϩʔϧϙϦγʔ 4$1 06ΞΧϯτ୯ҐͰద༻͢ΔϙϦγʔ 📝
ྫϢʔβʔͱΞΫηεͷूதཧ ϚϧνΞΧϯτઓུlϢʔβʔɾΞΫηεཧz͕ࡶʹͳΓ͕ͪ ➔l"84*".*EFOUJUZ$FOUFSzͰूதཧ
͜͜·Ͱͷ·ͱΊ "840SHBOJ[BUJPOTෳͷ"84ΞΧϯτΛ৫ Խͯ͠ɺ৭ʑͰ͖ΔΑ͏ʹ͢ΔαʔϏεɻ ϚϧνΞΧϯτઓུͰ౷੍͕ࡶʹͳΓ͕ͪͳ෦Λ αϙʔτ͢Δɻ
ϚϧνΞΧϯτઓུɺԿ͔Β࢝ΊΔʁ
͓͢͢Ίεςοϓ ᶃ"84ΞΧϯτׂํΛܾΊΑ͏ ᶄαʔϏείϯτϩʔϧϙϦγʔ 4$1 Λ׆༻͠Α͏ ᶅ"84*".*EFOUJUZ$FOUFSΛ׆༻͠Α͏ ᶆ৭Μͳ0SHBOJ[BUJPOT࿈ܞαʔϏεΛ׆༻͠Α͏
ᶃ"84ΞΧϯτׂํΛܾΊΑ͏ "84ΞΧϯτΛׂ͢Δج४ΛఆΊ·͠ΐ͏ ͦΕʹ͋Θͤͨ৫୯Ґ 06 ઃܭΛߦ͍·͢
ᶃ"84ΞΧϯτׂํΛܾΊΑ͏ ΞΧϯτׂ06ઃܭͷϞσϧέʔε
ᶃ"84ΞΧϯτׂํΛܾΊΑ͏ ΞΧϯτׂ06ઃܭͷϞσϧέʔε ΞΧϯτԣஅͰ ηΩϡϦςΟӡ༻͢ΔͨΊͷ "84ΞΧϯτ ΞΧϯτԣஅͰ ϩάΛूதཧ͢ΔͨΊͷ "84ΞΧϯτ →
↑ ݕূ ඇຊ൪ ϫʔΫϩʔυͷ "84ΞΧϯτΛஔ͢Δ06 ↓ ຊ൪ϫʔΫϩʔυͷ "84ΞΧϯτΛஔ͢Δ06 ↓
ᶄαʔϏείϯτϩʔϧϙϦγʔ 4$1 Λ׆༻͠Α͏ ༧తΨʔυϨʔϧͱͯ͠ϑϧ׆༻ ˝Α͋͘Δ੍ޚྫ ɾΘͳ͍ϦʔδϣϯͰͷૢ࡞ېࢭ ɾηΩϡϦςΟαʔϏεͷແޮԽېࢭFUD ࢀߟ: αʔϏείϯτϩʔϧϙϦγʔͷྫ
- AWS Organizations
ᶅ"84*".*EFOUJUZ$FOUFSΛ׆༻͠Α͏ l୭͕ͲͷΞΧϯτʹͲͷݖݶͰΞΫηε͢Δ͔zΛूதཧ ֤"84ΞΧϯτʹ*".ϢʔβʔΛ࡞Δඞཁ͕ແ͘ͳΓ·͢
ᶆ৭Μͳ0SHBOJ[BUJPOT࿈ܞαʔϏεΛ׆༻͠Α͏ શͯΛ׆༻͍ͯ͘͠ඞཁແ͠ ˝͓͢͢Ί0SHBOJ[BUJPOT࿈ܞαʔϏε ɾ"84$MPVE5SBJM৫ϨϕϧͰূΛཧ ɾ"84$MPVE'PSNBUJPO06୯ҐͰϦιʔεΛల։ ɾ"NB[PO(VBSE%VUZ "844FDVSJUZ)VC ࣍εϥΠυ
"NB[PO(VBSE%VUZ "844FDVSJUZ)VC ηΩϡϦςΟαʔϏεΛΞΧϯτԣஅͰཧɾӡ༻ ࢀߟ: ɾOrganizations ڥͰ Amazon GuardDuty ΛશϦʔδϣϯ؆୯ηοτΞοϓͯ͠ΈΔ
| DevelopersIO ɾOrganizations ڥͰ AWS Security Hub ΛશϦʔδϣϯ؆୯ηοτΞοϓ͢Δ | DevelopersIO
͓ΘΓʹ
͓ΘΓʹ "84ΞΧϯτͷಛੑΛ্ख͘׆༻ͯ͠ɺϚϧνΞΧ ϯτઓུΛਪਐ͠·͠ΐ͏ɻ ਪਐαϙʔτʹ"840SHBOJ[BUJPOT͕ศརͰ͢ɻ lεϞʔϧελʔτzɺl·ͣ৮ͬͯΈΔzΛҙࣝ͠· ͠ΐ͏ʂ
࠷ޙʹએ$MBTTNFUIPE$MPVE(VJEFCPPL ʮ৫తͳ"84׆༻ͷͨΊͷϊϋʯΛ·ͱΊͨφϨοδू Ϋϥεϝιουϝϯόʔζ͚ʹແঈެ։தͰ͢📚 ˛"84αʔϏεͷϕετϓϥΫςΟε ˛"84ར༻ΨΠυϥΠϯͷαϯϓϧ ˞্ه༰ߋ৽͞ΕΔՄೳੑ͕͋Γɺ࣮ࡍͷϖʔδͱҟͳΔ߹͕͋Γ·͢ Ϋϥεϝιουϝϯόʔζϙʔλϧɿ ʮཱ͓ͪใʯˠʮ৫తͳ"84׆༻ͷͨΊͷϊϋʯ
None