IAM Roles for Service Accounts 〜やさしいIRSA入門〜

͋ͳͨͷ&,4Ϋϥελʔɺ ৮ͬͪΌμϝͳ"84Ϧιʔε΁ͷ ΞΫηε੍ޚͪΌΜͱͰ͖ͯ·͔͢ʁ ʙ ΍͍͞͠*34"ೖ໳ ʙ ΈͷΔΜ !NJOPSVO

XIPBNJ 御⽥稔 !NJOPSVO ,%%*גࣜձࣾ ˍ ,%%*ΞδϟΠϧ։ൃηϯλʔגࣜձࣾʢ,"(ʣ ࡢ೥౓·Ͱ৘γεͰࢮ͵΄Ͳ&,4Ϋϥελʔ؅ཧͯ͠·ͨ͠ɻ ࠷ۙ͸"*धཁͰ"[VSFͰͷ։ൃ΋૿͖͑ͯͯ·͢ɻ +"846(43&ࢧ෦ӡӦ
+"84%":4࣮ߦҕһ • "84$PNNVOJUZ#VJMEFS • ,%%*$MPVE4".63"* • ,%%*$MPVE"NCBTTBEPST

"84ϢʔβʔͷΈͳ͞Μɺ&,4͸޷͖Ͱ͔͢ʁ

&,4࢖ͬͯΔͱɺ1PE͔Βଞͷ"84Ϧιʔεʹ ΞΫηεͨ͘͠ͳΔ͜ͱ͋Γ·͢ΑͶʁ &,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ

&,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ ͋Εɺ͜͜ͷݖݶऔಘͲ͏͠Α͏ʜʁ 🤔

&,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ ͋Εɺ͜͜ͷݖݶऔಘͲ͏͠Α͏ʜʁ 🤔 "84Ϧιʔεͷݖݶऔಘͱ ͍͑͹ *".ϩʔϧʂ

*".ϩʔϧΛී௨ʹ෇͚ΒΕΔͷ͸ "84Ϧιʔε ʹ &,4ϊʔυʢ&$΍'BSHBUFʣ &,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ &,4ϊʔυ

ϊʔυʹͦͷ··*".ϩʔϧͰ ݖݶ෇༩ͪ͠ΌͬͯΔਓɺ͍·ͤΜ͔ʜʁ &,4Ϋϥελʔ 1PE ଞͷ"84Ϧιʔε σʔλऔಘͳͲ ݖݶ෇༩ʂ

Կ͕໰୊ͳͷ͔ʁ

௨ৗɺ&,4Ϋϥελʔ಺ʹ͸ ෳ਺༻్ͷ1PE͕Քಇ͍ͯ͠Δ͜ͱ΋ଟ͍Ͱ͢ &,4Ϋϥελʔ ஍ຯΞϓϦ ଞͷ"84Ϧιʔε େਓؾΞϓϦ

ଞͷ"84ϦιʔεʹϚϧൿ৘ใΛऔΓʹ͍͘ͷ͕ ஍ຯΞϓϦ͚ͩͩͬͨͱͯ͠΋ʜ &,4Ϋϥελʔ ஍ຯΞϓϦ ଞͷ"84Ϧιʔε େਓؾΞϓϦ THFU0CKFDU

౔୆ͷϊʔυࣗମʹ*".ϩʔϧ͕෇͍͍ͯΔͱ ྆ํͷ1PEͱ΋ʹΞΫηεݖݶ͕෇͍ͯ͠·͏ &,4Ϋϥελʔ ஍ຯΞϓϦ ଞͷ"84Ϧιʔε େਓؾΞϓϦ

ͭ·Γɺຊ౰͸ؔ܎ͳ͍ผͷΞϓϦ͕΍΂ౕ͑ʹ ৐ͬऔΒΕ͚ͨͩͰϚϧൿ৘ใ΋࿙Ӯͯ͠͠·͏ʜʂ &,4Ϋϥελʔ ஍ຯΞϓϦ ଞͷ"84Ϧιʔε େਓؾΞϓϦ ΍΂ౕ͑

͡Ό͋ɺ Ͳ͏͢Ε͹͍͍ͷ͔ʁ

安⼼してください IRSAがありますよ

*34"ʜʁ

*3 ʹ *".3PMFT 4" ʹ 4FSWJDF"DDPVOUT

*".3PMFT GPS 4FSWJDF"DDPVOUT

*".3PMFTGPS4FSWJDF"DDPVOUT ͭ·Γɺ "84ͷੈքͱ,Tͷੈք ྆ऀͷೝূػߏΛ ϚϦΞʔδϡͤ͞Δػೳʂ

*34"ͷ͘͠Έ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE 1PE͔Β4όέοτΛ৮Γ͍ͨ৔߹

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE 1PE͔Β4όέοτΛ৮Γ͍ͨ৔߹ ʢ೔ຊ͔ΒΞϝϦΧʹ౉ߤ͢Δͱߟ͑ͯΈΑ͏ʣ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE ·ͣ"84*".্ʹ0*%$ϓϩόΠμʔΛ࡞੒͠·͢ ʢΞϝϦΧʹ೔ຊେ࢖ؗΛݐͯΔʣ 0*%$ϓϩόΠμʔ ൃߦ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE *".ϩʔϧˍαʔϏεΞΧ΢ϯτΛ࡞੒͠·͢ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ Ξϊςʔγϣϯ
ʢ஫ऍʣʹ෇Ճ *".ϩʔϧ ΞΫηεڐՄ ৴པϙϦγʔ Ͱࢦఆ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE ։ൃऀ͕1PEىಈίϚϯυΛ&,4΁ૹ৴͠·͢ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ *".ϩʔϧ
LVCFBQJTFSWFS 1PEىಈʂ ։ൃऀ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE ͢Δͱ1PE*EFOUJUZ8FCIPPL͕1PEఆٛΛߋ৽͠·͢ ʢύεϙʔτൃߦॴͷΑ͏ͳ΋ͷʣ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ
*".ϩʔϧ LVCFBQJTFSWFS ։ൃऀ 1PE*EFOUJUZ8FCIPPL

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE ͦͯ͠LVCFMFU͕4"τʔΫϯΛ1PEʹϚ΢ϯτ͠·͢ ʢύεϙʔτͷΑ͏ͳ΋ͷʣ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ
*".ϩʔϧ LVCFBQJTFSWFS ։ൃऀ 1PE*EFOUJUZ8FCIPPL LVCFMFU 4"τʔΫϯ ىಈ࣌ʹϚ΢ϯτ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE 1PE͸"84ͷ454ʹ"TTVNF3PMFΛཁٻ͠·͢ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ *".ϩʔϧ
LVCFBQJTFSWFS ։ൃऀ 1PE*EFOUJUZ8FCIPPL LVCFMFU 4"τʔΫϯ 454 Ұ࣌ೝূΛऔಘ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε 1PE 454͸1PEͷ4"τʔΫϯΛ֬ೝ͠·͢ʢೖࠃ৹ࠪʣ 0*%$ϓϩόΠμʔ͕৴པ͢ΔΫϥελʔ͔ΒͷൃߦͳΒ0, 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ
*".ϩʔϧ LVCFBQJTFSWFS ։ൃऀ 1PE*EFOUJUZ8FCIPPL LVCFMFU 4"τʔΫϯ 454

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". LVCFBQJTFSWFS LVCFMFU 1PE*EFOUJUZ8FCIPPL αʔϏεΞΧ΢ϯτ 4"τʔΫϯ 454 0*%$ϓϩόΠμʔ
1PE͕৮Γ͍ͨ "84Ϧιʔε *".ϩʔϧ 1PE ։ൃऀ 1PE͸&,4Ϋϥελʔ͕ೝΊͨਖ਼نͷϦιʔεͩͱ֬ೝ׬ྃʂ ඥ͚ͮΒΕͨ*".ϩʔϧΛແࣄʹҰ࣌ར༻Ͱ͖Δ 🎉 ੖ΕͯΞΫηεʂ

ޚୗ͸෼͔ͬͨʂ ͱΓ࣮͋͑ͣػΛݟͤΖ ʢσϞ࣮ԋλΠϜʣ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". LVCFBQJTFSWFS LVCFMFU 1PE͕৮Γ͍ͨ "84Ϧιʔε QPECFGPSF ։ൃऀ ᶃ
ී௨ʹ1PEΛ࡞ͬͯ4΁ΞΫηεͯ͠ΈΔ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε ᶄ "84*".্ʹ0*%$ϓϩόΠμʔΛ࡞੒͢Δ 0*%$ϓϩόΠμʔ ൃߦ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". 1PE͕৮Γ͍ͨ "84Ϧιʔε ᶅ *".ϩʔϧˍαʔϏεΞΧ΢ϯτΛ࡞੒͢Δ 0*%$ϓϩόΠμʔ αʔϏεΞΧ΢ϯτ Ξϊςʔγϣϯ
ʢ஫ऍʣʹ෇Ճ *".ϩʔϧ ΞΫηεڐՄ ৴པϙϦγʔ Ͱࢦఆ

ίϯτϩʔϧϓϨʔϯʢ&,4ʣ ϊʔυʢ&$ʣ "84*". LVCFBQJTFSWFS LVCFMFU 1PE*EFOUJUZ8FCIPPL αʔϏεΞΧ΢ϯτ 4"τʔΫϯ 454 0*%$ϓϩόΠμʔ
1PE͕৮Γ͍ͨ "84Ϧιʔε *".ϩʔϧ QPEBGUFS ։ൃऀ ᶆ *34"ͱඥ෇͚ͯɺ࠶౓1PEΛىಈʂ ੖ΕͯΞΫηεʂ

ࢀߟจݙ Πϯλʔωοτͷӥஐʹײँ͠·͢ɻࢲ΋ෛ͚ͣʹίϯτϦϏϡʔτ͍͖ͯ͠·͢ʂ • ,VCFSOFUFTr ೝূʢ,VCFSOFUFTJPʣ LVCFSOFUFTJPKBEPDTSFGFSFODFBDDFTTBVUIOBVUI[BVUIFOUJDBUJPO • &,4ͷBXTBVUIͱ͔*34"ͱ͔ʢձ઒͞Μʣ [FOOEFWOBNFMFTT@HZP[BBSUJDMFTFLTBVUIFOUJDBUJPOBVUIPSJ[BUJPO •
,VCFSOFUFTαʔϏεΞΧ΢ϯτʹର͢Δ͖Ίࡉ΍͔ͳ*".ϩʔϧׂΓ౰ͯͷ঺հʢ"84ࣾʣ BXTBNB[PODPNKQCMPHTOFXTJOUSPEVDJOHGJOFHSBJOFEJBNSPMFTTFSWJDFBDDPVOUT • ,VCFSOFUFTʹ͓͍ͯͷ"84ϦιʔεͷΞΫηε؅ཧʢ.FUSJD'JSFࣾʣ RJJUBDPN.FUSJD'JSFJUFNTCGFCCFEBF • "84&,4ͷ*".3PMFTGPS4FSWJDF"DDPVOUTΛ׬શʹཧղͨ͠ʢ,BJUPZ͞Μʣ XXXLBJUPZYZ[BXTJSTB

2JJUB&OHJOFFS'FTUBͰձࣾର߅ઓҐΛૂͬͯ·͢💪 RJJUBDPNPSHBOJ[BUJPOTLEEJBHJMF

,%%*ΞδϟΠϧ։ൃηϯλʔʢ,"(ʣઈࢍ࠾༻தʂ ϑϧϦϞʔτͳιϑτ΢ΣΞΤϯδχΞઈࢍืूͯ͠·͢👍

IAM Roles for Service Accounts 〜やさしいIRSA入門〜

IAM Roles for Service Accounts 〜やさしいIRSA入門〜

More Decks by みのるん

Other Decks in Technology

Featured

Transcript