Upgrade to Pro — share decks privately, control downloads, hide ads and more …

medibaにおけるIAMユーザ管理の歴史 / instudystyle LT mediba...

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Kazuki Numazawa Kazuki Numazawa
August 02, 2019
Technology
2
1.3k

medibaにおけるIAMユーザ管理の歴史 / instudystyle LT mediba IAM Management History

2019/08/02 インフラ・ネットワークエンジニア勉強会 Vol.1
https://istyle.connpass.com/event/133989/
にて、LT発表した資料。

Avatar for Kazuki Numazawa

Kazuki Numazawa

August 02, 2019
Tweet

More Decks by Kazuki Numazawa

See All by Kazuki Numazawa
システムのログは保存したか？で、その後どうする？システムのログ保存先とコスト最適化について
Avatar for Kazuki Numazawa numasawa
2
520
AWS account and user management design in asken
Avatar for Kazuki Numazawa numasawa
2
1.1k
日本からでも楽しめる！re:Inventの楽しみ方 / re:Invent 2018 from Japan
Avatar for Kazuki Numazawa numasawa
1
210
英語？なにそれおいしいの？人向けre:Inventを楽しむ方法 / re:Invent 2018 Standby
Avatar for Kazuki Numazawa numasawa
0
950
Utilization of data of RDS aurora
Avatar for Kazuki Numazawa numasawa
0
99
reinvent ultra quiz champion
Avatar for Kazuki Numazawa numasawa
0
600
AWS導入事例と失敗談
Avatar for Kazuki Numazawa numasawa
1
640

Other Decks in Technology

See All in Technology
バクラクのSREにおけるAgentic AIへの挑戦/Our Journey with Agentic AI
Avatar for SadayoshiTada taddy_919
1
490
【５分でわかる】セーフィー エンジニア向け会社紹介
Avatar for Safie safie_recruit
0
43k
「データとの対話」の現在地と未来
Avatar for kobakou kobakou
0
970
AIエンジニア Devin と歩む、自律型運用プロセスの構築
Avatar for a2-ito a2ito
0
360
Agentic Codingの実践とチームで導入するための工夫
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
0
200
社内ワークショップで終わらせない 業務改善AIエージェント開発
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
1
400
バクラクにおける Document Understanding の挑戦：書類の「読取」から「意思決定」へ / document-understanding-in-bakuraku-2026
Avatar for Yuya Matsumura yuya4
0
170
競争優位を生み出す戦略的内製開発の実践技法
Avatar for 増田 亨 masuda220
PRO
2
500
チームメンバー迷わないIaC設計
Avatar for hayama hayama17
5
3.2k
Secure Boot 2026 - Aggiornamento dei certificati UEFI e piano di adozione in azienda
Avatar for Intune Italian User Group memiug
0
120
LINE Messengerの次世代ストレージ選定
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
3
2.2k
Devinを導入したら予想外の人たちに好評だった
Avatar for Takafumi Omuro tomuro
0
540

Featured

See All Featured
GitHub's CSS Performance
Avatar for Jon Rohan jonrohan
1032
470k
Fantastic passwords and where to find them - at NoRuKo
Avatar for Phil Nash philnash
52
3.6k
Side Projects
Avatar for Sacha Greif sachag
455
43k
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k
Amusing Abliteration
Avatar for ianozsvald ianozsvald
0
120
How People are Using Generative and Agentic AI to Supercharge Their Products, Projects, Services and Value Streams Today
Avatar for Helen Beal helenjbeal
1
130
技術選定の審美眼（2025年版） / Understanding the Spiral of Technologies 2025 edition
Avatar for Takuto Wada twada
PRO
117
110k
Organizational Design Perspectives: An Ontology of Organizational Design Elements
Avatar for Dr. Kim W Petersen kimpetersen
PRO
1
620
The Illustrated Children's Guide to Kubernetes
Avatar for Chris Short chrisshort
51
52k
The Web Performance Landscape in 2024 [PerfNow 2024]
Avatar for Tammy Everts tammyeverts
12
1k
Self-Hosted WebAssembly Runtime for Runtime-Neutral Checkpoint/Restore in Edge–Cloud Continuum
Avatar for Yuki Nakata chikuwait chikuwait
0
380
Designing Dashboards & Data Visualisations in Web Apps
Avatar for Des Traynor destraynor
231
54k

Transcript

  1. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE mediba ʹ͓͚Δ IAM Ϣʔβ؅ཧͷྺ࢙ ΠϯϑϥɾωοτϫʔΫΤϯδχΞษڧձ Vol.1

  2. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ࣗݾ঺հ ໊લ: প୔ Ұथ ॴଐ: ɹגࣜձࣾmediba ΠϯϑϥετϥΫνϟʔ෦ ΍ͬͯΔ͜ͱ: ɹओʹ

    AWS Λ࢖ͬͨγεςϜΠϯϑϥͷઃܭɾߏஙɾӡ༻ AWS ྺ: 7೥ ɹ2016೥ AWS ΢ϧτϥΫΠζνϟϯϐΦϯ

  3. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ձࣾ঺հ גࣜձࣾmediba ۀ຿಺༰: KDDI גࣜձࣾͷ au εϚʔτύεΛத৺ͱͨ͠ au ؔ࿈αʔϏεӡӦ

    ͷଞɺࠃ಺֎ʹͯΧϧνϟʔɾήʔϜɾࢠҭͯ౳ɺ෯޿͍෼໺Ͱαʔ ϏεΛల։͠ɺϢʔβʔ͕ΠϯλʔωοτΛ௨ͯ͡ඞཁͳ࣌ʹඞཁͳ ৘ใʹΞΫηεͰ͖Δ؀ڥͮ͘ΓͷͨΊͷαʔϏεΛఏڙ͍ͯ͠· ͢ɻ ※auεϚʔτύε ͸KDDI גࣜձࣾͷ঎ඪ·ͨ͸ొ࿥঎ඪͰ͢ɻ https://www.mediba.jp/company/info.html ΑΓൈਮ

  4. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ձࣾ঺հ ؆୯ʹݴ͏ͱɺ • au ؔ࿈αʔϏε΍ͬͯ·͢ • au ֎ͷαʔϏε΋ॾʑ΍ͬͯ·͢ ͜ΕΒΛ௨ͯ͡

    ʮώτʹ“HAPPY”Λʯಧ͚Δͷ͕ զʑͷϛογϣϯͰ͢ɻ

  5. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ձࣾ঺հ ѻ͍ͬͯΔ au ؔ࿈αʔϏε(Ұ෦) • au Web ϙʔλϧ (

    https://auone.jp/ ) • au Web ϙʔλϧͷχϡʔε໘ ( https://article.auone.jp/ ) • au ఱؾ ( https://tenki.auone.jp/ ) • ϙΠϯτஷΊΔ ( https://enjoy.point.auone.jp/ ) • au εϚʔτύεͷҰ෦ίϯςϯπ • ձһಛయɺΞϓϦऔΓ์୊ɺೖୀձɺetc…

  6. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ຊ୊

  7. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE [૲૑ظ] (2013೥ʙ2015೥ࠒ)

  8. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAMϢʔβ؅ཧ[૲૑ظ] • mediba ʹ͓͚Δ AWS ར༻͸ 2013೥ࠒ͔Β • ๭ϒϩάͷձࣾܦ༝Ͱ

    AWS ΞΧ΢ϯτΛൃߦ ͯ͠ར༻ • ͳͷͰɺ͕͢͞ʹʮroot ϢʔβΛར༻͢Δʯͱ ͍͏ΞϯνύλʔϯதͷΞϯνύλʔϯঢ়ଶ͸ ආ͚ΒΕ͍ͯͨ

  9. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ͪͳΈʹલ৬Ͱ͸΍ͬͯͨYOʂ(খ੠)

  10. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAMϢʔβ؅ཧ[૲૑ظ] • ࠷ॳͷࠒ͸ɺ·ͩ • ΞΧ΢ϯτ΋਺ݸఔ౓ • ར༻ऀ΋਺ਓఔ౓ • ͦͷ౰࣌ͷ

    IAM Ϣʔβ • ֤ AWS ΞΧ΢ϯτͦΕͧΕʹ
 ݸਓ༻ IAM ϢʔβΛ࡞੒

  11. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAMϢʔβ؅ཧ[૲૑ظ]

  12. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE [సػ] (2015೥)

  13. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[సػ] ࣌͸2015೥ ؾ෇͚͹ΞΧ΢ϯτ਺͕େྔʹ → ࣗવͱ IAM Ϣʔβ਺΋๲େʹ

  14. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE Why ?

  15. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[సػ] • AWS Λར༻ͨ͠ϓϩμΫτ͕૿͑Δͨͼʹ3ͭ ͣͭΞΧ΢ϯτ͕૿͑Δঢ়ଶ • 2015೥ࠒʹ͸40͍ۙΞΧ΢ϯτ͕͋ͬͨͱ͔ͳ ͔ͬͨͱ͔

    • ΞΧ΢ϯτ͝ͱʹ IAM ϢʔβΛ࡞੒ɾ؅ཧ͢Δ ͷ͸ਖ਼௚͖ͭ͘ͳ͖ͬͯͨ • ར༻ऀଆ΋ɺ౎౓ϩάΠϯɾϩάΞ΢τΛ܁Γ ฦ͢ͷ͕͠ΜͲ͔ͬͨͱࢥ͏

  16. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[సػ] • ͍ͭͰʹɺ͜ͷࠒ͔ΒηΩϡϦςΟ໘͕ؾʹͳ Γͩ͢ • ͜͜·Ͱ͸ɺID/ύεϫʔυ ͷΈͰϩάΠϯ

  17. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE [స׵ظ] (2015೥)

  18. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[స׵ظ] • IAM Ϣʔβͷ؅ཧ͕൥ࡶ • IAM ϢʔβͷηΩϡϦςΟ໘͕ؾʹͳΔ

  19. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ͜ͷ2ͭΛಉ࣌ʹղܾ͢ΔͨΊ

  20. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ʮ౿Έ୆ AWS ΞΧ΢ϯτํࣜʯ Λ࠾༻

  21. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[స׵ظ]

  22. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[స׵ظ] • Πϝʔδ͸౿Έ୆αʔόͱಉ͡ • ֤ϓϩμΫτͷ֤؀ڥ΁ͷೖΓޱͱ͚ͯͩ͠ͷ AWS ΞΧ΢ϯτΛ༻ҙ •

    ೖΓޱ͕1ͭʹͳΔͷͰɺ͜͜ͷ CloudTrail Λ ༗ޮԽͯ͠ɺϩάΠϯه࿥Λอଘɺ؂ࢹ • ౿Έ୆্ͷ IAM Ϣʔβͷ MFA ઃఆΛඞਢͱ͢ Δ͜ͱͰηΩϡϦςΟΛ޲্

  23. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE [੒ख़ظ] (2016೥ʙݱࡏ)

  24. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ͔͜͜Β͸ɺ࣮ࡍʹͲ͏͍͏ ઃఆʹͳ͍ͬͯΔ͔Λ͝঺հ͠·͢ɻ

  25. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ֤ϓϩμΫτͷ֤؀ڥͷ AWS ΞΧ΢ϯτଆ (࣮؀ڥ)

  26. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ࣮؀ڥଆ • ৽ن AWS ΞΧ΢ϯτൃߦޙɺ࠷ॳʹ
 ΫϩεΞΧ΢ϯτΞΫηε༻ͷ IAM ϩʔϧΛ༻ҙ •

    ͜ͷ IAM ϩʔϧʹɺ౿Έ୆ΞΧ΢ϯτ͔Βͷ
 ར༻ڐՄΛઃఆ • ʮMFA ඞਢʯΛ৚݅ʹઃఆ

  27. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ࣮؀ڥଆ • IAM ϩʔϧ͸େ·͔ʹҎԼͷछྨͷ΋ͷΛ༻ҙ • ؅ཧऀ༻ • Administrator •

    ਖ਼ࣾһ༻ • IAM ͷҰ෦ݖݶҎ֎͸શͯڐՄ • (ਖ਼ࣾһҎ֎ͷ)։ൃऀ༻ • ୲౰͍ͯ͠ΔϓϩμΫτͰར༻͢ΔαʔϏεͷݖݶͷΈڐՄ • ReadOnly ༻ • ROMઐ

  28. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ࣮؀ڥଆ ͪͳΈʹɺ స׵ظʹ͜ͷ࢓૊Λಋೖͨ͠ࡍ͸ɺͦͷ౰࣌ଘࡏ͍ͯͨ͠ AWSΞΧ΢ϯτશͯʹલड़ͷϩʔϧΛ࡞੒ɻ ͦͷޙɺ౿Έ୆ AWS ΞΧ΢ϯτʹݸਓ༻ IAM Ϣʔβͷ

    ࡞੒ͱεΠον֬ೝ͕औΕͨஈ֊Ͱɺ࣮؀ڥଆͷݸਓ༻ IAM ϢʔβΛશͯ࡟আͨ͠ɻ

  29. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ࣮؀ڥଆ • ͜ΕҎ߱ɺIAM Ϣʔβͷ࡞੒Λݪଇېࢭ • IAM ϩʔϧͷར༻Λܒ໤ɾਪਐ • ͨͩ͠ɺͨ·ʔʹΞΫηεΩʔ/γʔΫϨοτΞΫηε

    ΩʔͰ͔͠ରԠͰ͖ͳ͍ύςΟʔϯ͕͋Δ • ͜ͷ৔߹͸૬ஊͷ্Ͱɺྫ֎తʹ IAM ϢʔβΛ࡞੒

  30. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ౿Έ୆ AWS ΞΧ΢ϯτଆ

  31. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ౿Έ୆ଆ • ݸਓ༻ͷ IAM Ϣʔβ͸͜͜ʹ͔͠࡞Βͳ͍ • IAM Ϣʔβʹ͸ MFA

    Λઃఆ • ؅ཧऀܥͷ IAM ϢʔβҎ֎͸ɺҎԼͷݖݶͷΈ෇༩ • εΠον͢ΔͨΊͷݖݶ (sts:AssumeRole) • ࣗ਎ͷ MFA ઃఆΛ͢Δݖݶ • ࣗ਎ͷύεϫʔυΛઃఆ͢Δݖݶ

  32. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ౿Έ୆ଆ • MFA ͷઃఆΛ͍ͯ͠ͳͯ͘΋౿Έ୆΁ͷϩάΠϯ͸ Ͱ͖ͯ͠·͏ • લड़ͷʮMFA ඞਢʯͷ৚͕݅ΫϩεΞΧ΢ϯτ༻ͷ ϩʔϧʹ͸෇͍͍ͯΔ

    • ͜ͷ৚݅ͰɺMFA ະઃఆऀͷεΠονΛ཈੍ • ͜ΕʹΑΓɺMFA ͕ઃఆ͞Εͳ͍··ͷར༻Λ๷͙

  33. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE ౿Έ୆ଆ • ਖ਼ࣾһҎ֎ͷ IAM Ϣʔβ͸ Source IP Ͱͷૢ࡞੍ݶ ΋෇༩

    • AWS ͸ίϯιʔϧ΁ͷΞΫηεΛ੍ݶͰ͖ͳ͍ͷ Ͱɺ౿Έ୆΁ͷϩάΠϯ͸Ͳ͔͜ΒͰ΋Ͱ͖Δ • ͨͩɺਖ਼ࣾһҎ֎͸ɺΦϑΟε֎Ͱͷར༻Λ૝ఆ ͍ͯ͠ͳ͍ • ͦͷҝͷ Source IP ʹΑΔૢ࡞੍ݶ

  34. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE MFA ʹ͍ͭͯ

  35. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE MFA ʹ͍ͭͯ • ਖ਼ࣾһ • ձ͔ࣾΒۀ຿༻୺຤ͱͯ͠
 εϚʔτϑΥϯΛࢧڅ͞Ε͍ͯΔ • ͦͷۀ຿୺຤ʹ

    MFA ༻ͷΞϓϦ
 (mediba Ͱ͸ Authy ͷར༻Λਪ঑)Λ
 Πϯετʔϧͯ͠ར༻

  36. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE MFA ʹ͍ͭͯ • ਖ਼ࣾһҎ֎ • Χʔυܕͷ෺ཧ MFA σόΠεΛར༻ •

    ਖ਼ࣾһಉ༷ɺձࣾ؅ཧͷσόΠεʹඥ෇͚͔ͨͬ ͨͨΊɺձࣾͰΧʔυΛ༻ҙ • ؅ཧऀଆͰMFA Λઃఆͯ͠ΧʔυΛି༩

  37. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE [ݱࡏ]

  38. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[ݱࡏ] ݱࡏ͸͜Ε·Ͱઆ໌ͨ͠ঢ়ଶͰӡ༻ AWS ΞΧ΢ϯτ਺͸80ఔ౓ ·͊ಛʹେ͖ͳࢧো͸ແ͍

  39. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE [ະདྷ]

  40. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[ະདྷ] • MFA ΧʔυܕσόΠε΍Ί͍ͨ • ୯७ʹɺ෺ཧΧʔυͷ؅ཧ͕໘౗ • mediba

    Ͱ͸χΞγϣΞ։ൃΛ͍ͯ͠Δ • ஍ํڌ఺ͷձࣾʹσόΠεΛି༩Ͱ͖ͳ͍ • IP ΞυϨεʹΑΔར༻ڌ఺ͷ੍ݶΛ͍ͯ͠Δ͔Β ݸਓ୺຤Ͱྑ͍ͷͰ͸ʁ࿦ͷొ৔

  41. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[ະདྷ] • MFA ΧʔυܕσόΠε΍Ί͍ͨ • ୯७ʹɺ෺ཧΧʔυͷ؅ཧ͕໘౗ • mediba

    Ͱ͸χΞγϣΞ։ൃΛ͍ͯ͠Δ • ஍ํڌ఺ͷձࣾʹσόΠεΛି༩Ͱ͖ͳ͍ • IP ΞυϨεʹΑΔར༻ڌ఺ͷ੍ݶΛ͍ͯ͠Δ͔Β ݸਓ୺຤Ͱྑ͍ͷͰ͸ʁ࿦ͷొ৔ ͜ΕΒͷ఺͔Βɺ ΍ΊΔํ޲Ͱௐ੔த

  42. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[ະདྷ] • OS ΞΧ΢ϯτ΋ IAM Ϣʔβ͚ͩͰ؅ཧ • Systems

    Manager ͷ Session Manager Λར༻ • طʹ Session Manager ͚ͩͰ։ൃΛߦͬͯ΋Βͬ ͍ͯΔϓϩμΫτ΋͋Δ • ࠓޙɺ৽نʹߏங͢ΔϓϩμΫτͰ͸جຊతʹ Session Manager Λ࠾༻͍ͯ͘͠

  43. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[ະདྷ] • Session Manager ͷϝϦοτ • SSH ͷ͚݀͋ෆཁ

    • ౿Έ୆αʔόෆཁ • Private Subnet ʹ͋ͬͯ΋ར༻Մೳ • ૢ࡞ϩάΛ S3 ͱ CloudWatch Logs ʹग़ྗՄೳ • IAM ϙϦγʔͰ EC2 ΠϯελϯεͷΞΫηε੍ݶՄೳ

  44. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[ະདྷ] • Session Manager ͷσϝϦοτ • SSM Agent

    ͷಋೖ͕ඞཁ • OS ΞΧ΢ϯτ͕ ssm-user ͱ͍͏΋ͷݻఆ • no pass Ͱ sudo ՄೳͳݖݶΛ͍࣋ͬͯΔ • IAM Ϣʔβຖʹར༻ίϚϯυΛ੍ݶ͍ͨ͠ɺͱ͍͏͜ͱ ͕Ͱ͖ͳ͍ • ↑ͷέʔε͸ EC2 Instance Connect Ͱղܾ͠Α͏ʂ

  45. $PQZSJHIU˜NFEJCB*OD"MM3JHIUT3FTFSWFE IAM Ϣʔβ؅ཧ[ະདྷ] • Session Manager ͷσϝϦοτ • SSM Agent

    ͷಋೖ͕ඞཁ • OS ΞΧ΢ϯτ͕ ssm-user ͱ͍͏΋ͷݻఆ • no pass Ͱ sudo ՄೳͳݖݶΛ͍࣋ͬͯΔ • IAM Ϣʔβຖʹར༻ίϚϯυΛ੍ݶ͍ͨ͠ɺͱ͍͏͜ͱ ͕Ͱ͖ͳ͍ • ↑ͷέʔε͸ EC2 Instance Connect Ͱղܾ͠Α͏ʂ ݱ࣌఺Ͱɺ͜ΕΒͷ σϝϦοτ͕ϋʔυϧʹ ͳΔ͜ͱ͸ͳ͍ͨΊɺ ՄೳͳݶΓ࠾༻͍ͯ͘͠