Step FunctionsとInfrastructure Composerで挑むローコード × Platform Engineering @ JAWS-UG 青森

4UFQ'VODUJPOTͱ *OGSBTUSVDUVSF$PNQPTFSͰ௅Ή ϩʔίʔυº1MBUGPSN&OHJOFFSJOH 4JN4UB !TIJNBHBKJ   +"846(੨৿ʢ߂લʣ KBXTVHBPNPSJKBXTVHUPIPLV
  ˡϗϫΠτγϚϦεͷΞϧλ

ࣗݾ঺հ ɹ࡛ۄɹʢʙେֶͷ్த·Ͱʣ ˠࡳຈɹʢʙେֶɾ೥ʣ ˠਆಸ઒ʢʙେֶӃʙब৬ͯ͠೥൒͘Β͍ʣ ˠࡳຈɹʢʙ೥ͪΐͬͱɺݱࡏʣ ޷͖ͳ"84αʔϏεɿ4UFQ'VODUJPOT 4JN4UBʢΦϯϥΠϯͷ͕ͨ͢ʣ ,%%*ΞδϟΠϧ։ൃηϯλʔגࣜձࣾ ϓϥοτϑΥʔϜΤϯδχΞϦϯά෦ !TIJNBHBKJ
5XJUUFS 4FSWFSMFTT ͝౰஍ΧάΧά

,"(ͷ๺ւಓ౦๺ΦϑΟε

,"(ͷ๺ւಓ౦๺ΦϑΟε ʁ ɾͦͷ஍ҬʹॅΜͰ͍Δࣾһ͕͍Δ͜ͱ ɾݱ࣌఺Ͱ͸౎ಓ෎ݝ͝ͱʹϲॴ ɾͭ·Γʜʁ

ϗϫΠτγϚϦεͱ ฻Β͍ͯ͠·͢🐿 5XJUUFSΞΧ΢ϯτ΋͋ΔΑ !BMUB@XIJUFDIJQ ౳਎େνϧλϦε΋͍ΔΑ

աڈͷొஃࢿྉΞοϓͯ͠·͢ʢࠓ೔ͷࢿྉ΋ʂʣ IUUQTTQFBLFSEFDLDPNTIJNBHBKJ

ݸਓϒϩάΛӡ༻͍ͯ͠·͢͠·͕͡ ͠Ήͦ͘ "84ΞοϓσʔτΛ ຖिߋ৽ʂ   ͦͷଞ Ϋϥ΢υΨδΣοτ γϚϦεͷ࿩ͳͲ

͠Ήͦ͘3BEJP "84ͷΞοϓσʔτΛαΫοͱΩϟονΞοϓ !͠Ήͦ͘ ຖिਫ༵ʙ ഑৴தʂ

͜ͷ΄͔ɺSF*OWFOUظؒதʙʢ+45ʣ͸ຖ೔഑৴༧ఆʂ

উखʹର߅͍ͯ͠Δ উखʹର߅͍ͨ͠

"HFOEB • 1MBUGPSN&OHJOFFSJOHͱ͸ʁ • ηϧϑαʔϏεπʔϧͷల։ • "84ͰͷϩʔίʔυΞϓϩʔν • LBHUPPMTͷൃ଍ •
ϩʔίʔυº1MBUGPSN&OHJOFFSJOHͷ՝୊ • ·ͱΊ

1MBUGPSN&OHJOFFSJOHͷ֓ཁ

1MBUGPSN&OHJOFFSJOHʢ1'&ʣͱ͸ʁ ϓϥοτϑΥʔϜɾΤϯδχΞϦϯάͱ͸Կ͔ʁ(BSUOFS IUUQTXXXHBSUOFSDPKQKBBSUJDMFTXIBUJTQMBUGPSNFOHJOFFSJOH ҎԼΛຬͨ͢ϓϥοτϑΥʔϜΛ   ߏங͢ΔΞϓϩʔνΛࢦ͢ ໨ඪɿ ɾ։ൃऀͷੜ࢈ੑ޲্ ɾϏδωεՁ஋ͷ૑ग़ ໨తɿ
ɾ։ൃऀͷೝ஌ෛՙΛܰݮ ɾ։ൃऀͷΤΫεϖϦΤϯε޲্ खஈɿ ɾηϧϑαʔϏεػೳͷॆ࣮ ɾΠϯϑϥ΍ӡ༻ͷࣗಈԽ

%FW0QTͱ1MBUGPSN&OHJOFFSJOH ϓϥοτϑΥʔϜΤϯδχΞϦϯάͱ͸ IUUQTMFBSONJDSPTPGUDPNKBKQQMBUGPSNFOHJOFFSJOHXIBUJTQMBUGPSNFOHJOFFSJOH 4%-$ ʢιϑτ΢ΣΞ։ൃϥΠϑαΠΫϧʣ ιϑτ΢ΣΞ։ൃͷϑΣʔζΛࣔ͢ࢦ਑ %FW0QT ܧଓతͳσϦόϦʔΛ࣮ݱ͢ΔͨΊͷ ։ൃख๏ͱӡ༻ͷࣗಈԽɾޮ཰Խ 1MBUGPSN&OHJOFFSJOH
։ൃ΍ηΩϡϦςΟɾΨόφϯεΛ ؀ڥ੔උ΍*B$ɺࣗಈԽͳͲͰࢧԉ "HJMF4%-$4LZSPDLFUJOH:PVS1SPKFDUXJUI"HJMF1SJODJQMFT IUUQTNMTEFWDPNCMPHBHJMFTEMD

๺ւಓཱྀߦʹྫ͑Δͱʜ 4%-$ ໨త஍·Ͱͷ஍ਤ %FW0QT ަ௨खஈʢ৐Γ෺ʣ 1MBUGPSN&OHJOFFSJOH ަ௨Πϯϑϥɺλʔϛφϧ ʢࠃಓɺߴ଎ɺۭ࿏ɺߤ࿏౳ʣ ࡳຈˠവؗ΁ߦ͘ͷʹ ͔ͭͯ͸మಓͰ͔͔͕࣌ؒͬͨ
ࣨའ͔Βߤ࿏Λ੔උͰ͖Ε͹ େ෯ʹ͕࣌ؒ୹ॖͰ͖Δ͔΋͠Εͳ͍ খḺˠ໢૸΁ߦ͘ͱ͢Δͱ ৐Γ෺ʢెาंమಓഅʣ͕%FW0QT ಓ΍৐Γ෺ͷ੔උ͕1MBUGPSN&OHJOFFSJOH $PQZSJHIU4PVHPV4IPVLFO$0 -UE"MM3JHIUT3FTFSWFE

ηϧϑαʔϏεπʔϧͷల։

ηϧϑαʔϏεܕͷϓϥοτϑΥʔϜ 1MBUGPSN&OHJOFFSJOHPO4FSWFSMFTT IUUQTTQFBLFSEFDLDPN@LFOTIQMBUGPSNFOHJOFFSJOHPOTFSWFSMFTT

ηϧϑαʔϏεܕͷϓϥοτϑΥʔϜ 1MBUGPSN&OHJOFFSJOHPO4FSWFSMFTT IUUQTTQFBLFSEFDLDPN@LFOTIQMBUGPSNFOHJOFFSJOHPOTFSWFSMFTT • "84ͷ৔߹ɺҎԼͷ͕ͭީิʹͳΓಘΔ • "NB[PO$PEF$BUBMZTU • "844FSWJDF$BUBMPH •
#BDLTUBHF • (JU)VCͳͲͷίʔυϦϙδτϦͰ΋ఏڙ͸Մೳ   ˠ,"(Ͱ͸ࣾ಺ͷ(JU)VC&OUFSQSJTF0SHBOJ[BUJPOΛ׆༻

Ͱ΋πʔϧͱ͔ΞϓϦέʔγϣϯͬͯ ࡞Δͷେมͦ͏ʜʁ

ηϧϑαʔϏεπʔϧͷݕ౼ͱ՝୊ • ࣄۀձࣾͱҟͳΓҊ݅͝ͱʹγεςϜ͕ҟͳΔ   ˠڞ௨ͷίϯϙʔωϯτ͸ఏڙ͕೉͍͠   ˠ֤νʔϜͷΞʔΩςΫνϟΛे෼ʹௐࠪ͢Δඞཁ͋Γ • πʔϧ͸؅ཧνʔϜશһ͕ϝϯςφϯεͰ͖Δͷ͕ཧ૝  
ˠ։ൃऀνʔϜͱҟͳΓٕज़ελοΫ͕Ұக͠ʹ͍͘   ɹΠϯϑϥɺ৘γεɺύʔτφʔΛؚΉνʔϜͳͲ • ϝϯςφϯεͷೝ஌ෛՙΛͰ͖Δ͚ͩԼ͍͛ͨ   ˠίʔυͷϝϯςφϯε͸Ͱ͖ΔݶΓͨ͘͠ͳ͍   ˠͦ΋ͦ΋ίʔυΛ͋·Γॻ͖ͨ͘ͳ͍ɺࢹ֮త௚ײతʹ࡞Γ͍ͨ   ɹʢ͕ɺίʔυͱͯ͠͸อଘ͍ͨ͠ɾɾɾʣ

ίʔυ͕ॻ͚Ε͹ ͍ΖΜͳ͜ͱ͕Ͱ͖Δͷʹʜɻ

ʢ͋·ΓʣίʔυΛॻ͔ͣʹ πʔϧΛ։ൃ͍ͨͬ͠ʂʂ

"84Ͱͷ ϩʔίʔυΞϓϩʔν

4UFQ'VODUJPOT º *OGSBTUSVDUVSF$PNQPTFS

4UFQ'VODUJPOTͱ͸ʁ ϩʔίʔυͰ"84΍֎෦"1*ͱ࿈ܞͯ͠ΞϓϦέʔγϣϯͷ ϫʔΫϑϩʔΛߏஙͰ͖ΔΦʔέετϨʔγϣϯαʔϏε

4UFQ'VODUJPOTͷັྗ͸ ͪ͜ΒͰࢥ͏ଘ෼ޠ͖ͬͯ·ͨ͠ IUUQTTQFBLFSEFDLDPNTIJNBHBKJTFSWFSMFTTGJSTUTUFQGVODUJPOTGJSTU

ʲ5PEBZʳ4UFQ'VODUJPOT͕7BSJBCMFTͱ+40/BUBΛαϙʔτ 7BSJBCMFTɿޙଓͷॲཧͰར༻͍ͨ͠ม਺Λ֨ೲͰ͖Δʂ +40/BUBɿ-BNCEBͳ͠Ͱෳࡶͳσʔλૢ࡞Λ࣮ݱʂ 4JNQMJGZJOHEFWFMPQFSFYQFSJFODFXJUIWBSJBCMFTBOE+40/BUBJO"844UFQ'VODUJPOT IUUQTBXTBNB[PODPNCMPHTDPNQVUFTJNQMJGZJOHEFWFMPQFSFYQFSJFODFXJUIWBSJBCMFTBOEKTPOBUBJOBXTTUFQGVODUJPOT “Example": "{% jsonata expression %}"
-BNCEB͕ඞཁͩͬͨॲཧΛ+40/BUB͚ͩͰॻ͚Δʂ εςοϓͷೖग़ྗॲཧϑϩʔ͕γϯϓϧʹʂ ʢ"4-ͷه๏͕γϯϓϧʹͳͬͨͱ͸ݴ͍ͬͯͳ͍ʣ ೖྗ͞ΕͨϖΠϩʔυΛ"TTJHO͓ͯ͘͜͠ͱͰ ͲͷεςοϓͰ΋؆୯ʹݺͼग़ͤΔʂ

*OGSBTUSVDUVSF$PNQPTFSͱ͸ʁ $MPVE'PSNBUJPOςϯϓϨʔτΛࢹ֮తʹ࡞੒ɾදࣔͰ͖ΔαʔϏε ʢݩʑ͸4".ಛԽͰɺ໊લ΋"QQMJDBUJPO$PNQPTFSͩͬͨʣ "84ίϯιʔϧ಺ɺ·ͨ͸*%&ͷ"845PPMLJU͔Βར༻Մೳ 4".Ϧιʔεʢ֦ுίϯϙʔωϯτʣͱ$'OϦιʔεͰ࢖͍উख͕ҟͳΔ

4UFQ'VODUJPOTº*OGSBTUSVDUVSF$PNQPTFS *OGSBTUSVDUVSF$PNQPTFS͔Β ௚઀4UFQ'VODUJPOTͷ 8PSLGMPX4UVEJPΛ։͚Δʂ

LBHUPPMTͷൃ଍

ηϧϑαʔϏεπʔϧ܈ʮLBHUPPMTʯ w1MBUGPSN&OHJOFFSJOHͱͯ͠ͷࢧԉπʔϧΛఏڙ͍ͨ͠ͱ͍͏ϞνϕʔγϣϯͰ։࢝ w·ͣ͸ݩʑͷ1'&νʔϜʹΑΔۀ຿ʢΠϯϑϥ΍$$P&دΓʣʹؔ࿈͢Δ΋ͷΛ૝ఆ wηΩϡϦςΟɺΨόφϯεܥ wίετͷ࡟ݮ w(JU)VC&OUFSQSJTFͷར༻ิॿ LBHUPPMT w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈ w
*B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ

LBHUPPMTͷ঺հ

LBHUPPMTͷ঺հ • (VBSE%VUZ4VNNBSJ[FS • (VBSE%VUZͷݕग़݁ՌΛ#FESPDLͰ෼͔Γ΍͔ͯ͘͢͠Β௨஌ • 4FDVSJUZ)VCʹू໿͞Εͨ(VBSE%VUZݕग़݁Ռʹ΋ରԠ • $PEF#VJME3VOOFS •
()&ͷ4FMGIPTUFE3VOOFSΛϚωʔδυͰల։ • 71$ͷ࡞੒͔Β(JU)VC"QQTܦ༝Ͱͷ઀ଓ·ͰΨΠυ෇͖Ͱ࡞੒ • /"54DIFEVMFS • /"5(BUFXBZΛ༵೔ͱ࣌ؒͰ࡞੒࡟আ͠ɺίετΛ࡟ݮ • TBNQMFTFDVSJUZIVCOPUJGJDBUJPOT • 4FDVSJUZ)VC͔Βͷ௨஌Λ4MBDL΁ૹ৴͢ΔͨΊͷ5FSSBGPSNίʔυ

(VBSE%VUZ4VNNBSJ[FS (VBSE%VUZ͔Βͷ௨஌Λ ͦͷ··4/4Ͱૹ৴͢Δͱ ͚ͬ͜͏ೝ஌ෛՙߴ͍ͷͰ શ෦#FESPDLʹ౤͛ͯ ͍͍ײ͡ʹͯ͠௨஌͢Δπʔϧ

௨஌ઌʹ4MBDLʢ&ϝʔϧ౳΋ՄʣΛ࢖͏͜ͱͰ ʢ΄΅ʣϊʔίʔυΛ࣮ݱ AWS Cloud GuardDuty Step Functions Bedrock SNS Invoke
Execute EventBridge User Threats E-Mail Publish Slack Security Hub ᶃ(VBSE%VUZͷΠϕϯτΛ௚઀र͏ ᶄ4FDVSJUZ)VCʹू໿͞ΕͨΠϕϯτΛर͏ ͷͲͪΒ͔Λબ୒ͯ͠σϓϩΠՄೳ (VBSE%VUZ4VNNBSJ[FS

(VBSE%VUZ4VNNBSJ[FSͷߏ੒ *OGSBTUSVDUVSF$PNQPTFSͱ 4UFQ'VODUJPOT8PSLGMPX4UVEJPͰՄࢹԽ

$PEF#VJME3VOOFS $PEF#VJMEΛ࢖ͬͨ4FMGIPTUFE3VOOFSͷηοτΞοϓΛࢧԉ AWS Cloud AWS Cloud Network Load   Balancer
NAT gateway GitHub Enterprise NAT gateway CodeBuild ɾ$PEF$POOFDUJPOTϗετ ɾ$PEF$POOFDUJPOT઀ଓ ɾ8FCIPPL ͜ͷϦιʔεҰࣜΛॱ൪ʹ࡞੒

$PEF#VJME3VOOFSͷߏ੒ $-*·ͨ͸ίϯιʔϧͰηοτΞοϓ͕ඞཁͳϦιʔε΋͋Γ $PEF$POOFDUJPOTϗετͱ઀ଓʢ(JU)VC"QQTઃఆʣɺ8FCIPPL

/"54DIFEVMFS /"5(BUFXBZ͸ఀࢭͰ͖ͳ͍ͷͰɺεέδϡʔϧͰ࡞੒࡟আ͢Δઓ๏ͰίετΛઅ໿ AWS Cloud Step Functions NAT Gateway SNS Create
Stack Execute Scheduler User Error Notification Publish Step Functions Execute Scheduler Publish Delete Stack

/"54DIFEVMFSͷߏ੒

ϩʔίʔυº1MBUGPSN&OHJOFFSJOH ͷ՝୊

ϩʔίʔυº1MBUGPSN&OHJOFFSJOHͷ՝୊ • ,"(ͷ૊৫ܗଶʹجͮ͘ఏڙൣғͷݶք • ࣄۀձࣾͱҟͳΓɺ֤Ҋ֤݅νʔϜͰγεςϜ͕ҟͳΔ • "84͚ͩͰͳ͘(PPHMF$MPVE"[VSFͷҊ݅΋ͦͦ͜͜   ˠ5FSSBGPSNͳͲͷशख़ͱϝϯςφϯεͷඞཁੑ͕ٻΊΒΕΔ •
ϓϥοτϑΥʔϜνʔϜͷݶք • ΧόʔͰ͖Δٕज़ྖҬ͕ݶΒΕͯ͠·͏   ˠʮࢧԉͰ͖Δ΋ͷʯͱʮٻΊΒΕ͍ͯΔ΋ͷʯͷΞϯϚον • πʔϧ૿ՃʹΑΔϝϯςφϯε΍վળ͕Ͱ͖Δ࿑ྗͷෆ଍ • ϩʔίʔυΞϓϩʔν͕ద༻Ͱ͖ͳ͍έʔε͸ׂΓ੾Δ֮ޛ

՝୊ʹର͢Δ ͭͷղܾࡦ

Πϯφʔιʔεͱ͸ʁ ΠϯφʔιʔεͰ࢝ΊΔ૊৫಺Φʔϓϯιʔε։ൃೖ໳ IUUQTTQFBLFSEFDLDPNZVIBUUPSJOOFSTPVSDFMFBSOJOHQBUIKBQBOFTF ҰݴͰද͢ͱʮࣾ಺Φʔϓϯιʔεʯ

ΠϯφʔιʔεΛؚΊͨ,"(ͷ1MBUGPSN&OHJOFFSJOH ͲͪΒ΋Πϯφʔιʔεʢࣾ಺Φʔϓϯιʔεʣͱͯ͠ѻ͏ ؅ཧӡ༻ͷओମ͕ϓϥοτϑΥʔϜνʔϜ͔༗ࢤ͔ͷҧ͍ LBHUPPMT w ϓϥοτϑΥʔϜνʔϜ͕ఏڙ͢ΔࢧԉπʔϧʢϦϙδτϦʣ܈ w *B$ɺίʔυεχϖοτͳͲศརͳπʔϧ΍ɺηΩϡϦςΟ্࣮ࢪͯ͠ཉ͍͠΋ͷΛల։༧ఆ w $0/53*#65*/(NEΛઃ͚ɺ։ൃऀ͔ΒͷίϯτϦϏϡʔγϣϯΛΦʔϓϯʹड͚ೖΕ
LBHJTN w ֤νʔϜ΍ϧʔϧͳͲɺࣾ಺ͷ͋ΒΏΔ৔ॴ͔Βఏڙӡ༻͞ΕΔϓϩμΫτ w ϦϙδτϦͷ࡞੒ϧʔϧʹଇΕ͹୭Ͱ΋ఏڙ0, w ֤ϦϙδτϦͷϧʔϧʹै͑͹୭Ͱ΋ίϯτϦϏϡʔτ0, ಠஅͰউखʹ໊෇͚·ͨ͠

ৄ͘͠͸ͪ͜Βʂ IUUQTTQFBLFSEFDLDPNTIJNBHBKJLBHLVCFMMEFWPQT

ֶͿ͜ͱ΋େࣄʂ νʔϜτϙϩδʔ Πϯφʔιʔεύλʔϯ Πϯφʔιʔε͸Ұछͷ ࣾ಺ίϛϡχςΟͳͷͰʜ ͦͷଞ༷ʑͳ ઌਓͷ࣮ફྫ΋͋Γ

·ͱΊ

·ͱΊ • 1MBUGPSN&OHJOFFSJOHͷऔΓ૊Έʹ͓͚Δϝϯςφϯε΍   ೝ஌ෛՙͷ໰୊ʹରԠ͢ΔͨΊɺ"84ͷϩʔίʔυαʔϏεΛ׆༻   ˠ4UFQ'VODUJPOTͱ*OGSBTUSVDUVSF$PNQPTFS • ʮLBHUPPMTʯͱͯ͠ηϧϑαʔϏεπʔϧΛల։ •
ϚϧνΫϥ΢υ΍Ϧιʔεͷ໰୊ͳͲʹରॲ͢΂͘   ʮLBHJTNʯͱͯ͠ΠϯφʔιʔεͷऔΓ૊Έ΋ਪਐ • ઌਓͷφϨοδͱίϛϡχςΟ͔Βֶͼɺ࣮ફ͢Δʂ

5IBOLZPVʂ

Step FunctionsとInfrastructure Composerで挑むローコード ...

Step FunctionsとInfrastructure Composerで挑むローコード × Platform Engineering @ JAWS-UG 青森

More Decks by SimSta

Featured

Transcript