20230510_FinJAWS

Transcript

1. $%,ͷา͖ํ ໺ଜ૯߹ݚڀॴ
   ถᖒ
   ୓໵ #-&"
   GPS
   '4*ͷ 
 ιʔεΛಡΈղͨ͘Ίͷ
2.  ͜ͷ-5Ͱ͓఻͍͑ͨ͜͠ͱ
   #-&"
   GPS
   '4*ͷιʔείʔυΛಡΈղ֦͘ு͢ΔͨΊʹ஌͓ͬͯ͘΂͖ϙΠϯτ
   ࠔͬͨͱ͖ʹࢀর͢ΔͰ͋Ζ͏$%,ެࣜϦϑΝϨϯεͷಡΈํ
   $%,Λ5ZQF4DSJQUͰ։ൃ͢Δͷ͸ා͘ͳ͍ʂ
   ͜ͷ-5Ͱ͓఻͑͠ͳ͍͜ͱ
   #-&"
   GPS
   '4*ͷߏ੒ཁૉઃܭࢥ૝
   ʢطʹղઆࡁΈͷ͸ͣɻɻʣ
   #-&"
   GPS
   '4*ͷݕূͯ͠Έͨ࿩ ͸͡Ίʹ
3.  ͜Εʂ ೥ʹ໺ଜ૯߹ݚڀॴʹ৽ଔೖࣾɻۚ༥ۀքͷ͓٬༷޲͚ʹ
   ϑϩϯτγεςϜͷߏஙΤϯϋϯεΛ୲౰ͨ͠ޙʹδϣϒνΣϯδɻ
   ݱࡏ͸࢈ۀۀքͷ͓٬༷޲͚ʹ"84؀ڥશൠͷઃܭߏஙΛ୲౰ɻ 
 8&#։ൃ͔Β"84౷੍ɺΫϥ΢υΨΠυϥΠϯࡦఆͳͲԿͰ΋΍Γ·͢
   ޷͖ͳ"84αʔϏε͸
   
   4".
   "QQMJDBUJPO
   $PNQPTFS
   $PEF1JQFMJOF
   ޷͖ͳٕज़͸
   
   /FYUKT
   5BJMXJOE$44
   %PDLFS
   LT
   3BODIFS
   
   झຯ͸
   
   ֨ಆٕʢ΍Γ·͢ݟ·͢ʣɺ͓ՈLTʢ͔Θ͍͍ʣ UBLVZBZPOF ถᖒ
   ୓໵
   5BLVZB
   :POF[BXB
4. "84
   $%,ʢ$MPVE
   %FWFMPQNFOU
   ,JUʣ
   ϓϩάϥϛϯάݴޠΛ࢖༻ͯ͠"84্ͷϦιʔεΛఆٛ͢Δ͜ͱ͕Ͱ͖Δ 
 *B$ʢ*OGSBTUSVDUVSF
   BT
   $PEFʣπʔϧ
   ར༻Մೳͳݴޠ͸
   1ZUIPOɺ5ZQF4DSJQUɺ+BWBɺ(PMBOH
   ౳
   044ͱͯ͠(JU)VCͰެ։͞Ε͓ͯΓɺ׆ൃʹ։ൃ͞Ε͍ͯΔ
   
   
   $%,ιʔεΛϏϧυ$MPVE'PSNBUJPOͱͯ͠Ϧιʔε͕ߏங͞ΕΔ
   Ϧιʔεఆٛͷந৅౓ʹԠͯ͡
   ---
   ͱ͍͏ϨΠϠʔ͕ଘࡏ 

   
   
   
   -ɿந৅౓௿Ίʢ$MPVE'PSNBUJPOͱରԠɻ಄จࣈ͕
   $GOʓʓʣ 

   
   
   
   -ɿந৅౓ߴΊʢ"84ͷϕετϓϥΫςΟεΛ͋Δఔ౓ඪ४औΓࠐΈࡁΈʣ 

   
   
   
   -ɿෳ਺Ϧιʔεԣஅʢ"-#ͱ&$4λεΫΛηοτͰ࡞੒
   ͳͲʣ "84
   $%,
    ˞
   IUUQTHJUIVCDPNBXTBXTDEL
5. "84
   $%,ʢ$MPVE
   %FWFMPQNFOU
   ,JUʣ
   ϓϩάϥϛϯάݴޠΛ࢖༻ͯ͠"84্ͷϦιʔεΛఆٛ͢Δ͜ͱ͕Ͱ͖Δ 
 *B$ʢ*OGSBTUSVDUVSF
   BT
   $PEFʣπʔϧ
   ར༻Մೳͳݴޠ͸
   1ZUIPOɺ5ZQF4DSJQUɺ+BWBɺ(PMBOH
   ౳
   044ͱͯ͠(JU)VCͰެ։͞Ε͓ͯΓɺ׆ൃʹ։ൃ͞Ε͍ͯΔ
   
   
   $%,ιʔεΛϏϧυ$MPVE'PSNBUJPOͱͯ͠Ϧιʔε͕ߏங͞ΕΔ
   Ϧιʔεఆٛͷந৅౓ʹԠͯ͡
   ---
   ͱ͍͏ϨΠϠʔ͕ଘࡏ 

   
   
   
   -ɿந৅౓௿Ίʢ$MPVE'PSNBUJPOͱରԠɻ಄จࣈ͕
   $GOʓʓʣ 

   
   
   
   -ɿந৅౓ߴΊʢ"84ͷϕετϓϥΫςΟεΛ͋Δఔ౓ඪ४औΓࠐΈࡁΈʣ 

   
   
   
   -ɿෳ਺Ϧιʔεԣஅʢ"-#ͱ&$4λεΫΛηοτͰ࡞੒
   ͳͲʣ "84
   $%,
    ˞
   IUUQTHJUIVCDPNBXTBXTDEL Ͳͷݴޠ࢖͏ͷ͕Φεεϝʁ🤔
6. ʘ5ZQF4DSJQUΛ࢖͏΂͠ʂʗ
7. $%,
   PO
   5ZQF4DSJQUͷਪ͠ϙΠϯτ
   ͦ΋ͦ΋$%,͕5ZQF4DSJQUͰॻ͔Ε͍ͯΔͱ͍͏҆৺ײ
   ಉ͡։ൃݴޠͱͳΔͨΊɺಠ֦ࣗு͕؆୯ʢͩͱࢥ͏ʣ
   ࣮૷ํ਑΍໋໊نଇʹࠔͬͨΒ$%,ͷιʔείʔυΛோΊͯࢀߟʹͰ͖Δ
   ଟ͘ͷ5ZQF4DSJQU࣮૷ྫ΍αϯϓϧίʔυ͕ωοτ্ʹ͋Δ
   5ZQF4DSJQUͷܕิ׬͕ൈ܈ͷ։ൃମݧ
   $%,ͷެࣜυΩϡϝϯτͷαϯϓϧ͕ͦ΋ͦ΋5ZQF4DSJQU
   ଞͷ/PEFKT੡ύοέʔδͱͷ਌࿨ੑ͕˓ ࢲ͕$%,
   PO
   5ZQF4DSJQU
   Λਪ͢ཧ༝ 
8. $%,
   PO
   5ZQF4DSJQUͷਪ͠ϙΠϯτ
   ͦ΋ͦ΋$%,͕5ZQF4DSJQUͰॻ͔Ε͍ͯΔͱ͍͏҆৺ײ
   ಉ͡։ൃݴޠͱͳΔͨΊɺಠ֦ࣗு͕؆୯ʢͩͱࢥ͏ʣ
   ࣮૷ํ਑΍໋໊نଇʹࠔͬͨΒ$%,ͷιʔείʔυΛோΊͯࢀߟʹͰ͖Δ
   ଟ͘ͷ5ZQF4DSJQU࣮૷ྫ΍αϯϓϧίʔυ͕ωοτ্ʹ͋Δ
   5ZQF4DSJQUͷܕิ׬͕ൈ܈ͷ։ൃମݧ
   $%,ͷެࣜυΩϡϝϯτͷαϯϓϧ͕ͦ΋ͦ΋5ZQF4DSJQU
   ଞͷ/PEFKT੡ύοέʔδͱͷ਌࿨ੑ͕˓ ࢲ͕$%,
   PO
   5ZQF4DSJQU
   Λਪ͢ཧ༝ 
9. 5ZQF4DSJQUʹ͍ͭͯগ͠ิ଍
   +BWBTDSJQUʹܕͱ͍͏֓೦Λ࣋ͨͤͨ"MU+4ʢBMUFSOBUJWF
   +BWB4DSJQUʣ
   ੩తܕ෇͚ݴޠͰ͋Δʢ5ZQFͱݴΘΕΔॴҎʣ
   Ϗϧυ࣌ʹɺม਺ʹ͓͔͠ͳ஋͕ೖ͍ͬͯΕ͹Τϥʔ͕ى͖ΔʢFY
   JOUܕͷม਺ʹTUSJOHܕΛ୅ೖͨ͠ʣ
   ಈతܕ෇͚ͩͱɺϏϧυˠ࣮ߦ·Ͱ΍Βͳ͍ͱΤϥʔ͕ى͜Δ͔Ͳ͏͔͸෼͔Βͳ͍ ࢲ͕$%,
   PO
   5ZQF4DSJQU
   Λਪ͢ཧ༝ 
10. 5ZQF4DSJQUʹ͍ͭͯগ͠ิ଍
    $%,
    PO
    5ZQF4DSJQUͰͷܕνΣοΫྫ
    -Ͱͷ4όέοτ࡞੒ ࢲ͕$%,
    PO
    5ZQF4DSJQU
    Λਪ͢ཧ༝  const testBucket = new s3.Bucket(this,'TestBucket',{ versioned: true, }); ܕνΣοΫ0, const testBucket = new s3.Bucket(this,'TestBucket',{ versioned: "123", }); ܕνΣοΫ/( WFSTJPOFE
    ͸
    CPPMFBO
    ·ͨ͸
    VOEF fi OFE
    ͡Όͳ͍ͱμϝʂ
11. $%,
    PO
    5ZQF4DSJQUͷਪ͠ϙΠϯτ
    ͦ΋ͦ΋$%,͕5ZQF4DSJQUͰॻ͔Ε͍ͯΔͱ͍͏҆৺ײ
    ಉ͡։ൃݴޠͱͳΔͨΊɺಠ֦ࣗு͕؆୯ʢͩͱࢥ͏ʣ
    ࣮૷ํ਑΍໋໊نଇʹࠔͬͨΒ$%,ͷιʔείʔυΛோΊͯࢀߟʹͰ͖Δ
    ଟ͘ͷ5ZQF4DSJQU࣮૷ྫ΍αϯϓϧίʔυ͕ωοτ্ʹ͋Δ
    5ZQF4DSJQUͷܕิ׬͕ൈ܈ͷ։ൃମݧ
    $%,ͷެࣜυΩϡϝϯτͷαϯϓϧ͕ͦ΋ͦ΋5ZQF4DSJQU
    ଞͷ/PEFKT੡ύοέʔδͱͷ਌࿨ੑ͕˓ ࢲ͕$%,
    PO
    5ZQF4DSJQU
    Λਪ͢ཧ༝ 
12. $%,
    PO
    5ZQF4DSJQUͰ਌ͷإΑΓݟΔެࣜυΩϡϝϯτ
    ެࣜυΩϡϝϯτͷαϯϓϧίʔυ͸جຊతʹ5ZQF4DSJQUલఏͳͷͰɺ߹Θ͓ͤͯ͘ͱ٢ ࢲ͕$%,
    PO
    5ZQF4DSJQU
    Λਪ͢ཧ༝  ˞
    IUUQTEPDTBXTBNB[PODPNDELBQJWEPDTBXTDPOTUSVDUMJCSBSZIUNM
13. $%,
    PO
    5ZQF4DSJQUͷਪ͠ϙΠϯτ
    ͦ΋ͦ΋$%,͕5ZQF4DSJQUͰॻ͔Ε͍ͯΔͱ͍͏҆৺ײ
    ಉ͡։ൃݴޠͱͳΔͨΊɺಠ֦ࣗு͕؆୯ʢͩͱࢥ͏ʣ
    ࣮૷ํ਑΍໋໊نଇʹࠔͬͨΒ$%,ͷιʔείʔυΛோΊͯࢀߟʹͰ͖Δ
    ଟ͘ͷ5ZQF4DSJQU࣮૷ྫ΍αϯϓϧίʔυ͕ωοτ্ʹ͋Δ
    5ZQF4DSJQUͷܕิ׬͕ൈ܈ͷ։ൃମݧ
    $%,ͷެࣜυΩϡϝϯτͷαϯϓϧ͕ͦ΋ͦ΋5ZQF4DSJQU
    ଞͷ/PEFKT੡ύοέʔδͱͷ਌࿨ੑ͕˓ ࢲ͕$%,
    PO
    5ZQF4DSJQU
    Λਪ͢ཧ༝ 
14. #-&"
    GPS
    '4*ͷϦϙδτϦΛ೷͍ͯΈ·͠ΐ͏
    VTFSDBTFTCBTFDUMPHHJOHQBDLBHFKTPO ࢲ͕$%,
    PO
    5ZQF4DSJQU
    Λਪ͢ཧ༝  "devDependencies": { "@types/jest": "^27.5.2", "@types/node": "18.7.14", "@typescript-eslint/eslint-plugin": "^5.38.0", "@typescript-eslint/parser": "^5.38.0", "cdk-nag": "^2.15.38", "eslint": "^8.23.1", "eslint-config-prettier": "^8.5.0", "lint-staged": "^13.0.3", "prettier": "^2.7.1", "simple-git-hooks": "^2.8.0", "standard-version": "^9.5.0", "typescript": "^4.8.3" },
15. #-&"
    GPS
    '4*ͷϦϙδτϦΛ೷͍ͯΈ·͠ΐ͏
    VTFSDBTFTCBTFDUMPHHJOHQBDLBHFKTPO ࢲ͕$%,
    PO
    5ZQF4DSJQU
    Λਪ͢ཧ༝  "devDependencies": { "@types/jest": "^27.5.2", "@types/node": "18.7.14", "@typescript-eslint/eslint-plugin": "^5.38.0", "@typescript-eslint/parser": "^5.38.0", "cdk-nag": "^2.15.38", "eslint": "^8.23.1", "eslint-config-prettier": "^8.5.0", "lint-staged": "^13.0.3", "prettier": "^2.7.1", "simple-git-hooks": "^2.8.0", "standard-version": "^9.5.0", "typescript": "^4.8.3" }, ͳʹ΍Β$%,ͬΆ͘ͳ͍
    ύοέʔδఆ͕ٛɺɺ
    φχίϨ
    
    🤔
16. #-&"
    GPS
    '4*Ͱ࠾༻͞Ε͍ͯΔ/PEFKTύοέʔδൈਮ
    &4-JOU
    +BWB4DSJQU΍5ZQF4DSJQU޲͚ͷ੩తղੳπʔϧɻ 
 ߏจΤϥʔ΍ϓϩδΣΫτݻ༗ͷίʔσΟϯάن໿ʹҧ൓͢Δ৔߹ʹ/(Λग़ͯ͘͠ΕΔɻ
    ղੳఆٛ͸
    FTMJOUSDKTPO
    ʹهࡌ͞Ε͍ͯΔ
    1SFUUJFS
    ෳ਺ݴޠʹରԠͨ͠ιʔείʔυϑΥʔϚολʢιʔείʔυΛ੔ܗͯ͘͠ΕΔʣ
    ϑΥʔϚοτఆٛ͸
    QSFUUJFSSDKTPO
    ʹهࡌ͞Ε͍ͯΔ
    MJOUTUBHFE
    HJU
    DPNNJU
    ࣌ʹԿ͔͠ΒͷॲཧΛτϦΨʔ͢Δ͜ͱ͕Մೳ
    #-&"
    GPS
    '4*Ͱ͸Լه͕ઃఆ͞Ε͍ͯΔ 
 ᶃ
    γʔΫϨοτ৘ใͷεΩϟϯ 
 ᶄ
    &4-JOUͰͷ੩తղੳ 
 ᶅ
    1SFUUJFSʹΑΔࣗಈϑΥʔϚοςΟϯά ࢲ͕$%,
    PO
    5ZQF4DSJQU
    Λਪ͢ཧ༝  "lint-staged": { "*": [ "git-secrets --scan" ], "*.(ts|tsx|js|jsx)": [ "npx eslint --fix" ], "*.(ts|tsx|js|jsx|json|html|yml|yaml|md|graphql|css|scss|less|vue|flow)": [ "npx prettier --write" ] }
17. #-&"
    GPS
    '4*Ͱ࠾༻͞Ε͍ͯΔ/PEFKTύοέʔδൈਮ
    &4-JOU
    +BWB4DSJQU΍5ZQF4DSJQU޲͚ͷ੩తղੳπʔϧɻ 
 ߏจΤϥʔ΍ϓϩδΣΫτݻ༗ͷίʔσΟϯάن໿ʹҧ൓͢Δ৔߹ʹ/(Λग़ͯ͘͠ΕΔɻ
    ղੳఆٛ͸
    FTMJOUSDKTPO
    ʹهࡌ͞Ε͍ͯΔ
    1SFUUJFS
    ෳ਺ݴޠʹରԠͨ͠ιʔείʔυϑΥʔϚολʢιʔείʔυΛ੔ܗͯ͘͠ΕΔʣ
    ϑΥʔϚοτఆٛ͸
    QSFUUJFSSDKTPO
    ʹهࡌ͞Ε͍ͯΔ
    MJOUTUBHFE
    HJU
    DPNNJU
    ࣌ʹԿ͔͠ΒͷॲཧΛτϦΨʔ͢Δ͜ͱ͕Մೳ
    #-&"
    GPS
    '4*Ͱ͸Լه͕ઃఆ͞Ε͍ͯΔ 
 ᶃ
    γʔΫϨοτ৘ใͷεΩϟϯ 
 ᶄ
    &4-JOUͰͷ੩తղੳ 
 ᶅ
    1SFUUJFSʹΑΔࣗಈϑΥʔϚοςΟϯά ࢲ͕$%,
    PO
    5ZQF4DSJQU
    Λਪ͢ཧ༝  "lint-staged": { "*": [ "git-secrets --scan" ], "*.(ts|tsx|js|jsx)": [ "npx eslint --fix" ], "*.(ts|tsx|js|jsx|json|html|yml|yaml|md|graphql|css|scss|less|vue|flow)": [ "npx prettier --write" ] } #-&"
    GPS
    '4*Ͱ͸$%,
    PO
    5ZQFTDSJQU։ൃ 
 ʹඞཁͳమ൘ύοέʔδ͕ඪ४Ͱೖ͍ͬͯΔͷͰ
    ͦͷ··࢖͏͚ͩ͡Ό΋͍ͬͨͳ͍ʂ
18. #-&"
    GPS
    '4*ͷίʔυΛগ͠೷͍ͯΈ·͠ΐ͏
    VTFDBTFTCBTFDUMPHHJOHMJCCMFBGTJTCVDLFUTUBDLUT
    ͔ΒҰ෦ൈਮ $%,
    PO
    5ZQF4DSJQU
    ։ൃ͋Δ͋Δ  import { aws_s3 as s3 } from 'aws-cdk-lib'; export class S3BucketStack extends cdk.Stack { constructor(scope: Construct, id: string, props: cdk.StackProps) { const logsBucket = new s3.Bucket(this, 'logsBucket', { accessControl: s3.BucketAccessControl.PRIVATE, blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL, versioned: true, removalPolicy: cdk.RemovalPolicy.RETAIN, serverAccessLogsBucket: archiveLogsBucket, encryption: s3.BucketEncryption.S3_MANAGED, enforceSSL: true, });
19. #-&"
    GPS
    '4*ͷίʔυΛνϥݟ
    VTFDBTFTCBTFDUMPHHJOHMJCCMFBGTJTCVDLFUTUBDLUT
    ͔ΒҰ෦ൈਮ $%,
    PO
    5ZQF4DSJQU
    ։ൃ͋Δ͋Δ  import { aws_s3 as s3 } from 'aws-cdk-lib'; export class S3BucketStack extends cdk.Stack { constructor(scope: Construct, id: string, props: cdk.StackProps) { const logsBucket = new s3.Bucket(this, 'logsBucket', { accessControl: s3.BucketAccessControl.PRIVATE, blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL, versioned: true, removalPolicy: cdk.RemovalPolicy.RETAIN, serverAccessLogsBucket: archiveLogsBucket, encryption: s3.BucketEncryption.S3_MANAGED, enforceSSL: true, }); BXTDELMJCͷBXT@TϞδϡʔϧΛ Tͱ͍͏ผ໊Ͱར༻͢ΔΑʂ OPEF@NPEVMFTBXTDELMJCBXTT
    ͔ΒΠϯϙʔτ
20. #-&"
    GPS
    '4*ͷίʔυΛνϥݟ
    VTFDBTFTCBTFDUMPHHJOHMJCCMFBGTJTCVDLFUTUBDLUT
    ͔ΒҰ෦ൈਮ $%,
    PO
    5ZQF4DSJQU
    ։ൃ͋Δ͋Δ  import { aws_s3 as s3 } from 'aws-cdk-lib'; export class S3BucketStack extends cdk.Stack { constructor(scope: Construct, id: string, props: cdk.StackProps) { const logsBucket = new s3.Bucket(this, 'logsBucket', { accessControl: s3.BucketAccessControl.PRIVATE, blockPublicAccess: s3.BlockPublicAccess.BLOCK_ALL, versioned: true, removalPolicy: cdk.RemovalPolicy.RETAIN, serverAccessLogsBucket: archiveLogsBucket, encryption: s3.BucketEncryption.S3_MANAGED, enforceSSL: true, }); 4όέοτΛ 
 ࡞ͬͯΔίʔυͬΆ͍͚Ͳɺ 
 ͲΜͳόέοτ࡞ͬͯΜͷʁ🤔
21. ਌ͷإΑΓݟΔ$%,υΩϡϝϯτ $%,
    PO
    5ZQF4DSJQU
    ։ൃ͋Δ͋Δ 
22. ਌ͷإΑΓݟΔ$%,υΩϡϝϯτ
    #VDLFUΫϥεͷϓϩύςΟ $%,
    PO
    5ZQF4DSJQU
    ։ൃ͋Δ͋Δ 
23. ਌ͷإΑΓݟΔ$%,υΩϡϝϯτ
    #VDLFUΫϥεͷϓϩύςΟ $%,
    PO
    5ZQF4DSJQU
    ։ൃ͋Δ͋Δ  /BNFͷ຤ඌʹ ͕෇͍͍ͯΔ΋ͷ͸໌ࣔ͠ͳͯ͘ ΋$%,ͰΑ͠ͳʹઃఆͯ͘͠ΕΔ
24. ਌ͷإΑΓݟΔ$%,υΩϡϝϯτ
    #VDLFUΫϥεͷϓϩύςΟ $%,
    PO
    5ZQF4DSJQU
    ։ൃ͋Δ͋Δ  σϑΥϧτ஋͸$MPVE'PSNBUJPOελοΫଆͰ 
 Α͠ͳʹઃఆ͓ͯͥ͘͠ʂ
25. ʘಡΈղ͖ํ͕෼͔Ε͹#-&"
    GPS
    '4*͸ා͘ͳ͍ʂʗ
26. ͋͞ɺ#-&"
    GPS
    '4*ͷιʔεͷੈք΁%FFQ
    %JWFʂ IUUQTHJUIVCDPNBXTTBNQMFTCBTFMJOFFOWJSPONFOUPOBXTGPS fi OBODJBMTFSWJDFTJOTUJUVUF