20190312 AWS Black Belt Online Seminar AWS Well-Architected Framework¤Ë¤è¤ë¥³¥¹¥È×îßm»¯Amazon Web Services Japan
?
The document is about an AWS Black Belt Online Seminar hosted by Amazon Web Services Japan. It provides an overview of the seminar series, which covers various AWS services, solutions, and industries. It notes some things covered in the seminar, like cost optimization best practices, as well as things not covered, like architecture changes for cost optimization. It also provides some context about AWS Well-Architected Framework and how it can help with cloud optimization and cost optimization.
Identity and Access Management: The First Step in AWS SecurityAmazon Web Services
?
by Fritz Kunstler, Sr. Security Consultant, AWS
AWS Identity and Access Management (IAM) is first in the Security Perspective of the AWS Cloud Adoption Framework CAF because in the cloud, first you grant access and only then can you provision infrastructure (the opposite approach of on-premises). In this session, you will learn how to define fine-grained access to AWS resources via users, roles, and groups; design privileged user and multifactor authentication mechanisms; and operate IAM at scale.
The document discusses strategies for migrating IT workloads to the cloud. It describes common drivers for cloud migration like cost reduction and agility. Potential barriers are also outlined, such as existing investments and lack of cloud expertise. The main sections of the document are on migration planning, common migration strategies ranging from rehosting to rearchitecting, examples of migration patterns, and modernizing applications on AWS.
This document provides an overview of an AWS webinar on AWS Elemental MediaConvert held on March 31, 2020. The webinar covered an introduction to AWS Elemental MediaConvert and how it can be used to build video on demand workflows. It also discussed MediaConvert's transcoding capabilities, integration with other AWS services, and pricing. The webinar aimed to provide an understanding of how MediaConvert fits into the overall AWS Media Services portfolio.
AWS Edge Security - Cloud-Native Defense Against Diverse Internet ThreatsAmazon Web Services
?
Learn how you can defend your applications on AWS against diverse set of Internet threats, like DDoS, Bots or Zero-day attacks. At this session you will learn about how your applications on AWS are inherently secured against common threats. You will also learn about how you can use AWS security services like AWS WAF, Shield and Firewall Manager to build a robust and customised protection specific to your applications.
by Brigid Johnson, Product Management Manager, AWS
How to Use IAM Roles to Grant Access to AWS: Customers use IAM roles to delegate access to services, applications, accounts, and federated users using temporary credentials. We will start by defining use cases for IAM roles, tools to use IAM roles in your account, and techniques to manage role permissions. We will cover how customers can use roles to grant access to AWS. Using demonstrations, we will learn how to monitor roles across accounts, grant cross account access, and scope down permissions for a particular entity. This session will cover how to use roles for developers building applications on AWS and for administrators controlling and monitoring access. Level 300
Identity and Access Management: The First Step in AWS SecurityAmazon Web Services
?
by Fritz Kunstler, Sr. Security Consultant, AWS
AWS Identity and Access Management (IAM) is first in the Security Perspective of the AWS Cloud Adoption Framework CAF because in the cloud, first you grant access and only then can you provision infrastructure (the opposite approach of on-premises). In this session, you will learn how to define fine-grained access to AWS resources via users, roles, and groups; design privileged user and multifactor authentication mechanisms; and operate IAM at scale.
The document discusses strategies for migrating IT workloads to the cloud. It describes common drivers for cloud migration like cost reduction and agility. Potential barriers are also outlined, such as existing investments and lack of cloud expertise. The main sections of the document are on migration planning, common migration strategies ranging from rehosting to rearchitecting, examples of migration patterns, and modernizing applications on AWS.
This document provides an overview of an AWS webinar on AWS Elemental MediaConvert held on March 31, 2020. The webinar covered an introduction to AWS Elemental MediaConvert and how it can be used to build video on demand workflows. It also discussed MediaConvert's transcoding capabilities, integration with other AWS services, and pricing. The webinar aimed to provide an understanding of how MediaConvert fits into the overall AWS Media Services portfolio.
AWS Edge Security - Cloud-Native Defense Against Diverse Internet ThreatsAmazon Web Services
?
Learn how you can defend your applications on AWS against diverse set of Internet threats, like DDoS, Bots or Zero-day attacks. At this session you will learn about how your applications on AWS are inherently secured against common threats. You will also learn about how you can use AWS security services like AWS WAF, Shield and Firewall Manager to build a robust and customised protection specific to your applications.
by Brigid Johnson, Product Management Manager, AWS
How to Use IAM Roles to Grant Access to AWS: Customers use IAM roles to delegate access to services, applications, accounts, and federated users using temporary credentials. We will start by defining use cases for IAM roles, tools to use IAM roles in your account, and techniques to manage role permissions. We will cover how customers can use roles to grant access to AWS. Using demonstrations, we will learn how to monitor roles across accounts, grant cross account access, and scope down permissions for a particular entity. This session will cover how to use roles for developers building applications on AWS and for administrators controlling and monitoring access. Level 300
Enabling Agility with Data Governance - ???: ???, Analytics Specialist, WWSO,...Amazon Web Services Korea
?
?????? ??????? ?????? ?? ??::???::AWS Summit Seoul 2018
1. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
? ??
Developer Specialist Solutions Architect / APAC
?????? ???????
?????? ?? ??
2. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
? ?????..
? ???? ??????? ???? ???? ????
??? ???? ???? ?? ??, ??? ? ??
??? ??, ???? ?? ??? ???? ?????
?????.
? ???? ??? AWS ?? ????? ????
???? ????? ??? ??? ????? ?? ?
? ????.
3. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ??
???????? ??
??????? ???? ??
?? (Splitting Monolithic to Microservice)
????? AWS ???
??
4. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ??
5. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
???? vs ???????
?? UI
?? ???
???? ???
?? ???
?? UI
??
???
??
???
??
???
?? UI
?? UI
6. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ???? (??)
? CI/CD? ??? ??? ?
? ?? ???? ??? ??? ?? ??
? ??? ?? ?
? ??? ?? ??? ??
7. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ???? ??
???
8. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ???? (??)
?? ??? ??? ??? ??? ???? ??? ???
????? ???
9. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ????
? ????
? ???? ???? ???? ???? ??? ??
? ??? ???? ?? ??? ?? ?? ??.
? ??????? ?? ??? ??
? ??????
? ?? ???? ?????? ??
? ??? ??? ??? ???????
? ?? ???? ??? ?????? ??
10. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ?????? ??
? ?? ??? ??????? ????? ??/?? ?? ???
? ?? ?? ??????? ??
? ??? ???? ?? ??
? ? ??? ?? ??
? CI/CD ? ??
? ???? ???
? Amazon.com : 3tier ¨¤ Miscroserices
? Netflix
? eBay
11. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS ????? ??
?? ?? ???
???
??? ?? ???
????
??????
2. ??? ??
???
Amazon
S3
Amazon
DynamoDB
AWS Lambda
Amazon API
Gateway
3. AWS????
??
1. ? ???
??
? ???
? ????
? API?
? ?????
? ???
? ?????
? ????
? ??
12. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
???????? ??
17. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
?? ???? ?? ??
Buy Product
management
Sell Product
mangement
Order
Management
Payment
management
Delivery
management
?? : http://microservices.io/patterns/decomposition/decompose-by-subdomain.html
?? ?? ?? ??
18. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
???? ?? vs ??? ??
???? ??? ??
???? ??
? ? ??? ?? ??? API ??
? ??? API? ???? ? ?? ??
? ??? ?? ?? ??
? ??????? ?? ?? ? Data?? ??
?? ?? ?? ??
19. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ???? ??
20. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ???? ??
¡ì ??? ? ?????? ??
- ???? ???, ???? ???, ???? ??????
¡ì API ????? ??
- ??? ??????? ?? ??? ?? ???? ????.
¡ì ?? ???(Circuit Breaker) ??
- ?????? ?? ?? ???? ??? ???? ???? ???? ??
?? ???? ???? ??.
?? ?? ?? ??
21. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ???? ??
¡ì Single Service per Host
¡ì Access Token
¡ì Log aggregation
¡ì Application metrics
¡ì Audit logging
¡ì Distributed tracing
¡ì Exception tracking
¡ì Health check API
¡ì Log deployments and changes
¡ì Server-side page fragment composition
¡ì Client-side UI composition
?? http://microservices.io/patterns/microservices.html
?? ?? ?? ??
22. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??? ??? ???
???? ?? ??
? ???, ???, ???, ?? ???, ?? ¡
?? (Decomposition)
? ??????
? ???
??
? 1?? : ??? ??? ?? ???
? 2?? : ??????(? ??? ?)? ???? ?? ?? ??? ???
?? ?? ?? ??
23. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??
(Splitting Monolithic to
Microservice)
24. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
???? ?? ?? ??
?? ??????
? ??? ?? ??
? ?? ???(Shared Data)
? ??? ??(Schema Splitting)
? ?????? ????
? ??? ?? ?? ???
? ??? ??(Data Pump)
? ??? ??? ??(Event Data Pump)
?? ?? ?? ??
25. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
?? ?? ??
??? ??
???? ???
??? ??? ?? ???
???
???
??
???
???????
??? ??? ?? ???
1:N
?? ?? ?? ??
26. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
?? ???
Ex) country code, zip code, custom code ¡
?? ??
???? ???
?? ??
??
?? ???
??
???
??
???
??
???
???? ???
?? ?? ?? ??
27. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??? ??
?? ??
???? ???
???
?? ??
???
??
???
?? ?????? ???
???? ???
?? ?? ?? ??
28. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
?????? ????
????
???
?? ??
???? ???
??
???
?? ??
???? ???
??
???
??
???
?? ??
??
???
???? ???
1 ??
?? ???
2 ??
??? ??
3 ??
???????
???? ??
?? ?? ?? ??
29. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??/??? ??????
Main
Database
????
???
??/??
Reporting
Database
???
???
???
API? ??? ???? ???
????? ??? ????
1. ??? ???? ?? ??? HTTP?
?? ??? ?? ????? ??
2. ??? ??? ??? ???? ??
API? ?? ?? ??? ?? ?
??
?? ?? ?? ??
31. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
????? AWS ???
32. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
???? ??
???? ?? ??
???, ???, ???, ?? ???, ?? ¡
?? ??? ??
? ???????? ????????
? ? ???? ??? SLA? ????
? ???? ??? ??? ?? ???? ?? ??
?? ?? ?? ??
33. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ??????
? ?? ?? ?????? ??
? ?? ?? ???? ?? ??
? ??? ?? ?? ???? ??
??????? ??? ? ??
????
? ??? ??? ???? ??
???? ?? ?????? ?
????
?? ?? ?? ??
34. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??????? ??????
? ????? ???? ??
? ???, ??? ??, ???
(Lightweight, portable, consistent)
? ???? ???? ??
? ???? ????? ??
?? ?? ?? ??
35. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
?? ??
Amazon ECS
AWS
Lambda
AWS Step Functions
Amazon API
Gateway
Amazon EKS
AWS Fargate
Amazon
S3
Amazon
DynamoDB
Amazon
Aurora
Amazon
EC2
Amazon
DynamoDB
Amazon
RDS
Amazon
S3
RDSDB
instancestandby
(multi-AZ)
RDS DB
instance read
replica
Amazon
EC2
Elastic Load
Balancing
Microservice (1st Gen) Microservice (2nd Gen)
?? ?? ?? ??
36. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS ??? ?? (??)
Amazon API
Gateway
AWS
Lambda
Amazon
DynamoDB
Amazon
S3
Amazon
CloudFront
? Bucket Policies
? ACLs
? OAI
? Geo-Restriction
? Signed Cookies
? Signed URLs
? DDOS
IAM
AuthZ
IAM
? Throttling
? Caching
? Usage Plans
??
???
????
37. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
AWS ??? ?? (????)
Amazon API
Gateway
AWS
Lambda
Amazon
S3
Amazon
CloudFront?????
????
Amazon
DynamoDB
? Access Logs in
S3 Bucket
? CloudWatch
Metrics
? Access Logs in
S3 Bucket
AWS
CloudTrail
Amazon
CloudWatch
? Custom
CloudWatch
Metrics & Alarms
? Audit Log of All
AWS API Calls
? Latency
? Count
? Cache Hit/Miss
? 4XX/5XX Errors
? Invocations
? Invocation Errors
? Duration
? Throttled Invocations
? Throttled Reqs
? Returned Bytes
? Latency
38. ? 2018, Amazon Web Services, Inc. or Its Affiliates. All rights reserved.
??