[aws hands-on for beginners -1st steps]

© 2020, Amazon Web Services, Inc. or its Affiliates. All rights reserved. © 2020, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

�� $ �'

Solutions Architect(&� / Kei Kanazawa+�)": 2020/3/13,

[AWS Hands-on for Beginners - 1st Steps]��%-

��!* IAM �#��

© 2020, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

=2;+

❏ .-

@9/ Kei Kanazawa

❏ &)%

��%�$")�#'�)��

❏ <8

(�17,5?*6�5?!&��A:��'��

(AWS � ��3>�4��0��

❏ 0��AWS�) �

AWS Lambda

@ketancho


AWS Hands-on for Beginners ��

?S�D�6�� AWS �9$0,%�>��

4�� $0,%�5G��E�. /&0#'*��

�=��FR��=��<C�7O��!/)-/+BA��

(0-��:N1~2FR�2@ & I��6H�3��1Q%"-FR�>J��M;��P3��KO�8L


��

• �([`2020�3�13�+4 �_q�{t�$Hfb"%^YEZN0�QZEcSC��_��`AWS�,mn}qlw(http://aws.amazon.com)^ZN& LWOEC �(#�^`-1�QZHhcSJB�(\AWS�,mn}qlw\[!@�$^�2JDXV�BAWS�,mn}qlw_!@j)�OTZEVWKcSC

• ~x�s��wp�v��^YEZeB+4 �_e_\]hcSC3=JDi�JNPEcS_[BN1�LWOEC

• y�uo�[` AWS _.7q�{t_��B�v�t_#�j�EcSC/(?j6Giy�uo�eNPEcSJBU_�`N��(�J��SiM\jDgIRdN 9LWOEC

• �>�_�v�t_<;^YEZeBH:5_8'[N�*EVWLfFHAEEVQcSC


§ AWS MA�� AWS ��

§ IAM �� I

§ A IAM ��

��


§ �� AWS � �"!��

��


��

��+FPB9P+�� + 7:8PE��*��)1+ + ��+�3

�7:8PE4��#'/2

��NQELQ?Q( IAM LQ?Q*&"'�-

��IAM LQ?Q4��$2

��IAM JM@Q!<NQH!OQN�*&"'�-

��IAM JM@Q( IAM <NQH4�%'/2

��IAM OQN4�#'/2

��.(0 + Next Action (#'9AAK+=PDPC4 �


��

�� + �� + ��

�+.,B8(��%'

�@C8>C3C� IAM >C3C ��#

IAM >C3C(��'

�IAM <?4C�0@C:�AC@ ��#

�IAM <?4C� IAM 0@C:(��%'

�IAM AC@(��%'

�$�& + Next Action ��-55=!1B7B6(��


§

§ M

§ S

+

+

AWShttps://aws.amazon.com/jp/register-flow/

https://aws.amazon.com/jp/register-flow/


��

��)DN@7N)�� + 586NC��(��'/) + ��)�1

��

�LOCJO=O& IAM JO=O($ %�+

IAM JO=O2��"0

�IAM HK>O�:LOF�MOL($ %�+

�IAM HK>O& IAM :LOF2�#%-0

�IAM MOL2�!%-0

�,&. + Next Action &!%7??I);NBNA2��


§

§

§

+

+


��)DN@7N)�� + 586NC��(��'/) + ��)�1

�586NC2��!%-0

�� IAM ��

IAM JO=O2��"0

�IAM HK>O�:LOF�MOL($ %�+

�IAM HK>O& IAM :LOF2�#%-0

�IAM MOL2�!%-0

�,&. + Next Action &!%7??I);NBNA2��


*0"(0�0

/'0*�#+� + $�-0#�,��.

/4 AWS �0%�) 0��9��84��?G

/=:A!�� 3��

�� IAM ��IAM (Identity & Access Management)(0�0

/��."ID + IAM (0�07+ $�-0#�,��.

/B1�� IAM &)�0?G�E��<2��6D

/5@C�� IAM (0�0�2;5@C IAM (0�0�,��.��2>�F��


IAM ��

E2

C

A O K

A

A O K

A ✗

{"Effect": "Allow","Action": "*","Resource": "*"

}

{"Effect": "Allow","Action": ”ec2:Describe*","Resource": "*"

}


C2

E

E

A KO

A

A KO

A ✗✗

IAM ��


Amazon EC2 (Elastic Compute Cloud)

':,C.��3FBG0�

*6�(��( �

'�&��&��"�

IA ��E7/@

'4A�� 4A�,�

$�(��C.��

Amazon S3 (Simple Storage Service)

'99.999999999% �?)5�8��!��%(��( �

'2F=-H�1+��%(�

'J>Web #��&�<@

';�� AWS �( ��D9��


��(CM?6M(�� + 475MB��'��&.( + ��(�0

�475MB1��!$,/

KNBIN<N% IAM IN<N'# $�*

��IAM � � ��

�IAM GJ=N�9KNE�LNK'# $�*

�IAM GJ=N% IAM 9KNE1�"$,/

�IAM LNK1�!$,/

�+%- + Next Action %!$6>>H(:MAM@1��


��

��&AK=4K&�� + 253K@��%��$,& + ��&�.

�253K@/��"*-

��IL@GL:L# IAM GL:L%!�"�(

��IAM GL:L/��-

��IAM ��

�IAM EH;L# IAM 7ILC/� "*-

��IAM JLI/��"*-

��)#+ + Next Action #�"4<<F&8K?K>/��


§ )( J S

§ M ew ew D

§ *) l r DW N AW N nW N O o

{"Version": "2012-10-17","Statement": {"Effect": "Allow","Action": "dynamodb:*","Resource": "arn:aws:dynamodb:us-east-2:123456789012:table/Books"

}}

y

A N DI A

A DI A


§

§ B I

AA

A

A

A A

A


§ 2 O A

§ 3 O CI 2R IR A 2

ME Sa A

O

ME Sa

ME ✗


1

{"Effect": "Allow","Action": ”s3:*","Resource": "*"

}


��

��(CM?6M(�� + 475MB��'��&.( + ��(�0

�475MB1��!$,/

KNBIN<N% IAM IN<N'# $�*

�IAM IN<N1��"/

�IAM GJ=N�9KNE�LNK'# $�*

��IAM �� IAM ��

�IAM LNK1�!$,/

�+%- + Next Action %!$6>>H(:MAM@1��


�� - IAM ��

A��

/- / -

K

K

✗/ / -/


�� – IAM��

A

2

/- / -

K

K

✗/ / -/

-


��

��(CM?6M(�� + 475MB��'��&.( + ��(�0

�475MB1�� $,/

KNBIN<N% IAM IN<N'#�$�*

�IAM IN<N1��!/

�IAM GJ=N�9KNE�LNK'#�$�*

�IAM GJ=N% IAM 9KNE1�"$,/

��IAM ��

�+%- + Next Action % $6>>H(:MAM@1��


�� - IAM

/

A

A ✗


��

��'=F;3F'�� + 142F<��&��%+' + ��'�-

�142F<.��#*,

DG<BG8G$ IAM BG8G&"�#�)

�IAM BG8G.�� ,

�IAM AC9G�6DG?�EGD&"�#�)

�IAM AC9G$ IAM 6DG?.�!#*,

�IAM EGD.��#*,

�� + Next Action ��


§ ��

§ ��


IA

https://aws.amazon.com/jp/aws-jp-introduction/aws-jp-webinar-hands-on/




��

��

[aws hands-on for beginners -1st steps]

Documents