[B! IAM] aroma_blackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

aroma_black id:aroma_black

IAMã«é–¢ã™ã‚‹aroma_blackã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

è¤‡æ•°AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ãƒ¦ãƒ¼ã‚¶ç®¡ç†ã‚’ã€ãƒã‚°ã‚¤ãƒ³ç”¨AWSç’°å¢ƒã«é›†ç´„ã—ã¦ã¿ãŸ | DevelopersIO
ã¯ã˜ã‚ã« AWSãƒãƒ¼ãƒ ã®ã™ãšãã§ã™ã€‚ IAMæ¨©é™ã®åˆ†é›¢ã‚„ã€è«‹æ±‚æƒ…å ±ã®æ˜Žç¢ºåŒ–ã‚’å®Ÿç¾ã™ã‚‹æ‰‹æ®µã¨ã—ã¦ã€AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®åˆ†å‰²ã‚’å®Ÿæ–½ã™ã‚‹äº‹ãŒã‚ã‚Šã¾ã™ã€‚ AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¨VPCã€åˆ†ã‘ã‚‹ï¼Ÿ åˆ†ã‘ãªã„ï¼Ÿ: åˆ†å‰²ãƒ‘ã‚¿ãƒ¼ãƒ³ã®ãƒ¡ãƒªãƒƒãƒˆãƒ»ãƒ‡ãƒ¡ãƒªãƒƒãƒˆ çµ±åˆèªè¨¼åŸºç›¤ã¨é€£æºã—ãŸSSOãªã©ã‚’åˆ©ç”¨ã—ãªã„å ´åˆã€ãƒ¦ãƒ¼ã‚¶ç®¡ç†ã®ç…©é›‘åŒ–ãŒå•é¡Œã¨ãªã‚‹äº‹ãŒã‚ã‚Šã¾ã—ãŸãŒã€ è¤‡æ•°ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§æ§‹æˆã•ã‚ŒãŸç’°å¢ƒã®IAMãƒ¦ãƒ¼ã‚¶ç®¡ç†ã¨ã€ãã®æ¨©é™ç®¡ç†ã‚’ ãƒã‚°ã‚¤ãƒ³å°‚ç”¨ã®AWSç’°å¢ƒã‚’ç”¨æ„ã—ã€åŠ¹çŽ‡åŒ–ã™ã‚‹æ©Ÿä¼šãŒã‚ã‚Šã¾ã—ãŸã€‚ ãã®å†…å®¹ã«ã¤ã„ã¦ç´¹ä»‹ã•ã›ã¦é ‚ãã¾ã™ã€‚ æ¦‚è¦å›³ åŸºæœ¬æ–¹é‡ å½“è©²ç’°å¢ƒã®AWSã€IAMã®åˆ©ç”¨æ–¹é‡ã¯ä»¥ä¸‹ã¨ã—ã¾ã—ãŸã€‚ é–‹ç™ºã€æœ¬ç•ªç’°å¢ƒã§ã¯ã€IAMã¯Roleã®åˆ©ç”¨ã‚’åŽŸå‰‡ã¨ã—ã¾ã™ã€‚ IAMãƒ¦ãƒ¼ã‚¶ã¯ãƒã‚°ã‚¤ãƒ³ç’°å¢ƒã®ã¿ã«è¨ç½®ã—ã¾ã™ã€‚ Roleã«å¯¾å¿œã—ãªã„ãƒ„ãƒ¼ãƒ«ã«é™ã‚Šã€ä¾‹å¤–ã¨ã—ã¦IAMãƒ¦ãƒ¼ã‚¶(ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼)ã®è¨ç½®ã‚’èªã‚ã¾ã™ã€‚ å…¨ã¦ã®IAMãƒ¦ãƒ¼ã‚¶ã¯å®š
aroma_black 2017/06/23
aws

IAM
ãƒªãƒ³ã‚¯
Ansibleã§IAM User/Group/Roleã‚’ç®¡ç†ã™ã‚‹ | DevelopersIO
åœŸæ—¥ã¨ãªã‚‹ã¨å¤©æ°—ãŒæ‚ªã„åŒ—æµ·é“ã®æ¸¡è¾ºã§ã™ã€‚ ä»Šæ—¥ã¯ä¸ƒå¤•ã®å‰µç«‹è¨˜å¿µæ—¥ã¨ã„ã†ã“ã¨ã§ã€Ansibleã®AWSãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ã£ã¦IAM User, Group, Role ã‚’ç®¡ç†ã™ã‚‹æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ iam / iam_policyãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« Ansibleã®iamãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨iam_policyãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã‚³ã‚¢ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ã²ã¨ã¤ã§ã€AWSä¸Šã®IAMãƒªã‚½ãƒ¼ã‚¹ã¨ãƒã‚·ãƒªãƒ¼ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚’ç®¡ç†ã—ã¾ã™ã€‚ IAMãƒªã‚½ãƒ¼ã‚¹ã¯ã€CloudFormationã§ã‚‚ç®¡ç†å¯èƒ½ã§ã™ã€‚ Ansibleã®ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’åˆ©ç”¨ã—ãŸå ´åˆã€ãƒãƒªã‚·ãƒ¼ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®å†åˆ©ç”¨ã‚„ãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆãŒåˆ©ç”¨ã§ãã‚‹ç‚¹ãŒãƒã‚¤ãƒ³ãƒˆã¨ãªã£ã¦ãã¾ã™ã€‚ iamãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§IAM Roleã‚’ä½œæˆã™ã‚‹ iamãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã€iam_typeã§IAMãƒªã‚½ãƒ¼ã‚¹ã®ç¨®é¡žã‚’æŒ‡å®šã—ã€User / Group / Roleã‚’ä½œæˆã—ã¾ã™ã€‚ profileã¨stateã‚’æŒ‡å®šã™ã‚‹ã“ã¨ä»¥å¤–ã§ç‰¹åˆ¥
aroma_black 2016/07/12
2.1ã ã¨policy_jsonãŒä½¿ãˆãªã„

IAM

ansible
ãƒªãƒ³ã‚¯
Macã‹ã‚‰AWSã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹æ™‚ã¯AssumeRoleã™ã‚‹ã“ã¨ã«ã—ãŸ - Qiita
ç™ºç«¯ ãƒãƒ¼ã‚«ãƒ«PCã‹ã‚‰AWSã®APIã‚’å‘¼ã³å‡ºã™å ´åˆã€ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã‚’ãƒãƒ¼ã‚«ãƒ«ã«ä¿å˜ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚‹ã€‚ ãƒ‡ã‚£ã‚¹ã‚¯ã¯æš—å·åŒ–ã—ã¦ã‚‹ã—ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒãƒƒã‚¯ã‚‚ã•ã‚Œã¦ã‚‹ã‘ã©ã€å¤§ãã„æ¨©é™ã‚’æŒã£ãŸãƒ¦ãƒ¼ã‚¶ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã‚’ãƒ™ã‚¿æ›¸ãã«ã—ã¦ãŠãã®ã¯æ°—ãŒã²ã‘ã‚‹ã€‚ ã‹ã¨ã„ã£ã¦ä½•ã‚‚å‡ºæ¥ãªã„ãƒ¦ãƒ¼ã‚¶ã‚’ä½œã£ã¦ã‚‚æ„å‘³ãŒç„¡ã„ã€‚ ã¨ã„ã†ã“ã¨ã§ã€æ¨©é™ã®å°‘ãªã„ãƒ¦ãƒ¼ã‚¶ã‹ã‚‰å¤§ããªæ¨©é™ã‚’æŒã¤ãƒãƒ¼ãƒ«ã‚’ä¸€æ™‚çš„ã«æ‹å€Ÿã™ã‚‹å½¢ã«ã—ãŸã€‚ aws-cliã®è‡ªå‹•AssumeRoleã¨ã®ä½¿ã„åˆ†ã‘ aws-cli ã«ã¯ è‡ªå‹•çš„ã«AssumeRoleã‚’è¡Œã£ã¦ãã‚Œã‚‹æ©Ÿèƒ½ ãŒã‚ã‚‹ã€‚cliã ã‘ä½¿ã†ãªã‚‰ã“ã¡ã‚‰ã‚’ä½¿ã£ãŸã»ã†ãŒã„ã„ã¨æ€ã†ã€‚ mfa_serial ã‚’æŒ‡å®šã™ã‚Œã°ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã‚‚ä½¿ãˆã‚‹ã—ã€ã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã®æœ‰åŠ¹æœŸé™ãŒåˆ‡ã‚ŒãŸã‚‰å†å…¥åŠ›ã‚’ä¿ƒã—ã¦ãã‚Œã‚‹ã€‚ ãŸã ã€AWS SDK for Ruby ã§ã¯è‡ªå‹•çš„ã«AssumeRoleã—ã¦ãã‚Œãªã„ã‚ˆã†ã ã£ãŸã€‚ SDKã§ã‚‚ã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·
aroma_black 2016/02/15
AssumeRoleã™ã‚‹éš›ã®å…·ä½“çš„ãªè¨å®šã¨æµã‚Œã€‚

IAM

aws

sts
ãƒªãƒ³ã‚¯
IAMãƒãƒ¼ãƒ«å¾¹åº•ç†è§£ ã€œ AssumeRoleã®æ£ä½“ | DevelopersIO
ã•ã¦ã€çš†æ§˜ã¯IAMã«ã©ã®ã‚ˆã†ãªã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’ãŠæŒã¡ã§ã—ã‚‡ã†ã‹ã€‚ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«é–¢ã‚ã‚‹è¤‡æ•°äººã§1ã¤ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’æ‰±ã†æ™‚ã€å„ãƒ¡ãƒ³ãƒãƒ¼ã«é…å¸ƒã™ã‚‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œã‚Œã‚‹æ©Ÿèƒ½ã€‚ãã—ã¦ã€ãã®æ°—ã«ãªã‚Œã°ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ã‚°ãƒ«ãƒ¼ãƒ—åˆ†ã‘ã—ã€æ¨©é™ã‚’åŽ³å¯†ã«ç®¡ç†ã§ãã‚‹æ©Ÿèƒ½ã€‚ã¨ã„ã£ãŸã¨ã“ã‚ã‹ã¨æ€ã„ã¾ã™ã€‚ ä¸Šè¨˜ã®ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã§å‡ºã¦ããŸä¸»ãªã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆè¦ç´ ï¼‰ã¯Userã¨Groupã§ã™ãã€‚IAMã®Management Consoleã§è¦‹ã¦ã¿ã‚‹ã¨ã€IAMã¯ã“ã‚Œã‚‰ã®ä»–ã«Roleã‚„Identity Providerã¨ã„ã†ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã«ã‚ˆã£ã¦æ§‹æˆã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã ã€ã¨ã„ã†ã“ã¨ãŒã‚ã‹ã‚Šã¾ã™ã€‚ä»Šæ—¥ã¯Roleã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã‚’å½“ã¦ã¦ã€ãã®å®Ÿæ…‹ã‚’è©³ã—ãç†è§£ã—ã¾ã™ã€‚ IAM Role IAM Roleã‚’ä½¿ã†ã¨ã€å…ˆã«æŒ™ã’ãŸIAMã®ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã®ä»–ã«ã€ä¸‹è¨˜ã®ã‚ˆã†ãªã“ã¨ãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ IAM roles for EC2 instancesã‚’ä½¿ã£ã¦ã¿
aroma_black 2016/02/15
aws

IAM
ãƒªãƒ³ã‚¯
å˜ä¸€ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«æ½œã‚€é‡å¤§ãªå±é™º | POSTD
Amazon Webã‚µãƒ¼ãƒ“ã‚¹ï¼ˆAWSï¼‰ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¯ã€AWSã§ãƒ“ã‚¸ãƒã‚¹ã‚’å±•é–‹ã—ã¦ã„ã‚‹äººã«ã¨ã£ã¦éžå¸¸ã«å¤§äº‹ãªã‚‚ã®ã§ã™ã€‚ã§ã™ãŒã€AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ãŸã£ãŸä¸€ã¤ã—ã‹ã‚‚ã£ã¦ã„ãªã„å ´åˆã€é‡å¤§ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å±é™ºã«ç›´é¢ã™ã‚‹ã“ã¨ã«ãªã‚‹ã§ã—ã‚‡ã†ã€‚ä½•ãŒå•é¡Œãªã®ã‹ã€ãã—ã¦ã©ã†ã™ã‚Œã°è§£æ±ºã§ãã‚‹ã®ã‹ã‚’ã€ã“ã®è¨˜äº‹ã§ã”ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ å±é™ºæ€§ã‚’ã¯ã‚‰ã‚€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆè¨å®šï¼šå˜ä¸€ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆ å˜ä¸€ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã¯ã€EC2ä»®æƒ³ã‚µãƒ¼ãƒã€S3ãƒã‚±ãƒƒãƒˆã€RDSãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ãªã©ãƒ“ã‚¸ãƒã‚¹ã«å¿…è¦ãªæ§˜ã€…ãªãƒªã‚½ãƒ¼ã‚¹ã¨ã¨ã‚‚ã«ã€IAMãƒ¦ãƒ¼ã‚¶ãŒå«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¸ã®ãƒã‚°ã‚¤ãƒ³æ–¹æ³•ã¯åŸºæœ¬çš„ã«2é€šã‚Šã‚ã‚Šã¾ã™ã€‚ãƒ¦ãƒ¼ã‚¶åã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã™ã‚‹AWS Management Consoleã€ã¾ãŸã¯CLIã‚„SDKã§ç”¨ã„ã‚‰ã‚Œã‚‹AWSã‚¢ã‚¯ã‚»ã‚¹èªè¨¼æƒ…å ±ã‚’ä½¿ã†ã®ã§ã™ã€‚ä»¥ä¸‹ã®å›³ã¯ã€ãã®ä»•çµ„ã¿ã‚’ç¤ºã—ãŸã‚‚ã®ã§ã™ã€‚ è¨³æ³¨ accountã€Œã“ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«ã¯I
aroma_black 2015/09/01
aws

security

IAM
ãƒªãƒ³ã‚¯
1