[B! IAM] asa_ca3ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

asa_ca3 id:asa_ca3

IAMã«é–¢ã™ã‚‹asa_ca3ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (11)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã€ŒGitHub Actions Ã— AWSã€ã®ãƒˆãƒ¬ãƒ¼ã‚µãƒ“ãƒªãƒ†ã‚£å‘ä¸Šå§”å“¡ä¼š
GitHub Actionsã‹ã‚‰AWSã‚’æ“ä½œã§ãã‚‹ã¨ä¾¿åˆ©ã§ã™ã€‚OIDCï¼ˆOpenID Connectï¼‰ã‚’ä½¿ãˆã°ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã‚‚ä¸è¦ã§ã€ã‚»ã‚ãƒ¥ã‚¢ã«é‹ç”¨ã§ãã¾ã™ã€‚ã—ã‹ã—è¤‡æ•°ã‚·ã‚¹ãƒ†ãƒ ã«ã¾ãŸãŒã‚‹ç‰¹æ€§ä¸Šã€ãƒˆãƒ©ãƒ–ãƒ«ã‚·ãƒ¥ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã¯é¢å€’ã§ã™ã€‚ãã“ã§æœ¬è¨˜äº‹ã§ã¯ãƒˆãƒ¬ãƒ¼ã‚µãƒ“ãƒªãƒ†ã‚£ã‚’å‘ä¸Šã•ã›ã€ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã—ã‚„ã™ãã™ã‚‹æ‰‹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ãƒˆãƒ¬ãƒ¼ã‚µãƒ“ãƒªãƒ†ã‚£ãŒå‘ä¸Šã™ã‚Œã°ã€é‹ç”¨ã¯ã‚‚ã£ã¨æ¥½ã«ãªã‚Šã¾ã™ã€‚ GitHub Actionsã¨AWSã¯èµ¤ã®ä»–äºº å½“ãŸã‚Šå‰ã§ã™ãŒã€GitHub Actionsã¨AWSã¯ã¾ã£ãŸãç•°ãªã‚‹ã‚·ã‚¹ãƒ†ãƒ ã§ã™ã€‚ä½•ã‚’è¨€ã£ã¦ã„ã‚‹ã‚“ã ã¨ã„ã†æ„Ÿã˜ã§ã™ãŒã€ãƒˆãƒ¬ãƒ¼ã‚µãƒ“ãƒªãƒ†ã‚£ã®è¦³ç‚¹ã§ã¯é‡è¦ã§ã™ã€‚ãªãœãªã‚‰è¤‡æ•°ã®ã‚·ã‚¹ãƒ†ãƒ ã‚’æ‰±ã†ã¨ãã¯ã€ãƒˆãƒ¬ãƒ¼ã‚¹ã§ãã‚‹ã‚ˆã†è¨è¨ˆã—ãªã„ã¨ãƒˆãƒ¬ãƒ¼ã‚µãƒ“ãƒªãƒ†ã‚£ã¯ç”Ÿã¾ã‚Œãªã„ã‹ã‚‰ã§ã™ã€‚ GitHub Actionsã‚„AWSã«é™ã‚‰ãšã€æ™®é€šã¯ä»–æ‰€æ§˜ã®ã‚·ã‚¹ãƒ†ãƒ ãªã©çŸ¥ã£ãŸã“ã£ã¡ã‚ƒã‚ã‚Šã¾ã›ã‚“ã€‚ã“ã®ãŠäº’ã„ã«çŸ¥ã‚‰ã‚“ã·ã‚Šã‚’
asa_ca3 2023/03/11
aws

github

IAM
ãƒªãƒ³ã‚¯
cdk-nagã‚’ä½¿ç”¨ã—ãŸAWS CDKã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ã€€ï½žåŸºæœ¬ç·¨ï½ž - NRIãƒãƒƒãƒˆã‚³ãƒ Blog
ã“ã‚“ã«ã¡ã¯ã€ä¸Šé‡Žã§ã™ã€‚ Infrastructure as Code (IaC) ã€ã¿ãªã•ã‚“æ¥½ã—ã‚“ã§ãŠã‚Šã¾ã™ã§ã—ã‚‡ã†ã‹ã€‚å‰ã‹ã‚‰æ°—ã«ãªã£ã¦ã„ãŸcdk-nagã‚’è©¦ã—ã¦ã¿ãŸã®ã§ã€ãã®ç´¹ä»‹ã¨ãªã‚Šã¾ã™ã€‚ cdk-nagã¨ã¯ AWS Cloud Development Kit (AWS CDK) ã§ä½œæˆã™ã‚‹å„ConstructãŒã€ä¸Žãˆã‚‰ã‚ŒãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ»ã‚³ãƒ³ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹ãƒ«ãƒ¼ãƒ«ç¾¤ã«æº–æ‹ ã—ã¦ã„ã‚‹ã‹ã©ã†ã‹æ¤œè¨¼ã—ã¦ãã‚Œã‚‹ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚CloudFormationãƒ†ãƒ³ãƒ—ãƒ¬ãƒ¼ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒã‚§ãƒƒã‚¯ãƒ„ãƒ¼ãƒ«ã§ã‚ã‚‹ã€cfn-nagã«å½±éŸ¿ã‚’å—ã‘ä½œæˆã•ã‚Œã¦ã„ã¾ã™ã€‚ç¾æ™‚ç‚¹ã§ã¯ä»¥ä¸‹ã®ãƒ«ãƒ¼ãƒ«ç¾¤ãŒæä¾›ã•ã‚Œã¦ã„ã¾ã™ã€‚ AWS Solutions HIPAA Security NIST 800-53 rev 4 NIST 800-53 rev 5 PCI DSS 3.2.1 GitHubãƒªãƒã‚¸ãƒˆãƒªã§å…¬é–‹ã•ã‚Œã¦ãŠã‚Šã€AWSå…¬å¼ãƒ–ãƒã‚°ã§ã‚‚
asa_ca3 2023/01/06
aws

IAM

åŸºæœ¬

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

VPC
ãƒªãƒ³ã‚¯
GitHub Actionsã§AWSã®æ°¸ç¶šçš„ãªã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã‚’æ¸¡ã™ã“ã¨ãªãIAM RoleãŒåˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã‚ˆã†ã§ã™ | DevelopersIO
GitHub Actionsã§AWSã®æ°¸ç¶šçš„ãªã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã‚’æ¸¡ã™ã“ã¨ãªãIAM RoleãŒåˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã‚ˆã†ã§ã™ ã‚¢ã‚¯ã‚»ã‚¹ã‚ãƒ¼ã€æ’²æ»…ã—ã¦ã¾ã™ã‹ï¼Ÿ ãƒŠã‚«ãƒ¤ãƒžã§ã™ã€‚ ç›®é»’æ–¹é¢ã‚ˆã‚Šã€ä»¥ä¸‹ã®ã‚ˆã†ãªç¦éŸ³ãŒèžã“ãˆã¦ãã¾ã—ãŸã€‚ ä½•ãŒã©ã®ãã‚‰ã„æœ€é«˜ã‹ã¨è¨€ã„ã¾ã™ã¨ï¼ GitHub Actions ã« AWS ã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ã‚’ç›´æŽ¥æ¸¡ã•ãšã« IAM ãƒãƒ¼ãƒ«ãŒä½¿ãˆã‚‹ã‚ˆã†ã«ãªã‚‹ã“ã¨ãŒã¾ãšæœ€é«˜ã§ï¼ ã‚¯ãƒ¬ãƒ‡ãƒ³ã‚·ãƒ£ãƒ«ç›´æ¸¡ã—ã‚’å›žé¿ã™ã‚‹ãŸã‚ã ã‘ã® Self-hosted runner ãŒå¿…è¦ãªããªã‚‹ã¨ã“ã‚ã‚‚æœ€é«˜ã§ã™ï¼ï¼âœ¨âœ¨âœ¨ https://t.co/IUQmfzkIB0 â€” Tori Hara (@toricls) September 15, 2021 å…ƒãƒã‚¿ã¯ã“ã¡ã‚‰ã€‚ Ok I blogged about it. That's how excited I am. 1. Deploy this CFN templ
asa_ca3 2021/09/16
ç†±ã„

aws

github

IAM
ãƒªãƒ³ã‚¯
IAMã‚’ã‚³ãƒ¼ãƒ‰ç®¡ç†ã™ã‚‹Miamã‚’ä½¿ã£ã¦ã¿ãŸ | DevelopersIO
Miamã¨ã¯ï¼Ÿ Miamã¨ã¯ã€AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®IAMæƒ…å ±ã‚’ã‚³ãƒ¼ãƒ‰ç®¡ç†å‡ºæ¥ã‚‹ãƒ„ãƒ¼ãƒ«ã§ã™ã€‚ ä½¿ã„å‹æ‰‹ã¯Route53ã¨ã»ã¼åŒæ§˜ãªã®ã§ã€AWSç’°å¢ƒã‚’ã‚³ãƒ¼ãƒ‰ç®¡ç†ã—ã¦ã„ã‚‹ã¨é‡å®å‡ºæ¥ã‚‹ã¨æ€ã„ã¾ã™ã€‚ GitHub Maim ä½¿ã„æ–¹ Miamã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« % gem build miam.gemspec % gem install miam-0.2.4.beta8.gem % gem list miam *** LOCAL GEMS *** miam (0.2.4.beta8) â€»æœ¬è¨˜äº‹åŸ·ç†æ™‚ã€gem install miamã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã‚’è¡Œã£ãŸæ‰€å°‘ã—å¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã€ ãã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ä½œæ¥ã‚’å®Ÿæ–½ã™ã‚‹ã¨ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒãƒªã‚·ãƒ¼ã®ã‚¨ãƒ©ãƒ¼ãŒè¡¨ç¤ºã•ã‚Œã¾ã—ãŸã€‚ ãã®ãŸã‚ã€ä»Šå›žã¯0.2.4 beta8ã‚’ä½¿ç”¨ã—ã¦ãŠã‚Šã¾ã™ã€‚ Miamã‚ªãƒ—ã‚·ãƒ§ãƒ³ Usage: miam [options] -p, --
asa_ca3 2021/08/04
IAM

aws

cli

JSON

format

gem
ãƒªãƒ³ã‚¯
Swith Roleã§è¤‡æ•°ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆé–“ã‚’åˆ‡æ›¿ãˆã‚‹ - Qiita
é€šå¸¸ã®è¤‡æ•°ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ç®¡ç†æ–¹æ³• èª²é¡Œ åŒä¸€ã®ã‚·ã‚¹ãƒ†ãƒ ã®ãƒ©ãƒ³ãƒ‰ã‚¹ã‚±ãƒ¼ãƒ—ã‚’è¤‡æ•°ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã«åˆ†ã‘ã¦ã„ã‚‹ã‚ˆã†ãªå ´åˆã€IAMãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’åˆ¥ã€…ã«ç™ºè¡Œã—ã¦ãƒã‚°ã‚¤ãƒ³ã€ãƒã‚°ã‚¢ã‚¦ãƒˆã—ã¦ç’°å¢ƒã‚’åˆ‡ã‚Šæ›¿ãˆã‚‹ã®ã¯é¢å€’ã§ã™ã€‚ Switch Roleæ–¹å¼ ã€ŒIAMãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯1ã¤ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã ã‘ã§ç™ºè¡Œã€ã—ã€ã‚¹ã‚¤ãƒƒãƒå…ˆã§ã¯ã€Œä¿¡é ¼ã™ã‚‹AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ç‰¹å®šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ä»˜ä¸Žã—ã¦ã‚ˆã„IAM Roleã‚’ç™ºè¡Œã€ã™ã‚‹ã“ã¨ã§ã€ä¸€ã¤ã®å…¥ã‚Šå£ã‹ã‚‰è¤‡æ•°ã®ç’°å¢ƒã«åˆ‡ã‚Šæ›¿ãˆã¦æ“ä½œãŒå¯èƒ½ã§ã™ã€‚ ã‚„ã£ã¦ã¿ã‚ˆã† Let's do it! ãã‚Œã§ã¯ä¸Šè¨˜ã®ã€ŒSwitch Roleæ–¹å¼ã€ã®å›³ã«ã‚ã‚‹æ§‹æˆã‚’ç”¨ã„ã¦ã€å®Ÿéš›ã«è¨å®šã—ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ 1. ã‚¹ã‚¤ãƒƒãƒå…ˆã§ãƒãƒ¼ãƒ«ã‚’ä½œæˆã™ã‚‹ ã¾ãšã¯ã‚¹ã‚¤ãƒƒãƒå…ˆã§ã‚ã‚‹æœ¬ç•ªã‚¢ã‚«ã‚¦ãƒ³ãƒˆå´ã§ã€ã‚¹ã‚¤ãƒƒãƒå…ƒã«æ¨©é™ç§»è²ã™ã‚‹ãƒãƒ¼ãƒ«ã‚’ä½œæˆã—ã¾ã™ã€‚ IAMç”»é¢ã«ç§»å‹•ã—ã€å·¦ã®ãƒãƒ¼ãƒ«ã®ãƒšã‚¤ãƒ³ã‹ã‚‰ãƒãƒ¼ãƒ«ã®ä½œæˆã‚’æŠ¼ä¸‹ã—ã¦é€²ã‚ã¦ã„ãã¾ã™ã€‚ 1-1.
asa_ca3 2020/08/24
aws

ãƒã‚°ã‚¤ãƒ³

iam
ãƒªãƒ³ã‚¯
when calling the CreateStack operation: Requires capabilities : [CAPABILITY_IAM]ã‚¨ãƒ©ãƒ¼ã®å¯¾å¿œ - websandbag ãƒ–ãƒã‚°
lambdaã®ä½¿ã„æ–¹ã‚’ç¿’å¾—ã™ã‚‹ãŸã‚ã«ã€lambdaã®ãƒãƒ³ã‚ºã‚ªãƒ³è³‡æ–™ã‚’å…ƒã«å‹‰å¼·ã—ã¦ã„ã¾ã™ã€‚ CloudFormationã®å‹‰å¼·ã‚‚å…¼ãã¦ã„ã‚‹ã®ã§ã€æ§‹ç¯‰ã®éƒ¨åˆ†ã‚‚å…¼ãã¦å®Ÿæ–½ã—ã¦ã„ã‚‹ã®ã§ã™ãŒé¡Œè¨˜ã®ã‚¨ãƒ©ãƒ¼ãŒå‡ºã¦ã—ã¾ã„ã¾ã—ãŸã€‚ è§£æ±ºã—ãŸã®ã§ãã®æ™‚ã®å†…å®¹ã‚’è¨˜éŒ²ã—ã¾ã™ã€‚ ã“ã®è¨˜äº‹ã§å¾—ã‚‰ã‚Œã‚‹äº‹ CloudFormationã§ã€ŒAWS::IAM::Roleã€Typeã®ãƒªã‚½ãƒ¼ã‚¹ã‚’è¿½åŠ ã—ãŸæ™‚ã«ç™ºç”Ÿã™ã‚‹ã€é¡Œè¨˜ã®ã‚¨ãƒ©ãƒ¼ã®è§£æ±ºæ–¹æ³•ãŒã‚ã‹ã‚‹ã€‚ ã‚¤ãƒ³ãƒˆãƒãƒ€ã‚¯ã‚·ãƒ§ãƒ³ å‚è€ƒè³‡æ–™ã€ãŠã‚ˆã³ã€æ§‹æˆ ä¸‹è¨˜ã®ã‚¹ãƒ©ã‚¤ãƒ‰ã‚’å‚è€ƒã«å®Ÿè£…ã—ã¦ã„ã¾ã™ã€‚ æ§‹æˆã«ã¤ã„ã¦ã‚‚æ›¸ã„ã¦ã„ã‚‹å†…å®¹ã¨åŒã˜ã«ã—ã¾ã™ã€‚ AWS Lambda ãƒãƒ³ã‚ºã‚ªãƒ³ 2-Tier ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã§æœªæ¥ã¸ from Amazon Web Services Japan www.slideshare.net ä»Šå›žä½œæˆã—ãŸã‚½ãƒ¼ã‚¹ã«ã¤ã„ã¦ github.com å¯¾è±¡ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯v0.1ã§ã™ã€‚
asa_ca3 2018/08/15
aws

IAM
ãƒªãƒ³ã‚¯
IAMãƒãƒ¼ãƒ«å¾¹åº•ç†è§£ ã€œ AssumeRoleã®æ£ä½“ | DevelopersIO
ã•ã¦ã€çš†æ§˜ã¯IAMã«ã©ã®ã‚ˆã†ãªã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’ãŠæŒã¡ã§ã—ã‚‡ã†ã‹ã€‚ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã«é–¢ã‚ã‚‹è¤‡æ•°äººã§1ã¤ã®AWSã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’æ‰±ã†æ™‚ã€å„ãƒ¡ãƒ³ãƒãƒ¼ã«é…å¸ƒã™ã‚‹ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ä½œã‚Œã‚‹æ©Ÿèƒ½ã€‚ãã—ã¦ã€ãã®æ°—ã«ãªã‚Œã°ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã‚’ã‚°ãƒ«ãƒ¼ãƒ—åˆ†ã‘ã—ã€æ¨©é™ã‚’åŽ³å¯†ã«ç®¡ç†ã§ãã‚‹æ©Ÿèƒ½ã€‚ã¨ã„ã£ãŸã¨ã“ã‚ã‹ã¨æ€ã„ã¾ã™ã€‚ ä¸Šè¨˜ã®ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã§å‡ºã¦ããŸä¸»ãªã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ï¼ˆè¦ç´ ï¼‰ã¯Userã¨Groupã§ã™ãã€‚IAMã®Management Consoleã§è¦‹ã¦ã¿ã‚‹ã¨ã€IAMã¯ã“ã‚Œã‚‰ã®ä»–ã«Roleã‚„Identity Providerã¨ã„ã†ã‚¨ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã«ã‚ˆã£ã¦æ§‹æˆã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã ã€ã¨ã„ã†ã“ã¨ãŒã‚ã‹ã‚Šã¾ã™ã€‚ä»Šæ—¥ã¯Roleã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã‚’å½“ã¦ã¦ã€ãã®å®Ÿæ…‹ã‚’è©³ã—ãç†è§£ã—ã¾ã™ã€‚ IAM Role IAM Roleã‚’ä½¿ã†ã¨ã€å…ˆã«æŒ™ã’ãŸIAMã®ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã®ä»–ã«ã€ä¸‹è¨˜ã®ã‚ˆã†ãªã“ã¨ãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ IAM roles for EC2 instancesã‚’ä½¿ã£ã¦ã¿
asa_ca3 2016/09/08
IAM

aws

EC2
ãƒªãƒ³ã‚¯
CloudFrontçµŒç”±ã§ç‹¬è‡ªSSLã§S3ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ Â» ç¾¤é¦¬çœŒé«˜å´Žå¸‚ã®WordPressãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸åˆ¶ä½œä¼šç¤¾ | Kirabaï¼ˆã‚ãƒ©ãƒï¼‰
æŠ•ç¨¿æ—¥: 2016/02/01 ä½œæˆè€…: Horiguchi ã‚«ãƒ†ã‚´ãƒª: AWS,CloudFront,S3,SSL,ãƒ–ãƒã‚° Amazon S3ã¯ã¨ã¦ã‚‚ä¾¿åˆ©ãªã‚¯ãƒ©ã‚¦ãƒ‰ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã§ã™ãŒã€æ®‹å¿µãªãŒã‚‰S3ã¯ç‹¬è‡ªSSLã«å¯¾å¿œã—ã¦ã„ã¾ã›ã‚“ã€‚ ãã“ã§ä»Šå›žã¯S3ã®ãƒã‚±ãƒƒãƒˆã«CloudFrontçµŒç”±ã§ç‹¬è‡ªSSLã‚’è¨å®šã™ã‚‹æ–¹æ³•ã‚’ã”ç´¹ä»‹ã—ã¾ã™ã€‚ AWS CLIã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ã¾ãšã¯AWSã«SSLã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ãŸã‚ã€AWS CLIã‚’ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã‚’ä½¿ã£ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ã€‚ pip ã‚’ä½¿ç”¨ã—ã¦AWS CLIã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã„ãã¾ã™ã€‚ curl "https://bootstrap.pypa.io/get-pip.py" -o "get-pip.py" python get-pip.py pip install awscli IAMãƒ¦ãƒ¼ã‚¶ã®ä½œæˆã¨è¨å®š AWSã®ç®¡ç†ç”»é¢ã‹ã‚‰IAMã§ãƒ¦ãƒ¼ã‚¶ã®ä½œæˆã—ã¾ã™ã€‚ æ—¢å˜ã®IA
asa_ca3 2016/08/29
IAM

AWS

CloudFront

SSL

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
IAM JSON ãƒãƒªã‚·ãƒ¼è¦ç´ ã®ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ - AWS Identity and Access Management
JSON ãƒãƒªã‚·ãƒ¼ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯è¦ç´ ã§æ§‹æˆã•ã‚Œã¾ã™ã€‚è¦ç´ ã¯ã€ãƒãƒªã‚·ãƒ¼ã§ä½¿ç”¨ã™ã‚‹ä¸€èˆ¬çš„ãªé †ç•ªã§è¨˜è¼‰ã•ã‚Œã¦ã„ã¾ã™ã€‚è¦ç´ ã®é †ç•ªã¯é‡è¦ã§ã¯ã‚ã‚Šã¾ã›ã‚“ (ãŸã¨ãˆã°ã€Resource è¦ç´ ã‚’ Action è¦ç´ ã®å‰ã«ã‚‚ã£ã¦ãã‚‹ã“ã¨ãªã©ãŒå¯èƒ½ã§ã™)ã€‚ãƒãƒªã‚·ãƒ¼ã§ã€ã‚ã‚‰ã‚†ã‚‹ Condition è¦ç´ ã‚‚ç‰¹å®šã™ã‚‹å¿…è¦ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚JSON ãƒãƒªã‚·ãƒ¼ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®å…¨ä½“æ§‹é€ ã¨ç›®çš„ã«ã¤ã„ã¦ã¯ã€ŒJSON ãƒãƒªã‚·ãƒ¼æ¦‚è¦ã€ã‚’ã”è¦§ãã ã•ã„ã€‚ ä¸€éƒ¨ã® JSON ãƒãƒªã‚·ãƒ¼ã®è¦ç´ ã¯ç›¸äº’æŽ’ä»–çš„ã§ã™ã€‚ã¤ã¾ã‚Šã€ä¸¡æ–¹ã‚’ä½¿ç”¨ã™ã‚‹ãƒãƒªã‚·ãƒ¼ã‚’ä½œæˆã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“ã€‚ãŸã¨ãˆã°ã€Action ã¨ NotAction ã‚’åŒã˜ãƒãƒªã‚·ãƒ¼ã‚¹ãƒ†ãƒ¼ãƒˆãƒ¡ãƒ³ãƒˆã§ä½¿ç”¨ã™ã‚‹ã“ã¨ã¯ã§ãã¾ã›ã‚“ã€‚ç›¸äº’æŽ’ä»–çš„ãªä»–ã®ãƒšã‚¢ã«ã¯ Principal/NotPrincipal ã‚„ Resource/NotResource ãŒã‚ã‚Šã¾ã™ã€‚ ãƒãƒªã‚·ãƒ¼ã«å–ã‚Šå…¥ã‚Œã‚‹è©³ç´°ã¯å„ã‚µãƒ¼ãƒ“ã‚¹ã«ã‚ˆã£ã¦ç•°
asa_ca3 2016/08/25
IAM

aws
ãƒªãƒ³ã‚¯
https://policysim.aws.amazon.com/home/index.jsp?
asa_ca3 2016/08/24
iam

tool

aws
ãƒªãƒ³ã‚¯
AWS Policy Generator
The AWS Policy Generator is a tool that enables you to create policies that control access to Amazon Web ServicesÂ (AWS) products and resources. For more information about creating policies, see key concepts in Using AWS Identity and Access Management. Here are sample policies. Step 1: Select Policy Type A Policy is a container for permissions. The different types of policies you can create are an
asa_ca3 2016/08/24
AWS

s3

policy

IAM

tool
ãƒªãƒ³ã‚¯
1