CloudFrontã®ã‚ªãƒªã‚¸ãƒ³ã‚’EC2ã«ã—ã¦HTTPS通信を強制ã™ã‚‹æ§‹æˆã«ã¤ã„㦠| DevelopersIOã—ã°ãŸã§ã™ã€‚ 個人的ã«ã¯ã‚ã¾ã‚ŠãŠå‹§ã‚ã—ãªã„ã®ã§ã™ãŒã€å°è¦æ¨¡ãªç’°å¢ƒã§ã‚³ã‚¹ãƒˆã‚’é‡è¦–ã™ã‚‹å ´åˆã«EC2インスタンスå˜ä½“ã‚’CloudFrontã®ã‚ªãƒªã‚¸ãƒ³ã«ã™ã‚‹ã“ã¨ãŒã‚ã‚‹ã¨æ€ã„ã¾ã™ã€‚ ã¾ãŸã€ã‚»ã‚ュリティè¦ä»¶ã«ã‚ˆã‚Šã‚¨ãƒ³ãƒ‰ãƒ„ーエンドã§é€šä¿¡ã®æš—å·åŒ–ãŒå¿…é ˆã¨ã„ã†å ´åˆã‚‚ã‚ã‚‹ã§ã—ょã†ã€‚ ã“ã®æ§˜ãªå ´åˆã–ã£ãり下図ã®æ§‹æˆã«ãªã‚‹ã¨æ€ã„ã¾ã™ã€‚ エンドツーエンドã§æš—å·åŒ–通信を行ã†ãŸã‚EC2インスタンスã«ã‚‚SSL証明書を導入ã—CloudFront⇔EC2é–“ã®é€šä¿¡ã‚’HTTPSã«ã—ã¦ã‚„ã‚Šã¾ã™ã€‚ 環境ã«ã‚ˆã£ã¦ã¯AWS WAFã‚’å°Žå…¥ã—ãŸã‚Šé™çš„コンテンツをS3ãƒã‚±ãƒƒãƒˆã«é…ç½®ã™ã‚‹ã“ã¨ã‚‚ã‚ã‚‹ã§ã—ょã†ã€‚ 本記事ã§ã¯ã“ã®æ§‹æˆã®ã†ã¡CloudFrontã¨EC2ã‚’ä¸å¿ƒã«ã—ãŸæ§‹ç¯‰æ–¹æ³•ã«ã¤ã„ã¦è§£èª¬ã—ã¦ã„ãã¾ã™ã€‚ CloudFrontã¨ã‚«ã‚¹ã‚¿ãƒ オリジン間ã®é€šä¿¡ã§HTTPSã‚’å¿…é ˆã«ã™ã‚‹ CloudFrontã‹ã‚‰EC2オリジン(カスタムオリジン)ã®é–“ã§HT
Values that you specify when you create or update a distribution - Amazon CloudFront
Loggol(ãƒã‚´ãƒ«): Webアクセスãƒã‚°ã®ã‚»ã‚ュリティ分æž
GitHub - kawakatz/passthecdn: passthecdn will remove subdomains which are behind CDN
GitHub - nsonaniya2010/SubDomainizer: A tool to find subdomains and interesting things hidden inside, external Javascript files of page, folder, and Github.
{{#tags}}- {{label}}
{{/tags}}