Download as PDF, PPTX
Uploaded byAmazon Web Services Korea
천만 사용자를 위한 AWS 아키텍처 보안 모범 사례 (윤석찬, 테크에반젤리스트)
The document outlines various AWS services and security measures, detailing components like EC2, RDS, Route 53, CloudTrail, and IAM. It emphasizes multi-AZ deployments, automated processes, and integration of security protocols across different AWS resources. Additionally, it touches on automation and CI/CD pipelines for efficient infrastructure management.
More Related Content
![쿠키런: 킹덤 대규모 인프라 및 서버 운영 사례 공유 [데브시스터즈 - 레벨 200] - 발표자: 용찬호, R&D 엔지니어, 데브시스터즈 ...](https://cdn.slidesharecdn.com/ss_thumbnails/t3s3-221108102039-c0f48289-thumbnail.jpg?width=640&height=640&fit=bounds)
![[2017 Gaming on AWS] Gaming Data Lake on AWS](https://cdn.slidesharecdn.com/ss_thumbnails/gamingdatalakeonawslabguide-171030024332-thumbnail.jpg?width=640&height=640&fit=bounds)
![[2017 Gaming on AWS] GameLift를 통한 실전 DevOps: 세션형 멀티플레이어 게임의 구현부터 운영까지 Step by...](https://cdn.slidesharecdn.com/ss_thumbnails/gamingonawsdevopsonawsecsv072-171030024136-thumbnail.jpg?width=640&height=640&fit=bounds)
![[2017 Gaming on AWS] Serverless로 게임 서비스 구현하기](https://cdn.slidesharecdn.com/ss_thumbnails/gamingonawsserverlessholprint1-171030024709-thumbnail.jpg?width=640&height=640&fit=bounds)
![[2017 Gaming on AWS] 도커 컨테이너 배포 자동화 실습 (롤링 및 Blue/Green 배포)](https://cdn.slidesharecdn.com/ss_thumbnails/gameliftgomokholformat1-171030024539-thumbnail.jpg?width=640&height=640&fit=bounds)
![[2017 AWS Startup Day] 스타트업이 인공지능을 만날 때 : 딥러닝 활용사례와 아키텍쳐](https://cdn.slidesharecdn.com/ss_thumbnails/20171102awsstartupday2017-with-171102040932-thumbnail.jpg?width=640&height=640&fit=bounds)
![[2017 AWS Startup Day] VC가 바라보는 스타트업의 기술과 개발역량](https://cdn.slidesharecdn.com/ss_thumbnails/random-171103063627-thumbnail.jpg?width=640&height=640&fit=bounds)
Similar to 천만 사용자를 위한 AWS 아키텍처 보안 모범 사례 (윤석찬, 테크에반젤리스트)
![[AWS Container Service] Getting Started with Cloud Map, App Mesh and Firecracker](https://cdn.slidesharecdn.com/ss_thumbnails/200gettingstartedwithcloudmapappmeshandfirecraker-190326085953-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T1S01] Gen AI를 위한 Amazon Aurora 활용 사례 방법](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s01genaiamazonaurora-240702042912-516e67f4-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T1S06] Neptune Analytics with Vector Similarity Search](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s06neptuneanalyticsvectorsilimliaritysearch-240702042912-94c41309-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T1S03] Amazon DynamoDB design puzzlers](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s03amazondynamodbdesignpuzzlers-240702042912-ad6df881-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T1S04] Aurora PostgreSQL performance monitoring and troubleshooting by use...](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s04aurorapostgresqlperformancemonitoringandtroubleshooting-240702042912-5df626e3-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T1S07] AWS S3 - 클라우드 환경에서 데이터베이스 보호하기](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s07-240702042911-cb134cd6-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T1S05] Aurora 혼합 구성 아키텍처를 사용하여 예상치 못한 트래픽 급증 대응하기](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s05aurora-240702042911-c7f3f22d-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T1S02] Aurora Limitless Database Introduction](https://cdn.slidesharecdn.com/ss_thumbnails/d3t1s02auroralimitlessdatabaseintroduction-240702042911-cb5552b7-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T2S01] Amazon Aurora MySQL 메이저 버전 업그레이드 및 Amazon B/G Deployments 실습](https://cdn.slidesharecdn.com/ss_thumbnails/d3t2s01amazonaurorabluegreendeployment-240702042226-3ae36566-thumbnail.jpg?width=640&height=640&fit=bounds)
![[D3T2S03] Data&AI Roadshow 2024 - Amazon DocumentDB 실습](https://cdn.slidesharecdn.com/ss_thumbnails/d3t2s03documentdbhandson-240702042224-047bbc2c-thumbnail.jpg?width=640&height=640&fit=bounds)
![[Keynote] 슬기로운 AWS 데이터베이스 선택하기 - 발표자: 강민석, Korea Database SA Manager, WWSO, A...](https://cdn.slidesharecdn.com/ss_thumbnails/d3s01aws-230704014400-3eeae447-thumbnail.jpg?width=640&height=640&fit=bounds)
![Getting Started with Apache Spark: Big Data Made Simple [Free Meetup]](https://cdn.slidesharecdn.com/ss_thumbnails/apachesparkgettingstarted-260203175547-8361bcc3-thumbnail.jpg?width=640&height=640&fit=bounds)
천만 사용자를 위한 AWS 아키텍처 보안 모범 사례 (윤석찬, 테크에반젤리스트)
- 1. © 2016, AmazonWeb Services, Inc. or its Affiliates. All rights reserved.
- 2.
- 5.
- 7. AWS CLOUDTRAIL AMAZON INSPECTOR AMAZON VPC AWS WAF AWSIAM AWS KEY MANAGEMENT SERVICE SERVER-SIDE ENCRYPTION ENCRYPTION SDK
- 8.
- 9.
- 10.
- 11. Amazon Route 53 AWS Identity& Access Management MFA token Developers Network Team User
- 20.
- 26.
- 28.
- 29.
- 30. Amazon Route 53 RDS DBinstance § § § §
- 31. Amazon CloudWatch ü ü Amazon Route 53 RDSDB instance
- 33. AWS CloudTrail ü ü ü Amazon Route 53 RDSDB instance
- 35.
- 36. Amazon Route 53 Web instance RDS DBinstance active (Multi-AZ) Availability Zone RDS DB instance standby (Multi-AZ) Elastic Load Balancing Availability Zone Web instance § § § §
- 37. Web instance RDS DB instance active(Multi-AZ) Availability Zone RDS DB instance standby (Multi-AZ) Elastic Load Balancing Availability Zone Web instance SSL Amazon Certificate Manager Service ü ü ü ü Amazon Route 53
- 41. Web instance RDS DB instance active(Multi-AZ) Availability Zone RDS DB instance standby (Multi-AZ) Elastic Load Balancing Availability Zone Web instance Amazon Route 53 1. EC2 2. RDS
- 42. Web instance RDS DB instance active(Multi-AZ) Availability Zone RDS DB instance standby (Multi-AZ) Elastic Load Balancing Availability Zone Web instance Amazon Route 53 AWS Key Management Service (KMS) ü ü AWS KMS Customer master keys Data key 1 S3 object EBS volume Redshift cluster Data key 2 Data key 3 Data key 4 Custom application
- 44.
- 45. WhatsCat™ LOL cats » Catphotos »
- 46. Amazon Route 53 Web instance RDS DBinstance active (Multi-AZ) Availability Zone Elastic Load Balancing Amazon S3 Amazon Cloudfront § § § § DynamoDBElastiCache
- 47.
- 49. Good Cats Bad Dogs AWS WAF Amazon CloudFront ElasticLoad Balancing Amazon Route 53 DynamoDB Application RDS ElastiCache
- 57.
- 59.
- 60. Availability Zone Amazon Route 53 Amazon S3 Amazon Cloudfront AvailabilityZone Elastic Load Balancer DynamoDB RDS DB Instance Read Replica Web Instance Web Instance Web Instance ElastiCache RDS DB Instance Read Replica Web Instance Web Instance Web Instance ElastiCacheRDS DB Instance Standby (Multi-AZ) RDS DB Instance Active (Multi-AZ)
- 61. Product Release App Code InfrastructureCode Security Code
- 62.
- 63.
- 64.
- 65.
- 66.
- 67. InstancePublic AMI Golden AMI Launch instance EC2 Configure instance Hardened instance BakeAMI Hardening and configuration User administration Operating system Running instances Launch AWS Config AWS Lambda Automate AMI baking Amazon Inspector Amazon Inspector Amazon Inspector Decommission
- 68.
- 69. AWS Trusted Advisor- Security
- 70. AWS Trusted Advisor- Security
- 71. WhatsCat™ Cats > 1million
- 72.
- 74. Amazon CloudFront Amazon CloudFront Elastic Load Balancer DynamoDB Application Amazon RDS ElasticLoad Balancer DynamoDB Application Amazon RDS Elastic Load Balancer DynamoDB Application Amazon RDS
- 76.