本文の内容は、2024年11月25日に Alejandro Villanueva が投稿したブログ(https://sysdig.com/blog/26-aws-security-best-practices/)を元に日本語に翻訳・再構成した内容となっております。 セキュリティは、 AWS Foundational セキュリティベストプラクティスの基本的な柱です。セキュリティリスクを最小限に抑え、環境を保護するには、サービス別にまとめられた AWS セキュリティベストプラクティスに従うことが不可欠です。この構造化されたアプローチは、潜在的な脆弱性に積極的に対処し、堅牢で安全なクラウドアーキテクチャーを維持するのに役立ちます。 AWS IAM（1） IAMポリシーでは、フルの ” * ” 管理者権限を許可すべきではない （２） IAMユーザーにはIAMポリシーを添付してはならない （３） I
AWS 認定 ソリューションアーキテクト – プロフェッショナル(AWS Certified Solutions Architect – Professional)の学習方法 - NRIネットコムBlog
小西秀和です。 この記事は「AWS認定全冠を維持し続ける理由と全取得までの学習方法・資格の難易度まとめ」で説明した学習方法を「AWS 認定 ソリューションアーキテクト – プロフェッショナル(AWS Certified Solutions Architect – Professional)」に特化した形で紹介するものです。 重複する内容については省略していますので、併せて元記事も御覧ください。 また、現在投稿済の各AWS認定に特化した記事へのリンクを以下に掲載しましたので興味のあるAWS認定があれば読んでみてください。 ALL SAP DOP SCS ANS MLS SAA DVA SOA DEA MLA AIF CLF 「AWS 認定 ソリューションアーキテクト – プロフェッショナル」とは 「AWS 認定 ソリューションアーキテクト – プロフェッショナル(AWS Certified
GitHub - modelcontextprotocol/servers: Model Context Protocol Servers
Official integrations are maintained by companies building production ready MCP servers for their platforms. 21st.dev Magic - Create crafted UI components inspired by the best 21st.dev design engineers. 2slides - An MCP server that provides tools to convert content into slides/PPT/presentation or generate slides/PPT/presentation with user intention. ActionKit by Paragon - Connect to 130+ SaaS inte
AWS LambdaサポートのコンテナイメージとAWS CDKを利用したマイクロサービス開発 | Amazon Web Services
Amazon Web Services ブログ AWS LambdaサポートのコンテナイメージとAWS CDKを利用したマイクロサービス開発 AWS Cloud Development Kit (AWS CDK)はオープンソースソフトウェア開発フレームワークで、使い慣れたプログラミング言語でクラウドアプリケーションリソースを定義する事が可能です。AWS CDKはローカル環境でのコンテナイメージのビルドが可能で、コンテナイメージの Amazon Elastic Container Registry (Amazon ECR)へのデプロイや、コンテナイメージをLambda関数として実行する設定も可能です。AWS CDKは少しの学習だけでAWSへのオンボーディングを加速できます。AWS CDKは既存のスキルやツールの利用が可能であり、クラウドインフラストラクチャの構築タスクに活用できます。 AWS
AWS Fargate Enables Faster Container Startup using Seekable OCI | Amazon Web Services
AWS News Blog AWS Fargate Enables Faster Container Startup using Seekable OCI While developing with containers is becoming an increasingly popular way for deploying and scaling applications, there are still areas where improvements can be made. One of the main issues with scaling containerized applications is the long startup time, especially during scale up when newer instances need to be added.
Slack Agents & AssistantsとMCPを組み合わせてNotionデータベースを操作するAIエージェントを作ってみた - ジパンク Tech Blog
こんにちは、株式会社ジパンクCTOの太田です！ 社内のタスク管理にNotionを使っている場合、Slackから直接タスクの作成やステータス変更ができると便利ですよね。 昨年末頃からSlackで「Agents & Assistants」という新機能が利用できるようになり、対話的なUIでいろいろな操作を実現しやすくなりました。 そこで今回は、Slack Agents & AssistantsとMCPを組み合わせた、Notionデータベースの操作をしてくれるAIエージェントの構築方法をハンズオン形式で紹介します。 最終的にAWS Lambda Functionにデプロイし、実際の社内アプリケーションとして動かすところまでカバーするので、AIエージェント活用に興味がある方はぜひ参考にしてみてください！ この記事が、SlackをインターフェイスとしたAIエージェントとの協働の第一歩となれば幸いです。
Deep Dive on AWS App Runner VPC Networking | Amazon Web Services
Containers Deep Dive on AWS App Runner VPC Networking AWS App Runner, introduced in 2021, is a fully managed service for running web applications and API servers. App Runner greatly simplifies the experience to build and run secure web server applications with little to no infrastructure in your account. You provide the source code or a container image, and App Runner will build and deploy your ap
Contents Introduction The Rust Code Cargo Lambda The Dockerfile Configurable Dockerfile Bonus Tips Final Words Introduction Rust is a great language to consider when writing services for AWS Lambda, because of its extremely low start-up time, CPU usage and memory footprint. These are all important metrics to consider in serverless infrastructure and they translate to direct cost savings and better
IntroductionIn this article I describe a simple architecture for an early stage SAAS. As a solo founder, I report some choices made to launch Feelback, a small-scale SAAS for collecting users signals about any content. This article will cover the technical side of designing and running a simple SAAS. It will also include some details about coding and evolving the initial feature set ready at launc
Introducing AWS Lambda Managed Instances: Serverless simplicity with EC2 flexibility | Amazon Web Services
AWS News Blog Introducing AWS Lambda Managed Instances: Serverless simplicity with EC2 flexibility Today, we’re announcing AWS Lambda Managed Instances, a new capability you can use to run AWS Lambda functions on your Amazon Elastic Compute Cloud (Amazon EC2) compute while maintaining serverless operational simplicity. This enhancement addresses a key customer need: accessing specialized compute o
lambrollでLambda関数をデプロイする
はじめに 最近、fujiwaraさん作のlambrollというAWS Lambda専用のGo製デプロイツールを使ってみたので備忘も兼ねて記事にまとめたいと思います（認識の間違い等あればツッコミいただければと） lambroll is a minimal deployment tool for AWS Lambda. これが非常に便利で、Lambdaの作成、削除、デプロイ等が非常に簡単にできます。上がったLambda関数をローカルから簡単に呼び出すこともできるため開発も非常にしやすく、git管理も可能です。素晴らしいことにCircleCIのOrbも用意されているのでCircleCIで簡単にlambrollを使うことができます。では、早速最低限の使い方を説明していきます（今回は「見て理解する」スタイルで文字少なめで説明していきます） レポジトリ GitHub | fujiwara/lambro
Bringing Javascript to WebAssembly for Shopify Functions - Shopify
Bringing Javascript to WebAssembly for Shopify FunctionsWhile we’re working on getting our Shopify Functions infrastructure ready for the public beta, we thought we’d use this opportunity to shine some light on how we brought JavaScript to WebAssembly, how we made everything fit within our very tight Shopify Function constraints, and what our plans for the future look like. At Winter Editions 2023
Launching S3 Files, making S3 buckets accessible as file systems | Amazon Web Services
AWS News Blog Launching S3 Files, making S3 buckets accessible as file systems I’m excited to announce Amazon S3 Files, a new file system that seamlessly connects any AWS compute resource with Amazon Simple Storage Service (Amazon S3). More than a decade ago, as an AWS trainer, I spent countless hours explaining the fundamental differences between object storage and file systems. My favorite analo
The history and future roadmap of the AWS CloudFormation Registry | Amazon Web Services
AWS DevOps & Developer Productivity Blog The history and future roadmap of the AWS CloudFormation Registry AWS CloudFormation is an Infrastructure as Code (IaC) service that allows you to model your cloud resources in template files that can be authored or generated in a variety of languages. You can manage stacks that deploy those resources via the AWS Management Console, the AWS Command Line Int
Introducing Amazon CloudFront VPC origins: Enhanced security and streamlined operations for your applications | Amazon Web Services
AWS News Blog Introducing Amazon CloudFront VPC origins: Enhanced security and streamlined operations for your applications I’m happy to introduce the release of Amazon CloudFront Virtual Private Cloud (VPC) origins, a new feature that enables content delivery from applications hosted in private subnets within their Amazon Virtual Private Cloud (Amazon VPC). This makes it easy to secure web applic
Building serverless applications with Rust on AWS Lambda | Amazon Web Services
AWS Compute Blog Building serverless applications with Rust on AWS Lambda Today, AWS Lambda is promoting Rust support from Experimental to Generally Available. This means you can now use Rust to build business-critical serverless applications, backed by AWS Support and the Lambda availability SLA. Rust is a popular programming language due to its combination of high performance, memory safety, and
Remix on Cloudflare WorkersからCloudflare R2を使う | DevelopersIO
*2022年5月15日現在 Cloudflare R2 documentation · Cloudflare R2 docs Pricing · Cloudflare R2 docs R2 サービスの登録 R2は従量課金制となっているため事前に支払い情報の登録が必要です。とはいえ無料枠がかなり大きいので検証範囲の範囲では無料枠を超えることは少なそうです。 R2はダッシュボードからR2有料プランを購入することですぐに利用できるようになります。（購入といってもこの時点で料金はかかりません） R2バケットの作成 ダッシュボードから作成することもできますが、今回はCLIから作成します。 Wranglerがインストールされていない場合はインストールとアカウントの紐付けをあらかじめ行っておいてください。 Wrangler v2のインストールとアカウントの紐付け $ npm install -g wra
Monitor AWS resources created by Terraform in Amazon DevOps Guru using tfdevops | Amazon Web Services
AWS DevOps & Developer Productivity Blog Monitor AWS resources created by Terraform in Amazon DevOps Guru using tfdevops This post was written in collaboration with Kapil Thangavelu, CTO at Stacklet Amazon DevOps Guru is a machine learning (ML) powered service that helps developers and operators automatically detect anomalies and improve application availability. DevOps Guru utilizes machine learn
Disaster Recovery (DR) Architecture on AWS, Part III: Pilot Light and Warm Standby | Amazon Web Services
AWS Architecture Blog Disaster Recovery (DR) Architecture on AWS, Part III: Pilot Light and Warm Standby In this blog post, you will learn about two more active/passive strategies that enable your workload to recover from disaster events such as natural disasters, technical failures, or human actions. Previously, I introduced you to four strategies for disaster recovery (DR) on AWS. Then we explor
AWS Cloud Control API, a Uniform API to Access AWS & Third-Party Services | Amazon Web Services
AWS News Blog AWS Cloud Control API, a Uniform API to Access AWS & Third-Party Services Today, I am happy to announce the availability of AWS Cloud Control API a set of common application programming interfaces (APIs) that are designed to make it easy for developers to manage their AWS and third-party services. AWS delivers the broadest and deepest portfolio of cloud services. Builders leverage th
AWS Lambda standardizes billing for INIT Phase | Amazon Web Services
AWS Compute Blog AWS Lambda standardizes billing for INIT Phase Effective August 1, 2025, AWS will standardize billing for the initialization (INIT) phase across all AWS Lambda function configurations. This change specifically affects on-demand invocations of Lambda functions packaged as ZIP files that use managed runtimes, for which the INIT phase duration was previously unbilled. This update sta
AWS Application Composer Now Generally Available – Visually Build Serverless Applications Quickly | Amazon Web Services
AWS News Blog AWS Application Composer Now Generally Available – Visually Build Serverless Applications Quickly At AWS re:Invent 2022, we previewed AWS Application Composer, a visual builder for you to compose and configure serverless applications from AWS services backed by deployment-ready infrastructure as code (IaC). In the keynote, Dr. Werner Vogels, CTO of Amazon.com said: Developers that ne
New — Create Point-to-Point Integrations Between Event Producers and Consumers with Amazon EventBridge Pipes | Amazon Web Services
AWS News Blog New — Create Point-to-Point Integrations Between Event Producers and Consumers with Amazon EventBridge Pipes It is increasingly common to use multiple cloud services as building blocks to assemble a modern event-driven application. Using purpose-built services to accomplish a particular task ensures developers get the best capabilities for their use case. However, communication betwe
AWS News Blog New for App Runner – VPC Support With AWS App Runner, you can quickly deploy web applications and APIs at any scale. You can start with your source code or a container image, and App Runner will fully manage all infrastructure including servers, networking, and load balancing for your application. If you want, App Runner can also configure a deployment pipeline for you. Starting toda
Introducing AWS Lambda runtime management controls | Amazon Web Services
AWS Compute Blog Introducing AWS Lambda runtime management controls This blog post is written by Jonathan Tuliani, Principal Product Manager. Today, AWS Lambda is announcing runtime management controls which provide more visibility and control over when Lambda applies runtime updates to your functions. Lambda is also changing how it rolls out automatic runtime updates to your functions. Together,
Image from UnSplash I’ve led infrastructure at a startup for the past 4 years that has had to scale quickly. From the beginning I made some core decisions that the company has had to stick to, for better or worse, these past four years. This post will list some of the major decisions made and if I endorse them for your startup, or if I regret them and advise you to pick something else. AWS Link to
Introducing Amazon Bedrock AgentCore Gateway: Transforming enterprise AI agent tool development | Amazon Web Services
Artificial Intelligence Introducing Amazon Bedrock AgentCore Gateway: Transforming enterprise AI agent tool development To fulfill their tasks, AI Agents need access to various capabilities including tools, data stores, prompt templates, and other agents. As organizations scale their AI initiatives, they face an exponentially growing challenge of connecting each agent to multiple tools, creating a
blank-go: Go で動く AWS Lambda 関数に入門しよう - kakakakakku blog
AWS Lambda 関数を Go ランタイムで動かす Hello World レベルの初学者コンテンツを探していて，ドキュメントにも載っている blank-go プロジェクトがお手軽に使えて良かったので紹介したいと思う❗️初学者に教えるときに使えるぞ〜 ＼( 'ω')／ github.com ちなみに AWS Lambda に入門するための blank-xxx は Go 以外にも Node.js / Python / Java など多くある❗️ docs.aws.amazon.com blank-go 紹介 blank-go では AWS CLI を使って Go ランタイムで動く AWS Lambda 関数をデプロイできる．実装としては，Amazon SQS のイベント情報（実際に Amazon SQS キューと連携するのではなく event.json を渡す）や AWS Lambda
Better together: AWS SAM CLI and HashiCorp Terraform | Amazon Web Services
AWS Compute Blog Better together: AWS SAM CLI and HashiCorp Terraform This post is written by Suresh Poopandi, Senior Solutions Architect and Seb Kasprzak, Senior Solutions Architect. Today, AWS is announcing the public preview of AWS Serverless Application Model CLI (AWS SAM CLI) support for local development, testing, and debugging of serverless applications defined using HashiCorp Terraform con
Accelerate safe software releases with new built-in blue/green deployments in Amazon ECS | Amazon Web Services
AWS News Blog Accelerate safe software releases with new built-in blue/green deployments in Amazon ECS While containers have revolutionized how development teams package and deploy applications, these teams have had to carefully monitor releases and build custom tooling to mitigate deployment risks, which slows down shipping velocity. At scale, development teams spend valuable cycles building and
How to create IAM roles for deploying your AWS Serverless app | Serverless First
Getting IAM permissions right is one of the hardest parts about building serverless applications on AWS. Many official tutorials and blog posts cop out of giving you the full details on how to set up IAM, preferring something vague like “ensure you use least-privilege permissions when creating this role”. Or worse, they give you a wide open wildcard or admin-level example policy with a “don’t use
AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks
Reach out to get featured—contact us to send your exclusive story idea, research, hacks, or ask us a question or leave a comment/feedback! Cybersecurity researchers have disclosed a security flaw impacting Amazon Web Services (AWS) Cloud Development Kit (CDK) that could have resulted in an account takeover under specific circumstances. "The impact of this issue could, in certain scenarios, allow a
Introducing AWS Step Functions redrive to recover from failures more easily | Amazon Web Services
AWS Compute Blog Introducing AWS Step Functions redrive to recover from failures more easily Developers use AWS Step Functions, a visual workflow service to build distributed applications, automate IT and business processes, and orchestrate AWS services with minimal code. Step Functions redrive for Standard Workflows allows you to redrive a failed workflow execution from its point of failure, rath
Migrating AWS Lambda functions from the Go1.x runtime to the custom runtime on Amazon Linux 2 | Amazon Web Services
AWS Compute Blog Migrating AWS Lambda functions from the Go1.x runtime to the custom runtime on Amazon Linux 2 Update Feb 13, 2024: Support for the provided runtime family, as well as 3rd-party container images, was added in the v1.18 release of aws-lambda-go. Functions that have not had their dependencies updated since July 2020 will need to be re-compiled to prevent invocation errors when using
【SAM + Cognito + Amplify ライブラリでログイン機能を実装した React アプリを作成】Part1 - SAM で API 作成 - シー・エス・エス イノベーションラボ（ブログ）
みなさん、こんにちは。イノベーションLABのハヤシです。 今回は、以下の構成の Web アプリをさくっと作る手順をご紹介します。 バックエンド：Node.js の REST API（Amazon API Gateway / AWS Lambda） フロントエンド：TypeScript の React 今回は全 3 回のうちの 1 回です。 必要な部分だけでも、ぜひ参考にしてみてください。 環境構築手順はこちらで紹介しています blog.css-net.co.jp 1. 前提条件 1-1. 想定読者 1-2. 作成するもの 1-3. 前提条件 2. 事前準備 2-1. 作業ディレクトリ作成 2-2. リポジトリ作成 2-3. ターミナルで git 設定 3. バックエンド API 3-1. API 作成 3-2. API デプロイ 3-3. API 動作確認 3-4. リポジトリに登録 3-
Coming soon: Expansion of AWS Lambda states to all functions | Amazon Web Services
AWS Compute Blog Coming soon: Expansion of AWS Lambda states to all functions Update – December 20, 2021: We’re extending the General Update from December 5 2021 to January 31 2022. The End of Delayed Update date is now also changed to February 1 2022. Update – October 8, 2021: We’re extending the General Update from September 30 2021 to December 5 2021. The End of Delayed Update date is now also
CloudFront Hosting Toolkitを使って静的Webサイト環境を作ってみた | DevelopersIO
手間をかけずにCloudFrontを使った静的Webサイトを作りたい こんにちは、のんピ(@non____97)です。 皆さんは手間をかけずにCloudFrontを使った静的Webサイトを作りたいなと思ったことはありますか? 私はあります。 過去にAWS CDKを使ってこの思いを実現したことがありますが、一からAWS CDKを作り込むのはなかなか大変でした。 そんな苦労はCloudFront Hosting Toolkitを使用すると少し解消されるかもしれません。 CloudFront Hosting ToolkitはCLIまたはAWS CDKでフロントエンドのホスティングとCI/CDパイプラインを用意するツールです。 今だとAmplifyを使えば良いのではないか? という声も聞こえてきますが、細かいカスタマイズを行いたい場合にCloudFront周りを直接操作したい場合があります。そうい
正式リリースになった AWS SAM CLI の Terraform サポート機能を試す - kakakakakku blog
2023年9月5日に AWS SAM CLI の Terraform サポート機能が GA （正式リリース）になった👏 Amazon API Gateway や AWS Lambda 関数などサーバーレス関連のコンポーネントは Terraform で統一的に管理しつつも，AWS SAM CLI の開発支援機能（sam local invoke コマンドや sam local start-api コマンドでローカルデバッグ）は使いたい❗️という場面はあって非常に便利な組み合わせだと思う． aws.amazon.com 実際にどういう開発体験なのかを確認するために AWS ブログに載っていたサンプルを試してみる ＼( 'ω')／ aws.amazon.com 検証環境 今回は macOS 上で SAM CLI 1.97.0（最新）と Terraform 1.5.7（最新）を使う． $ sam
AWS SAM support for HashiCorp Terraform now generally available | Amazon Web Services
AWS Compute Blog AWS SAM support for HashiCorp Terraform now generally available In November 2022, AWS announced the public preview of AWS Serverless Application Model (AWS SAM) support for HashiCorp Terraform. The public preview introduces a subset of features to help Terraform users test serverless applications locally. Today, AWS is announcing the general availability of Terraform support in AW
AWS Amplify announces the new GraphQL Transformer v2. More feature-rich, flexible, and extensible. | Amazon Web Services
Front-End Web & Mobile AWS Amplify announces the new GraphQL Transformer v2. More feature-rich, flexible, and extensible. Today, AWS Amplify announces the GraphQL Transformer version 2, enabling developers to develop more feature-rich, flexible, and extensible GraphQL-based app backends even with minimal cloud expertise. The AWS Amplify CLI is a command line toolchain that helps frontend developer
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
本番環境で採用すべき26のAWSセキュリティベストプラクティス
Rust for AWS Lambda, the Docker Way
Architecture of an early stage SAAS | Feelback Blog
New for App Runner – VPC Support | Amazon Web Services
(Almost) Every infrastructure decision I endorse or regret after 4 years running infrastructure at a startup