AWS Directory Service
AD ã«äŸåããã¯ãŒã¯ããŒãã AWS ã«ã»ãã¥ãªãã£ãšã¹ã±ãŒã©ããªãã£ã確ä¿ããŠã·ãŒã ã¬ã¹ã«ç§»è¡ããŸã
Directory Service ã®å©ç¹
æ¢åã®ã¢ã¯ãã£ããã£ã¬ã¯ã㪠(AD) ã Amazon RDSãFSxãEC2 ãªã©ã® AWS ã¯ã©ãŠããµãŒãã¹ã«ç°¡åã«çµ±åã§ããŸããæ°åã¯ãªãã¯ããã ãã§ AD ãäœæãæ¡åŒµããŸãã¯ã¯ã©ãŠãã«æ¥ç¶ã§ããããããŠãŒã¶ãŒã¯äœ¿ãæ
£ãã AD èªèšŒæ
å ±ã䜿çšããŠã¯ã©ãŠããªãœãŒã¹ã«ã¢ã¯ã»ã¹ã§ããŸãã
EBS æå·åãšãããã¯ãŒã¯ã¬ã€ã€ãŒæå·åã AWS Nitro System ãšçµã¿åãããŠäœ¿çšããããšã§ãæ©å¯ããŒã¿ããšã³ãããŒãšã³ãã§æå·åã§ããŸããSOCãPCIãHIPAAãFedRAMP ãªã©ãå¹ åºãã³ã³ãã©ã€ã¢ã³ã¹èŠä»¶ãæºãããŸãã
Active Directory ã€ã³ãã©ã¹ãã©ã¯ãã£ã®ç®¡çããªãããŒãããããšã§ããªãŒãžã§ã³ã§é害ãçœå®³ãçºçããéãé«ãå¯çšæ§ãšã¢ã¯ã»ã¹æ§ã確ä¿ã§ããŸããèªåŸçãªç®¡çã¿ã¹ã¯ãéããŠæ¥åå¹çãåäžãããŸãã
ãã«ãããŒãžãåã®ãã€ãã£ã Windows Server ããŒã¹ã® Active Directory ã®å©ç¹ã享åããªãããæ¢åã® AD ã¹ãã«ãã¢ããªã±ãŒã·ã§ã³ãããªã·ãŒã掻çšããŸãããªã³ãã¬ãã¹ç°å¢ãšã¯ã©ãŠãç°å¢å
šäœã§äžè²«ãããŠãŒã¶ãŒãšã¯ã¹ããªãšã³ã¹ãšç®¡çã¢ãããŒããç¶æããŸãã
Directory Service ã䜿çšãã¹ãçç±
AWS Directory Service ã¯ãåºåã«äŸåããã¯ãŒã¯ããŒãã®çµ±åãç°¡çŽ åããã»ãã¥ãªãã£ãšã³ã³ãã©ã€ã¢ã³ã¹ã匷åããã¯ã©ãŠãç§»è¡ãåçåããããã®å æ¬çãªã¯ã©ãŠããã€ãã£ããœãªã¥ãŒã·ã§ã³ãæäŸããŸããADã€ã³ãã©ã¹ãã©ã¯ãã£ã®ç®¡çãªãŒããŒããããªãã§ããã«ãããŒãžãåã®ãã€ãã£ãMicrosoft Active DirectoryãæäŸããŸããããã«ãããçµç¹ã¯æ¢åã®ADæè³ãã¹ãã«ãã¢ããªã±ãŒã·ã§ã³ã掻çšããªãããæ°ãããã£ã¬ã¯ããªã®äœæãæ¢åã®ADã®æ¡åŒµããŸãã¯ããŸããŸãªADç°å¢éã®å®å šãªæ¥ç¶ã®ç¢ºç«ãå¯èœã«ãªããŸãã
ããã«ãããAmazon EC2 ã€ã³ã¹ã¿ã³ã¹ãªã©ã® AWS ãªãœãŒã¹ã RDS ã FSx ãªã©ã®ãããŒãžããµãŒãã¹ãšã®ã·ãŒã ã¬ã¹ãªèªèšŒãå¯èœã«ãªããŸãããŠãŒã¶ãŒã¯äœ¿ãæ
£ããèªèšŒæ
å ±ã䜿çšã㊠AWS ã¢ããªã±ãŒã·ã§ã³ã«ã¢ã¯ã»ã¹ã§ãããããAWS ã®ã¹ã±ãŒã©ããªãã£ãä¿¡é Œæ§ãã»ãã¥ãªãã£ã掻çšããªããããªã³ãã¬ãã¹ç°å¢ãšã¯ã©ãŠãç°å¢ã§äžè²«ãããšã¯ã¹ããªãšã³ã¹ãå®çŸã§ããŸãã
ãŠãŒã¹ã±ãŒã¹
æ¢åã®ADã«äŸåããã¯ãŒã¯ããŒããã¯ã©ãŠãã«ç§»è¡ããŠãããã€ããããšã§ãAmazon RDSãAmazon FSxãAmazon EC2ãªã©ã®ã¯ã©ãŠããã¹ãåã¢ããªã±ãŒã·ã§ã³ããµãŒãã¹ã«ã·ãŒã ã¬ã¹ã«ã¢ã¯ã»ã¹ã§ããããã«ãªããŸãã
AD Connector ãš AWS Managed Microsoft AD (ãã€ããªãããšãã£ã·ã§ã³) ã䜿çšã㊠AWS Managed Microsoft AD ãŸãã¯æ¢åã® AD ã«ã·ãŒã ã¬ã¹ãªãã¡ã€ã³çµåæ©èœã掻çšããããšã§ãæ°ããã¯ã©ãŠãã¯ãŒã¯ããŒããè¿ éã«ãããã€ã§ããŸãã
æ¢åã® AD ã¢ã€ãã³ãã£ãã£ã Amazon WorkSpacesãAmazon QuickSightãAmazon ConnectãAWS License Manager ãªã©ã®ã¯ã©ãŠãã¢ããªã±ãŒã·ã§ã³ãšçµ±åããããšã§ãçç£æ§ãé«ããã¢ã¯ã»ã¹ãåçåã§ããŸãã
AWS Nitro System ãæäŸãããšã³ãããŒãšã³ãã®æå·åãæŽ»çšããŠãçµç¹ã®æ©å¯ããŒã¿ãä¿è·ããŸãã
èŠå¶èŠä»¶ãæºããããã«ãSOCãPCIãHIPAAãFedRAMP ãªã©ã®æ¥çæšæºãžã®ã³ã³ãã©ã€ã¢ã³ã¹ãéæããŸãã
ãªã³ãã¬ãã¹ãšã¯ã©ãŠãç°å¢ã«ãã㊠ID ããã³ã¢ã¯ã»ã¹ç®¡çãäžå åããŠãã»ãã¥ãªãã£äœå¶ã匷åããŸãã
ãã«ããªãŒãžã§ã³ã®ãããã€ãåœå ã®ã¢ãã€ã©ããªãã£ãŒãŸãŒã³ãªã©ãä¿¡é Œæ§ã®é«ã AWS ã€ã³ãã©ã¹ãã©ã¯ãã£ã掻çšããŠããã£ã¬ã¯ããªãµãŒãã¹ã®é«å¯çšæ§ãšã¢ã¯ã»ã·ããªãã£ã確ä¿ããŸãã
Active Directory ã®ããã¯ã¢ããã埩å ããããé©çšãããã³ã¢ããã°ã¬ãŒãã¿ã¹ã¯ã®ç®¡çã®è² æ ããªããªãããšã§ãéçšå¹çãåäžããŸãã
ãªãœãŒã¹ãã©ã¬ã¹ãããããã€ããããšã§ãã¢ãžã¥ãŒã«åŒã§åé¢ãããã¢ãããŒãã Active Directory 管çã«å°å ¥ããŸããããã«ããããªã³ãã¬ãã¹ AD ãžã®ä¿¡é Œã§ããæ¥ç¶ãç¶æããªããã圱é¿ç¯å²ãå¶éããç¬ç«ããããŒã ã«æš©éãäžããããšãã§ããŸãã
æ¢åã®ã¹ãã«ãšå°éç¥èãæŽ»çšããŠããŠãŒã¶ãŒã IT 管çè ã«äœ¿ãæ £ãããã€ãã£ãã® Active Directory ãšã¯ã¹ããªãšã³ã¹ãæäŸããŸãã
ãªã³ãã¬ãã¹ãšã¯ã©ãŠãããŒã¹ã® Active Directory ç°å¢å šäœã§äžè²«ãã管çã¢ãããŒããšãŠãŒã¶ãŒãšã¯ã¹ããªãšã³ã¹ãå®çŸããŸãã
åŸæ¥ã® AD ã«äŸåããã¢ããªã±ãŒã·ã§ã³ãšã¯ãŒã¯ããŒãããã¯ã©ãŠããã¹ãåã® Active Directory ãµãŒãã¹ãšã·ãŒã ã¬ã¹ã«çµ±åããŸãã