{"id":5126,"date":"2023-04-07T18:43:43","date_gmt":"2023-04-07T09:43:43","guid":{"rendered":"https:\/\/p-corporate-blog-cms.mmmcorp.co.jp\/?p=5126"},"modified":"2023-04-19T16:54:30","modified_gmt":"2023-04-19T07:54:30","slug":"manage-account-by-aft","status":"publish","type":"post","link":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/2023\/04\/07\/manage-account-by-aft\/","title":{"rendered":"AFT\u3067\u30a2\u30ab\u30a6\u30f3\u30c8\u7ba1\u7406\u3084\u3063\u3066\u307f\u305f\uff01"},"content":{"rendered":"<div id=\"rtoc-mokuji-wrapper\" class=\"rtoc-mokuji-content frame4 preset5 animation-slide rtoc_open noto-sans\" data-id=\"5126\" data-theme=\"DWS BLOG 2023\">\n\t\t\t<div id=\"rtoc-mokuji-title\" class=\" rtoc_left\">\n\t\t\t<button class=\"rtoc_open_close rtoc_open\"><\/button>\n\t\t\t<span>\u76ee\u6b21<\/span>\n\t\t\t<\/div><ol class=\"rtoc-mokuji decimal_ol level-1\"><li class=\"rtoc-item\"><a href=\"#rtoc-1\">\u306f\u3058\u3081\u306b<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-2\">\u524d\u63d0\u6761\u4ef6<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-3\">\u305d\u3082\u305d\u3082AFT\u3063\u3066\uff1f<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-4\">\u74b0\u5883\u69cb\u7bc9\u3084\u3063\u3066\u307f\u308b<\/a><ol class=\"rtoc-mokuji mokuji_ol level-2\"><li class=\"rtoc-item\"><a href=\"#rtoc-5\">1. OU\u3068AFT\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u6e96\u5099\u3059\u308b<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-6\">2. \u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u6e96\u5099\u3059\u308b<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-7\">3. \u5404\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3059\u308b<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-8\">4. Terraform\u3092\u5b9f\u884c\u3059\u308b<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-9\">5. Github\u306e\u30b3\u30cd\u30af\u30bf\u30fc\u3092\u8ffd\u52a0\u3059\u308b<\/a><\/li><\/ol><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-10\">\u30a2\u30ab\u30a6\u30f3\u30c8\u30c7\u30d7\u30ed\u30a4\u3084\u3063\u3066\u307f\u308b<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-11\">\u6700\u5f8c\u306b<\/a><\/li><li class=\"rtoc-item\"><a href=\"#rtoc-12\">\u53c2\u8003<\/a><\/li><\/ol><\/div><h2 id=\"rtoc-1\" >\u306f\u3058\u3081\u306b<\/h2>\n<p>\u307f\u306a\u3055\u3093\u3053\u3093\u306b\u3061\u306f\u3002\u6700\u8fd1\u3072\u3088\u3053\u306e\u30d8\u30a2\u30d0\u30f3\u30c9\u304c\u30c8\u30ec\u30fc\u30c9\u30de\u30fc\u30af\u306b\u306a\u308a\u3064\u3064\u3042\u308bhiropy\u3067\u3059\u3002<br \/>\n\u4eca\u56de\u306f\u3001\u793e\u5185\u3067\u30b5\u30f3\u30c9\u30dc\u30c3\u30af\u30b9\u74b0\u5883\u3092\u904b\u7528\u3057\u3066\u3044\u304f\u306b\u3042\u305f\u308a\u300cAWS Control Tower Account Factory for Terraform\uff08AFT\uff09\u300d\u3092\u5c0e\u5165\u3057\u3066\u307f\u307e\u3057\u305f\u306e\u3067\u8a18\u4e8b\u306b\u3057\u3066\u307f\u3088\u3046\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<h2 id=\"rtoc-2\" >\u524d\u63d0\u6761\u4ef6<\/h2>\n<p>AFT\u3092\u5c0e\u5165\u3059\u308b\u306b\u3042\u305f\u308a\u3001\u4ee5\u4e0b\u306e\u6e96\u5099\u304c\u3067\u304d\u3066\u3044\u308b\u3053\u3068\u304c\u524d\u63d0\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n<ul>\n<li>ControlTower\u306e\u5c0e\u5165\u304c\u5b8c\u4e86\u3057\u3066\u3044\u308b<\/li>\n<li>Github\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u304c\uff12\u3064\u7528\u610f\u3055\u308c\u3066\u3044\u308b\u3053\u3068\uff08\u203b\u30a2\u30ab\u30a6\u30f3\u30c8\u767a\u884c\u306e\u307f\u3067\u3042\u308c\u3070\uff12\u3064\u3001\u8a73\u7d30\u306a\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u304c\u5fc5\u8981\u3067\u3042\u308b\u5834\u5408\u306f\uff14\u3064\u5fc5\u8981\u3067\u3059\uff09<\/li>\n<li>\u30ed\u30fc\u30ab\u30eb\u74b0\u5883\u3067Docker\u304c\u4f7f\u7528\u3067\u304d\u308b\u3053\u3068<\/li>\n<\/ul>\n<p>\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u95a2\u3057\u3066\u306f\u3001\u540d\u524d\u306e\u5236\u7d04\u7b49\u306f\u7279\u306b\u3042\u308a\u307e\u305b\u3093\u3002<br \/>\n\u3068\u308a\u3042\u3048\u305a\u30a2\u30ab\u30a6\u30f3\u30c8\u304c\u4f5c\u308a\u305f\u3044! \u3068\u3044\u3046\u65b9\u306f\uff12\u3064\u3067\u3044\u3044\u304b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<p><strong>&lt;\u6ce8\u610f&gt;<\/strong><br \/>\n\u624b\u9806\uff15\u306b\u304a\u3044\u3066\u3001Github\u306eOwner\u6a29\u9650\u304c\u5fc5\u8981\u306b\u306a\u308a\u307e\u3059\u3002<br \/>\n\u7d44\u7e54\u306eGithub\u3092\u5229\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u306f\u3001\u624b\u9806\uff15\u306e\u4f5c\u696d\u3092Owner\u6a29\u9650\u3092\u6301\u3063\u3066\u3044\u308b\u65b9\u306b\u4f9d\u983c\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<h2 id=\"rtoc-3\" >\u305d\u3082\u305d\u3082AFT\u3063\u3066\uff1f<\/h2>\n<p>\u516c\u5f0f\u306b\u3088\u308b\u3068\u3001<\/p>\n<blockquote>\n<p>AWS Control Tower Account Factory for Terraform\uff08AFT\uff09\u306f\u3001GitOps\u30e2\u30c7\u30eb\u306b\u5f93\u3063\u3066\u3001AWS Control Tower\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0\u3068\u30a2\u30ab\u30a6\u30f3\u30c8\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306e\u30d7\u30ed\u30bb\u30b9\u3092\u81ea\u52d5\u5316\u3057\u307e\u3059\u3002\u30a2\u30ab\u30a6\u30f3\u30c8\u30ea\u30af\u30a8\u30b9\u30c8 Terraform \u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3057\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u30d7\u30ed\u30d3\u30b8\u30e7\u30cb\u30f3\u30b0\u306e\u305f\u3081\u306e AFT \u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u3092\u30c8\u30ea\u30ac\u30fc\u3059\u308b\u5fc5\u8981\u306a\u30a4\u30f3\u30d7\u30c3\u30c8\u3092\u63d0\u4f9b\u3059\u308b\u3053\u3068\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<\/blockquote>\n<p>\u3068\u306e\u3053\u3068\u3067\u3059\u3002<br \/>\n\u3056\u3063\u304f\u308a\u8a00\u3046\u3068\u3001Terraform\u30d5\u30a1\u30a4\u30eb\u3067OU\u5185\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u7ba1\u7406\u3067\u304d\u308b\u3082\u306e\u306b\u306a\u308a\u307e\u3059\u3002<br \/>\n\u88cf\u5074\u3067\u306fLambda\u3084CodePipeline\u304c\u8d70\u308a\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u81ea\u52d5\u3067\u30c7\u30d7\u30ed\u30a4\u3057\u3066\u304f\u308c\u307e\u3059\u3002<\/p>\n<p>Terraform\u306e\u5b9f\u884c\u74b0\u5883\u304c\u5fc5\u8981\u3067\u306f\uff1f\u3068\u601d\u3063\u305f\u65b9\u3082\u3044\u3089\u3063\u3057\u3083\u308b\u304b\u3082\u3057\u308c\u307e\u305b\u3093\u304c\u3001\u4eca\u56de\u306fTerraform\u306e\u5b9f\u884c\u74b0\u5883\u3092Docker\u3067\u6e96\u5099\u3059\u308b\u306e\u3067\u5fc3\u914d\u3054\u7121\u7528\u3067\u3059\u3002<\/p>\n<h2 id=\"rtoc-4\" >\u74b0\u5883\u69cb\u7bc9\u3084\u3063\u3066\u307f\u308b<\/h2>\n<p>\u305d\u308c\u3067\u306f\u65e9\u901f\u672c\u984c\u306b\u79fb\u308a\u307e\u3057\u3087\u3046\uff01<br \/>\n\u307e\u305a\u306f\u74b0\u5883\u69cb\u7bc9\u304b\u3089\u3067\u3059\u3002<\/p>\n<h3 id=\"rtoc-5\" >1. OU\u3068AFT\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u6e96\u5099\u3059\u308b<\/h3>\n<p>AFT\u3092\u4f7f\u7528\u3057\u3066\u30c7\u30d7\u30ed\u30a4\u3059\u308b\u969b\u306b\u3001\u300c\u30a2\u30ab\u30a6\u30f3\u30c8\u30c7\u30d7\u30ed\u30a4\u5148\u306eOU\u3001AFT\u7ba1\u7406\u7528\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u3001ControlTower\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u3067\u4f7f\u7528\u3059\u308bIAM\u30e6\u30fc\u30b6\u300d\u306e3\u3064\u304c\u5fc5\u8981\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u8a73\u7d30\u306f\u5272\u611b\u3057\u307e\u3059\u304c\u3001ControlTower\u914d\u4e0b\u306b\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u30c7\u30d7\u30ed\u30a4\u3059\u308b\u305f\u3081\u306eOU\u3001<strong>\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u30c7\u30d7\u30ed\u30a4\u3059\u308b\u305f\u3081\u306eOU\u306e\u4e2d\u306b<\/strong>AFT\u7ba1\u7406\u7528\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u3001<strong>ControlTower\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u4e2d\u306b<\/strong>IAM\u30e6\u30fc\u30b6\u3092\u4f5c\u6210\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<p>IAM\u30e6\u30fc\u30b6\u306b\u3064\u3044\u3066\u306f\u3001<code>AdministratorAccess<\/code>\u306e\u6a29\u9650\u3092\u4ed8\u4e0e\u3057\u3001\u30a2\u30af\u30bb\u30b9\u30ad\u30fc\u3092\u767a\u884c\u3057\u3066\u304f\u3060\u3055\u3044\u3002\uff08\u3053\u3061\u3089\u306f\u5f8c\u307b\u3069\u4f7f\u7528\u3057\u307e\u3059\u3002\uff09<\/p>\n<h3 id=\"rtoc-6\" >2. \u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u6e96\u5099\u3059\u308b<\/h3>\n<p>\u30b3\u30fc\u30c9\u3092\u7f6e\u304f\u305f\u3081\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u6e96\u5099\u3057\u307e\u3059\u3002<br \/>\n\u4e8b\u524d\u306b\u6e96\u5099\u3057\u3066\u3044\u305f\u3060\u3044\u305f\u30ea\u30dd\u30b8\u30c8\u30ea\u5185\u306b\u30b3\u30fc\u30c9\u3092\u914d\u7f6e\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<p>\u4eca\u56de\u79c1\u306f\u3001\u4ee5\u4e0b\u306e\u3088\u3046\u306a\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u4f5c\u6210\u3057\u307e\u3057\u305f\u3002<\/p>\n<ul>\n<li><strong>sandbox-account-management_tf<\/strong>: \u30a2\u30ab\u30a6\u30f3\u30c8\u5b9a\u7fa9\u306e\u30b3\u30fc\u30c9\u3092\u7f6e\u304f\u305f\u3081\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u3002<\/li>\n<li><strong>sandbox-account-provisioning-customizations_tf<\/strong>: \u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u3059\u308b\u305f\u3081\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u3067\u3059\u304c\u3001\u4eca\u56de\u306f\u30d5\u30a1\u30a4\u30eb\u3092\u7f6e\u304f\u3060\u3051\u3067\u7279\u306b\u64cd\u4f5c\u306f\u884c\u3044\u307e\u305b\u3093\u3002<\/li>\n<\/ul>\n<p>\u4ee5\u4e0b\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u304b\u3089zip\u30d5\u30a1\u30a4\u30eb\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u3001<br \/>\n<a href=\"https:\/\/github.com\/aws-ia\/terraform-aws-control_tower_account_factory\">https:\/\/github.com\/aws-ia\/terraform-aws-control_tower_account_factory<\/a><\/p>\n<p>\u5404\u30ea\u30dd\u30b8\u30c8\u30ea\u306b\u305d\u308c\u305e\u308c\u4ee5\u4e0b\u306e\u901a\u308a\u30d5\u30a1\u30a4\u30eb\u3092\u30b3\u30d4\u30fc\u3057\u307e\u3059\u3002<\/p>\n<ul>\n<li><strong>sandbox-account-management_tf<\/strong> -&gt; <strong>terraform-aws-control_tower_account_factory\/sources\/aft-customizations-repos\/aft-account-request<\/strong>\u306eterraform\u30d5\u30a9\u30eb\u30c0\u3092\u30b3\u30d4\u30fc\u3057\u3066\u914d\u7f6e<\/li>\n<li><strong>sandbox-account-provisioning-customizations_tf <\/strong>-&gt; <strong>terraform-aws-control_tower_account_factory\/sources\/aft-customizations-repos\/aft-account-provisioning-customizations\/<\/strong>\u306eterraform\u30d5\u30a9\u30eb\u30c0\u3092\u30b3\u30d4\u30fc\u3057\u3066\u914d\u7f6e<\/li>\n<\/ul>\n<p>\u3055\u3089\u306b\u3001<code>sandbox-account-management_tf<\/code>\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30eb\u30fc\u30c8\u306b\u4ee5\u4e0b\u306ezip\u30d5\u30a1\u30a4\u30eb\u3092\u89e3\u51cd\u3057\u3066\u914d\u7f6e\u3057\u307e\u3059\u3002<\/p>\n<p><a href=\"https:\/\/esa-storage-tokyo.s3-ap-northeast-1.amazonaws.com\/uploads\/production\/attachments\/1854\/2023\/03\/31\/141998\/612e891c-030b-4682-9be0-788750e5fa6c.zip\">template.zip (1.8 kB)<\/a><\/p>\n<p>\u73fe\u6642\u70b9\u3067\u3001\u305d\u308c\u305e\u308c\u306e\u30d5\u30a1\u30a4\u30eb\u69cb\u9020\u306f\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u306a\u3063\u3066\u3044\u308b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<pre><code class=\"language-tree\">sandbox-account-management_tf\n\u251c\u2500\u2500 terraform\n\u251c\u2500\u2500 Dockerfile\n\u251c\u2500\u2500 Dockerfile.tflint\n\u251c\u2500\u2500 env.sample\n\u251c\u2500\u2500 main.tf.sample\n\u2514\u2500\u2500 docker-compose.yml\n\nsandbox-account-provisioning-customizations_tf\n\u2514\u2500\u2500 terraform<\/code><\/pre>\n<h3 id=\"rtoc-7\" >3. \u5404\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3059\u308b<\/h3>\n<p>\u30b3\u30d4\u30fc\u3057\u3066\u304d\u305f\u30d5\u30a1\u30a4\u30eb\u9054\u306f\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306e\u307e\u307e\u306a\u306e\u3067\u3001\u5404\u30d5\u30a1\u30a4\u30eb\u306b\u5fc5\u8981\u306a\u5024\u3092\u5165\u308c\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n<h4>env.sample<\/h4>\n<p>\u30d5\u30a1\u30a4\u30eb\u540d\u3092<code>.env<\/code>\u306b\u5909\u66f4\u3057\u3001\u305d\u308c\u305e\u308c\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u8ffd\u8a18\u3057\u307e\u3059\u3002<br \/>\n\uff08&lt;&gt;\u306f\u5fc5\u8981\u306a\u3044\u306e\u3067\u6d88\u3057\u3066\u304f\u3060\u3055\u3044\uff09<\/p>\n<pre><code class=\"language-.env\">AWS_ACCESS_KEY_ID=&lt;\u5148\u307b\u3069\u767a\u884c\u3057\u305f\u30a2\u30af\u30bb\u30b9\u30ad\u30fc&gt;\nAWS_SECRET_ACCESS_KEY=&lt;\u5148\u307b\u3069\u767a\u884c\u3057\u305f\u30b7\u30fc\u30af\u30ec\u30c3\u30c8\u30a2\u30af\u30bb\u30b9\u30ad\u30fc&gt;\nAWS_DEFAULT_REGION=&lt;AFT\u304c\u4f5c\u6210\u3059\u308b\u30ea\u30bd\u30fc\u30b9\u3092\u30c7\u30d7\u30ed\u30a4\u3059\u308b\u30ea\u30fc\u30b8\u30e7\u30f3&gt;<\/code><\/pre>\n<h4>main.tf.sample<\/h4>\n<p>\u30d5\u30a1\u30a4\u30eb\u3092\u4fee\u6b63\u3059\u308b\u524d\u306b\u3001ControlTower\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u5185\u3067S3\u30d0\u30b1\u30c3\u30c8\u3092\uff11\u3064\u4f5c\u6210\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n<p>\u30d5\u30a1\u30a4\u30eb\u540d\u3092<code>main.tf<\/code>\u306b\u4fee\u6b63\u3057\u3001\u4ee5\u4e0b\u306e\u901a\u308a\u4fee\u6b63\u3057\u307e\u3059\u3002<\/p>\n<pre><code class=\"language-main.tf\">provider &quot;aws&quot; {\n  region = &quot;&lt;AFT\u30ea\u30bd\u30fc\u30b9\u3092\u30c7\u30d7\u30ed\u30a4\u3059\u308b\u30ea\u30fc\u30b8\u30e7\u30f3&gt;&quot;\n}\n\nterraform {\n  required_version = &quot;&gt;= 1.3.7&quot;\n  backend &quot;s3&quot; {\n    bucket = &quot;&lt;\u4f5c\u6210\u3057\u305fS3\u30d0\u30b1\u30c3\u30c8\u540d&gt;&quot; # \u4f5c\u6210\u3057\u305fS3\u30d0\u30b1\u30c3\u30c8\n    region = &quot;&lt;\u30d0\u30b1\u30c3\u30c8\u3092\u4f5c\u6210\u3057\u305f\u30ea\u30fc\u30b8\u30e7\u30f3&gt;&quot;\n    key = &quot;terraform.tfstate&quot;\n  }\n}<\/code><\/pre>\n<p>\u4f5c\u6210\u3057\u305f\u30d0\u30b1\u30c3\u30c8\u5185\u306b\u3001tfstate\u30d5\u30a1\u30a4\u30eb\u304c\u4f5c\u6210\u3055\u308c\u307e\u3059\u3002<\/p>\n<h4>aft.tf<\/h4>\n<p>\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u30eb\u30fc\u30c8\u306b<code>aft.tf<\/code>\u3068\u3044\u3046\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3057\u3066\u3001\u4ee5\u4e0b\u306e\u30b3\u30fc\u30c9\u3092\u8cbc\u308a\u4ed8\u3051\u307e\u3059\u3002\uff08\u30d5\u30a1\u30a4\u30eb\u540d\u306f\u306a\u3093\u3067\u3082OK\u3067\u3059\uff09<\/p>\n<pre><code class=\"language-aft.tf\">module &quot;aft&quot; {\n  source = &quot;github.com\/aws-ia\/terraform-aws-control_tower_account_factory&quot;\n  # Required Vars\n  ct_management_account_id    = &quot;&lt;ControlTower\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u306eID&gt;&quot;\n  log_archive_account_id      = &quot;&lt;Log\u30a2\u30fc\u30ab\u30a4\u30d6\u30a2\u30ab\u30a6\u30f3\u30c8\u306eID&gt;&quot;\n  audit_account_id            = &quot;&lt;\u76e3\u67fb\u30a2\u30ab\u30a6\u30f3\u30c8\u306eID&gt;&quot;\n  aft_management_account_id   = &quot;&lt;AFT\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u306eID&gt;&quot;\n  ct_home_region              = &quot;&lt;ControlTower\u306e\u30db\u30fc\u30e0\u30ea\u30fc\u30b8\u30e7\u30f3&gt;&quot;\n  tf_backend_secondary_region = &quot;us-west-2&quot;\n  # VCS Vars\n  vcs_provider                                  = &quot;github&quot;\n  account_request_repo_name                     = &quot;&lt;\u30ea\u30dd\u30b8\u30c8\u30ea\u306eOrganization\u540d&gt;\/sandbox-account-management_tf&quot;\n  global_customizations_repo_name               = &quot;&lt;\u30ea\u30dd\u30b8\u30c8\u30ea\u306eOrganization\u540d&gt;\/sandbox-account-provisioning-customizations_tf&quot;\n  account_customizations_repo_name              = &quot;&lt;\u30ea\u30dd\u30b8\u30c8\u30ea\u306eOrganization\u540d&gt;\/sandbox-account-provisioning-customizations_tf&quot;\n  account_provisioning_customizations_repo_name = &quot;&lt;\u30ea\u30dd\u30b8\u30c8\u30ea\u306eOrganization\u540d&gt;\/sandbox-account-provisioning-customizations_tf&quot;\n\n  # Optional Feature Flags\n  aft_feature_delete_default_vpcs_enabled = true\n  aft_feature_cloudtrail_data_events      = true\n  aft_feature_enterprise_support          = false\n  aft_vpc_endpoints                       = false\n}<\/code><\/pre>\n<p>&lt;&gt;\u306e\u7b87\u6240\u306f\u9069\u5f53\u306a\u5024\u306b\u4fee\u6b63\u3057\u3066\u304f\u3060\u3055\u3044\u3002<br \/>\n\u306a\u304a\u3001<code>&lt;AFT\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8&gt;<\/code>\u3068\u306f\u30011. \u3067\u4f5c\u6210\u3057\u305f\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u6307\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<h3 id=\"rtoc-8\" >4. Terraform\u3092\u5b9f\u884c\u3059\u308b<\/h3>\n<p>\u3053\u3053\u307e\u3067\u304d\u305f\u3089\u30d5\u30a1\u30a4\u30eb\u306e\u6e96\u5099\u306f\u5b8c\u4e86\u3067\u3059\uff01<br \/>\n\u5b9f\u969b\u306b\u30b3\u30f3\u30c6\u30ca\u3092\u7acb\u3061\u4e0a\u3052\u3066\u3001\u30a2\u30ab\u30a6\u30f3\u30c8\u30c7\u30d7\u30ed\u30a4\u3092\u5b9f\u65bd\u3059\u308b\u305f\u3081\u306e\u74b0\u5883\u3092\u69cb\u7bc9\u3057\u3066\u3044\u304d\u307e\u3057\u3087\u3046\uff01<\/p>\n<p>\u307e\u305a\u306f\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u3066\u30b3\u30f3\u30c6\u30ca\u3092\u7acb\u3061\u4e0a\u3052\u307e\u3059\u3002<\/p>\n<pre><code class=\"language-sh\">make build<\/code><\/pre>\n<p>\u6b21\u306b\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002<\/p>\n<pre><code class=\"language-sh\">make init<\/code><\/pre>\n<p>\u3055\u3089\u306b\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u65bd\u3057\u307e\u3059\u3002<\/p>\n<pre><code class=\"language-sh\">make apply<\/code><\/pre>\n<p>300\u4ee5\u4e0a\u306e\u30ea\u30bd\u30fc\u30b9\u306e\u8ffd\u52a0\u78ba\u8a8d\u304c\u51fa\u308b\u304b\u3068\u601d\u3044\u307e\u3059\u304c\u3001yes\u3068\u5165\u529b\u3057\u3066\u30ea\u30bd\u30fc\u30b9\u304c\u30c7\u30d7\u30ed\u30a4\u3055\u308c\u308b\u306e\u3092\u5f85\u3061\u307e\u3059\u3002<br \/>\n\uff08\u3053\u3061\u3089\u306f\u7d50\u69cb\u6642\u9593\u304c\u304b\u304b\u308a\u307e\u3059\uff09<\/p>\n<h3 id=\"rtoc-9\" >5. Github\u306e\u30b3\u30cd\u30af\u30bf\u30fc\u3092\u8ffd\u52a0\u3059\u308b<\/h3>\n<p><strong>&lt; \u6ce8\u610f &gt;<\/strong><br \/>\n<strong>\u3053\u306e\u4f5c\u696d\u306fGithub\u306e\u7ba1\u7406\u8005\u6a29\u9650\u304c\u5fc5\u8981\u3067\u3059\uff01<\/strong><\/p>\n<p>\u3053\u3053\u307e\u3067\u304d\u305f\u3089\u5f8c\u5c11\u3057\u3067\u3059\uff01<br \/>\nGithub\u3068AWS\u74b0\u5883\u3092\u7e4b\u3052\u308b\u3053\u3068\u3067\u3001\u30b3\u30fc\u30c9\u306e\u5909\u66f4\u3092main\u30d6\u30e9\u30f3\u30c1\u306b\u30d7\u30c3\u30b7\u30e5\u3059\u308b\u3068\u81ea\u52d5\u3067\u30a2\u30ab\u30a6\u30f3\u30c8\u767a\u884c\u304c\u8d70\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\uff01<\/p>\n<p>AFT\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u306b\u30b5\u30a4\u30f3\u30a4\u30f3\u3057\u3001CodeCommit\u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u958b\u304d\u307e\u3059\u3002<br \/>\n\u5de6\u5074\u306e\u8a2d\u5b9a\u30bf\u30d6\u304b\u3089\u63a5\u7d9a\u3092\u9078\u629e\u3059\u308b\u3068\u3001\u898b\u6163\u308c\u306a\u3044\u63a5\u7d9a\u304c\uff08\u304a\u305d\u3089\u304f\uff09\uff12\u3064\u300c\u4fdd\u7559\u4e2d\u300d\u306e\u30b9\u30c6\u30fc\u30bf\u30b9\u306b\u306a\u3063\u3066\u3044\u308b\u3068\u601d\u3044\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" width=\"1296\" alt=\"connect-github-1.png (165.1 kB)\" src=\"https:\/\/img.esa.io\/uploads\/production\/attachments\/1854\/2023\/03\/31\/141998\/4e876375-3026-475c-8c8d-a4f8d77d356f.png\"><\/p>\n<p>\u5404\u63a5\u7d9a\u3092\u30af\u30ea\u30c3\u30af\u3057\u3001\u53f3\u4e0a\u306b\u8868\u793a\u3055\u308c\u308b<code>\u63a5\u7d9a\u306e\u66f4\u65b0<\/code>\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" width=\"1263\" alt=\"image.png (189.3 kB)\" src=\"https:\/\/img.esa.io\/uploads\/production\/attachments\/1854\/2023\/03\/27\/141998\/c67555fe-2869-4650-a06a-34d62259c1cf.png\"><\/p>\n<p>\u5225\u30d6\u30e9\u30a6\u30b6\u304c\u958b\u304f\u306e\u3067\u3001<code>\u65b0\u3057\u3044\u30a2\u30d7\u30ea\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/code>\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" width=\"620\" alt=\"image.png (322.8 kB)\" src=\"https:\/\/img.esa.io\/uploads\/production\/attachments\/1854\/2023\/03\/27\/141998\/6e2d5356-c457-4fa2-be94-40a744529c31.png\"><\/p>\n<p>\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u9078\u629e\u753b\u9762\u304c\u8868\u793a\u3055\u308c\u308b\u306e\u3067\u3001\u4f5c\u6210\u3057\u305f\u30ea\u30dd\u30b8\u30c8\u30ea\u304c\u6240\u5c5e\u3059\u308b\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u9078\u629e\u3057\u3001\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u9078\u629e\u3067<code>sandbox-account-management_tf<\/code>,<code>sandbox-account-provisioning-customizations_tf<\/code>\u3092\u9078\u629e\u3057\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" width=\"601\" alt=\"image.png (258.5 kB)\" src=\"https:\/\/img.esa.io\/uploads\/production\/attachments\/1854\/2023\/03\/27\/141998\/114cf178-5404-4223-9869-970982db6dcb.png\"><\/p>\n<p>\u4e0b\u306e<code>Update access<\/code>\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3068\u5143\u306e\u753b\u9762\u306b\u9077\u79fb\u3059\u308b\u306e\u3067\u3001\u9077\u79fb\u3057\u305f\u72b6\u614b\u3067<code>\u63a5\u7d9a<\/code>\u3092\u30af\u30ea\u30c3\u30af\u3057\u307e\u3059\u3002<\/p>\n<p>\u4ee5\u4e0a\u3067Github\u3068\u306e\u63a5\u7d9a\u8a2d\u5b9a\u306f\u5b8c\u4e86\u3067\u3059\uff01<br \/>\n\u3053\u308c\u3067\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30c7\u30d7\u30ed\u30a4\u304c\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002<\/p>\n<h4>6. \u30d1\u30a4\u30d7\u30e9\u30a4\u30f3\u3092\u78ba\u8a8d\u3059\u308b<\/h4>\n<p>\u5b9f\u969b\u306b\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u30c7\u30d7\u30ed\u30a4\u3059\u308b\u305f\u3081\u306e\u30d1\u30a4\u30d7\u30e9\u30a4\u30f3\u3092\u78ba\u8a8d\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002<br \/>\nAFT\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u3067CodePipleline\u30b3\u30f3\u30bd\u30fc\u30eb\u3092\u958b\u304d\u3001\u30d1\u30a4\u30d7\u30e9\u30a4\u30f3\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" width=\"374\" alt=\"pipleline-1.png (71.9 kB)\" src=\"https:\/\/img.esa.io\/uploads\/production\/attachments\/1854\/2023\/03\/31\/141998\/4381e8de-ef20-4316-bf93-e1c7002dbf49.png\"><\/p>\n<p>\u753b\u50cf\u306e\u3088\u3046\u306b\u3001\u30d1\u30a4\u30d7\u30e9\u30a4\u30f3\u304c\uff12\u3064\u6210\u529f\u3057\u3066\u3044\u308c\u3070OK\u3067\u3059\uff01<br \/>\n\uff08\u4eca\u56de\u306f\u30a2\u30ab\u30a6\u30f3\u30c8\u306e\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u306f\u884c\u308f\u306a\u3044\u306e\u3067\u3001\u6b8b\u308a\uff12\u3064\u306e\u30d1\u30a4\u30d7\u30e9\u30a4\u30f3\u306f\u305d\u306e\u307e\u307e\u3067OK\u3067\u3059\uff09<\/p>\n<h2 id=\"rtoc-10\" >\u30a2\u30ab\u30a6\u30f3\u30c8\u30c7\u30d7\u30ed\u30a4\u3084\u3063\u3066\u307f\u308b<\/h2>\n<p>\u30b5\u30af\u30c3\u3068\u30a2\u30ab\u30a6\u30f3\u30c8\u30c7\u30d7\u30ed\u30a4\u3057\u3061\u3083\u3044\u307e\u3057\u3087\u3046\uff01<\/p>\n<p><code>sandbox-account-management_tf<\/code>\u30ea\u30dd\u30b8\u30c8\u30ea\u3067\u9069\u5f53\u306a\u30d6\u30e9\u30f3\u30c1\u3092\u5207\u308a\u307e\u3059\u3002<\/p>\n<p>\u4ee5\u4e0b\u306e\u30b3\u30fc\u30c9\u3092<code>terraform<\/code>\u30d5\u30a9\u30eb\u30c0\u5185\u306b\u914d\u7f6e\u3057\u307e\u3059\u3002<\/p>\n<pre><code class=\"language-accounts.tf\">module &quot;&lt;\u4efb\u610f\u306e\u540d\u524d&gt;&quot; {\n  source = &quot;.\/modules\/aft-account-request&quot;\n\n  control_tower_parameters = {\n    AccountEmail              = &quot;&lt;\u30a2\u30ab\u30a6\u30f3\u30c8\u306b\u5272\u308a\u5f53\u3066\u308b\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9&gt;&quot;\n    AccountName               = &quot;&lt;\u8868\u793a\u3055\u308c\u308b\u30a2\u30ab\u30a6\u30f3\u30c8\u540d&gt;&quot;\n    ManagedOrganizationalUnit = &quot;&lt;\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u30c7\u30d7\u30ed\u30a4\u3059\u308bOU\u540d&gt;&quot;\n    SSOUserEmail              = &quot;&lt;SSO\u30e6\u30fc\u30b6\u306e\u30e1\u30fc\u30eb\u30a2\u30c9\u30ec\u30b9&gt;&quot;\n    SSOUserFirstName          = &quot;&lt;\u540d&gt;&quot;\n    SSOUserLastName           = &quot;&lt;\u59d3&gt;&quot;\n  }\n\n  # \u4ee5\u4e0b\u306f\u4efb\u610f\u3067\u5165\u529b\n  account_tags = {\n    &quot;SandBox&quot; = &quot;&lt;\u4efb\u610f\u306e\u5024&gt;&quot;\n  }\n\n  change_management_parameters = {\n    change_requested_by = &quot;\u4efb\u610f\u306e\u5024&quot;\n    change_reason       = &quot;Create account request&quot;\n  }\n\n  account_customizations_name = &quot;&lt;\u4efb\u610f\u306e\u5024&gt;&quot;\n}\n<\/code><\/pre>\n<p>\u4fdd\u5b58\u3057\u305f\u3089push\u3057\u3066\u3001\u30d6\u30e9\u30f3\u30c1\u3092main\u306b\u30de\u30fc\u30b8\u3057\u307e\u3059\u3002<br \/>\n\u30d1\u30a4\u30d7\u30e9\u30a4\u30f3\u3092\u78ba\u8a8d\u3057\u3066\u3001<code>ct-aft-account-request<\/code>\u304c\u6210\u529f\u3057\u3066\u3044\u308c\u3070\u30a2\u30ab\u30a6\u30f3\u30c8\u4f5c\u6210\u306f\u6210\u529f\u3067\u3059\uff01<\/p>\n<p>SSO\u30e6\u30fc\u30b6\u306e\u8a8d\u8a3c\u30e1\u30fc\u30eb\u3084\u30a2\u30ab\u30a6\u30f3\u30c8\u767a\u884c\u5b8c\u4e86\u30e1\u30fc\u30eb\u304c\u5c4a\u304f\u306e\u3092\u5f85\u3061\u307e\u3059\u3002<\/p>\n<h2 id=\"rtoc-11\" >\u6700\u5f8c\u306b<\/h2>\n<p>\u3044\u304b\u304c\u3067\u3057\u305f\u3067\u3057\u3087\u3046\u304b\uff1f<br \/>\n\u79c1\u306f\u7279\u306b\u74b0\u5883\u69cb\u7bc9\u306e\u3068\u3053\u308d\u3067\u82e6\u6226\u3057\u305f\u306e\u3067\u3001\u8ab0\u304b\u306e\u304a\u5f79\u306b\u7acb\u3066\u308c\u3070\u5e78\u3044\u3067\u3059 :relaxed: <\/p>\n<h2 id=\"rtoc-12\" >\u53c2\u8003<\/h2>\n<ul>\n<li><a href=\"https:\/\/github.com\/aws-ia\/terraform-aws-control_tower_account_factory\">https:\/\/github.com\/aws-ia\/terraform-aws-control_tower_account_factory<\/a><\/li>\n<li><a href=\"https:\/\/dev.classmethod.jp\/articles\/ct-account-factory-for-terraform\/\">\u3064\u3044\u306bControl Tower\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u767a\u884c\u304b\u3089\u30ab\u30b9\u30bf\u30de\u30a4\u30ba\u307e\u3067IaC\u5bfe\u5fdc\uff01Account Factory for Terraform (AFT)\u304c\u65b0\u767b\u5834 #reinvent<\/a><\/li>\n<li><a href=\"https:\/\/developer.hashicorp.com\/terraform\/tutorials\/aws\/aws-control-tower-aft\">Manage AWS Accounts Using Control Tower Account Factory for Terraform<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u76ee\u6b21 \u306f\u3058\u3081\u306b\u524d\u63d0\u6761\u4ef6\u305d\u3082\u305d\u3082AFT\u3063\u3066\uff1f\u74b0\u5883\u69cb\u7bc9\u3084\u3063\u3066\u307f\u308b1. OU\u3068AFT\u7ba1\u7406\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u6e96\u5099\u3059\u308b2. \u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u6e96\u5099\u3059\u308b3. \u5404\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6\u3059\u308b4. Terraform\u3092\u5b9f\u884c\u3059\u308b5. Github\u306e\u30b3\u30cd\u30af\u30bf\u30fc\u3092 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":5204,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jinr_url_youtube":"","_jinr_pip_youtube":false,"_jinr_time_youtube":"","_jinr_thumb_youtube":"","_jinr_media_youtube":"","_jinr_category_edit":false,"_jinr_category":"","_jinr_title_display":false,"_jinr_snsbutton_display":false,"_jinr_ads_display":false,"_jinr_thumbnail_display":false,"_jinr_profile_display":false,"_jinr_relatedpost_display":false,"_jinr_sidebar1col_display":false,"_jinr_sidebar2col_display":false,"_jinr_seotitle_display":"","_jinr_description_display":"","_jinr_keyword_display":"","_jinr_hastag_display":"","_jinr_canonical_display":"","_jinr_noindex_display":false,"_jinr_paidpost":false,"_jinr_paidpost_product_id":"","_jinr_headtag_article":""},"categories":[3],"tags":[98,16,66,60],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/posts\/5126"}],"collection":[{"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/comments?post=5126"}],"version-history":[{"count":1,"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/posts\/5126\/revisions"}],"predecessor-version":[{"id":5205,"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/posts\/5126\/revisions\/5205"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/media\/5204"}],"wp:attachment":[{"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/media?parent=5126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/categories?post=5126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-mordpress.test.mmmcorp.co.jp\/wp-json\/wp\/v2\/tags?post=5126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}