한화생명의 혁신적인 디지털 조직인 플랫폼 개발팀은 하이브리드 랜딩 존을 활용한 DevSecOps와 AWS EKS를 활용한 MSA 기반의 AWS의 하이브리드 클라우드 플랫폼을 20여 개 이상의 디지털 서비스를 보헙업계에 Agile하게 선보이고 있으며, 특히 국내 최초로 AWS Outposts를 선택하여 금융권의 주목을 끌었습니다. 한화생명은 빠르게 변화하는 시장의 요건을 충족하기 위해 플랫폼 개발팀에서 플랫폼을 내재화하여, 정책 결정이나 기술적 아키텍처 설계 등 핵심 업무를 직접 담당하며 운영하고 있습니다. 이 Agile한 개발 조직 문화가 AWS 하이브리드 클라우드 플랫폼과 함께 어떠한 시너지를 만들고 있는지 플랫폼 개발팀의 사례를 통해 공유드립니다.

1. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
S E O U L | M A Y 3 , 2 0 2 3

2. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
DTC Solutions Architect
AWS
-
Agile

3. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Speaker
•
▪ AWS Solutions Architect
▪
▪ Enterprise
•
▪ DTC Product team COE Division Head
▪ Software Engineer
▪

4. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Digital Transformation Digital Technology
Technology
Process
People
Ways of
working
Culture
CORE OF DIGITAL TRANSFORMATION

5. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
+
KSQI KSQI
129.5 184.6%
Since 1946
#2
14 AAA
* NICE ,
*
13
*
14 1
*
8
PJT
*2020 6

6. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agenda
Agile
Agile

7. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agile

8. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
- 2019
/
IT 2.0
(Agile)
IT
IT
IT

9. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
A G I L E 과 C L O U D

10. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agile Transformation
Agile
Agile Agile Agile

11. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Focus on
! ! !
/ IT
/ SI
Outsourcing Insourcing

12. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agile

13. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Overview
,
클라우드
Agile
업무도구
레거시
DTC
On HCP
On HCP
HCP: Hybrid Cloud Platform
DTC: Direct To Customer

14. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Overview
! !
HCP
Support CI/CD Computing
DTC
GA

15. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Direct To Consumer
BE, 16
UX기획, 12
UI디자인, 11
FE, 10
DevOps, 5
AOS, 5
iOS, 4
QA, 3
마크업, 2
2023년 현재
: DTC

16. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agile ? Agile ?
A G I L E …
!

17. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
스파게티 코드
점진적인 대체 구현 feat. MSA
경직된 인프라,
낙후된 기술 스택
인내심 필수!
점진적 MSA 이행

18. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
: IT
…
01 02 03 04
IT
• 1 : 1
•
•
vs. vs.
•
•

19. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
CMS
: -
!

20. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.

21. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
... ?
2
1.5x 2.5x 2p+ 40%

22. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
“

23. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.

24. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.

25. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.

26. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS
Amazon Elastic
Kubernetes Service
AWS Outposts

27. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon Elastic Kubernetes Service
upstream Kubernetes
AWS services
KUBERNETES SERVICE

28. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon EKS Key point
• AWS TGW
•
• AWS PrivateLink
• DR Multi-AZ
• Application Pipeline
• Spinnaker, Nexus, Kong, Vault, Grafana,
Prometheus,
•
AMAZON EKS

29. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon EKS Security
Container Image
Security
Access Control &
Auditing
Host Security Runtime Security Network Security
•
•
• Amazon ECR Image
scanning
• Amazon Inspector
• Container
purpose-built OS
(AWS Bottlerocket)
• Seccomp profile
System call
• AppArmor
Container host
• Network Policy
pod level
• Security Group for pod
• Host level NACL,
Network Firewall
• AWS IAM & Service Account
를 기반으로한 권한 관리
• CloudTrail EKS Audit log
• GuardDuty
Amazon EKS Audit log
AMAZON EKS

30. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon ECR
AMAZON ECR
AWS Cloud
Availability Zone
VPC
Availability Zone Availability Zone
Amazon ECR
Compute
Push
Pull
Amazon EKS Amazon ECS AWS Fargate
On premises and
other clouds
Amazon EC2

31. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon ECR Enhanced scanning
AMAZON INSPECTOR와 연계한 강화된 스캐닝 기능
AWS Cloud Amazon ECR Registry
Region
1 2
image push
scanning
Amazon Inspector OS
Application
Client
Amazon Inspector
3
4
Amazon Inspector
AWS Security Hub
AWS Security Hub

32. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
하이브리드 클라우드

33. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Outpost
RUN AWS SERVICES
LOCALLY
Amazon RDS
CloudEndure
Amazon EMR
Amazon EBS Local Snapshots
Application
Load Balancer (ALB)
Amazon
Elasticache
Amazon
EKS
Amazon ECS
Amazon
S3
Amazon EC2
Amazon EBS
• On-premise AWS
• AWS AWS
,
• AWS
API
• AWS
ON-PREMISE

34. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Outpost Key point
AWS Cloud
(Seoul Region)
AZ#1 AZ#2 Outposts
Local Zone
AWS Outpost (Private)
VPC Shared
- GOV
- DevOps
( )
AWS
Transit Gateway
VPC B
VPC C
Legacy
System
x86 NBP Private Cloud
LGW
VPC A
CMP
(Cloud Managed Portal)
CICD
(관리포탈/솔루션)
✓ Cloud
✓ Cloud
✓ Amazon EC2
✓ Application

35. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
DevSecOps in
DEVSECOPS PIPELINE APPLICATION
Sourcepush Code
Running
IaCcodepush Terraform apply
Application

36. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Observability for Cloud infrastructure
OBSERVABILITY SERVICE
AWS Lambda
Security Group Scanning Login History
Scanning
Amazon GuardDuty
Amazon OpenSearch
Application log, ETL log
log

37. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Agile AWS
Digital Transformation
.
Summary

38. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.