20250903_1つのAWSアカウントに複数システムがある環境におけるアクセス制御をABACで実現.pdf

Transcript

1. ͭͷ"84ΞΧ΢ϯτʹ ෳ਺γεςϜ͕͋Δ؀ڥʹ͓͚Δ ΞΫηε੍ޚΛ"#"$Ͱ࣮ݱ ZIBOB Ϋϥεϝιουגࣜձࣾ Ϋϥ΢υࣄۀຊ෦
2. ࠓ೔࿩͢͜ͱ  ࣍ͷΑ͏ͳ "84
   ΞΧ΢ϯτʹରͯ͠ɺࣗ਎ͷϓϩδΣΫτʹؔ࿈͢ΔϦιʔ ε͚ͩૢ࡞Մೳʹ͢Δӡ༻ऀ޲͚ͷΞΫηε੍ޚͷํ๏Λ঺հ͠·͢ʢ˞ʣ l ୯Ұ "84
   ΞΧ΢ϯτʹෳ਺ͷϓϩδΣΫτʢγεςϜʣ͕ࠞࡏ͢Δ؀ڥ l ΞΧ΢ϯτ಺ʹ୯ҰϓϩδΣΫτͷ৔߹Ͱ΋ෳ਺ͷؔ܎ձ͕ࣾؔ༩͢Δ؀ڥ ˞
   ͋Δఔ౓ *".
   ͷ஌͕ࣝ͋Δલఏͷ಺༰Ͱ͢
3. ࠓ೔࿩͢͜ͱ  "#"$ʢ"UUSJCVUF#BTFE
   "DDFTT
   $POUSPMɿଐੑϕʔεͷΞΫηε੍ޚʣΛ ར༻͢Δํ๏ͷ঺հͰ͢ Ҿ༻ݩɿ"#"$
   ೝՄͰଐੑʹج͍ͮͯΞΫηεڐՄΛఆٛ͢Δ  "84
   *EFOUJUZ
   BOE
   "DDFTT
   .BOBHFNFOU
4. ΋͘͡  l "84
   *".
   ʹ͓͚Δ "#"$ l "84
   *".
   *EFOUJUZ
   $FOUFS
   ʹ͓͚Δ "#"$ l "#"$
   ͷ 5JQT
   
   ςΫχοΫू
5. "84
   *".
   ʹ͓͚Δ "#"$
6. "84
   *".
   ͷ "#"$
   ͸λάͰ੍ޚ  *".
   ϢʔβʔͷλάͱϦιʔεͷλάͷҰகʹΑΓૢ࡞ͷڐՄ͕Մೳ
7. *".
   ϙϦγʔͷྫ  { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:List*", "ec2:Describe*", "ec2:Get*"], "Resource": "*" }, { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances", "ec2:RebootInstances"], "Resource": "*", "Condition": { "StringEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } 1SPKFDU
   λάͷ஋ͷҰகΑΓ &$
   Πϯελϯεͷىಈɾ ఀࢭΛڐՄ͢ΔϙϦγʔྫ
8. "84
   Ϛωδϝϯτίϯιʔϧ্ͷݟ͑ํ  Ϛωδϝϯτίϯιʔϧ্Ͱ ࣗ਎ͷϓϩδΣΫτͰ͸ͳ͍ λά͕Ұக͠ͳ͍
   &$
   ΠϯελϯεΛఀࢭ͠Α͏ͱ ͨ͠ͱ͖ͷΤϥʔը໘
9. "#"$
   ͷϝϦοτ  l ؅ཧ͢ΔϙϦγʔ͕গͳ͘ͳΔ l ར༻ͷ֦େʹ߹Θͤͯεέʔϧ͠΍͍͢
10. *".
    ϢʔβʔͷλάΛར༻͢Δ৔߹ͷ՝୊  *".
    Ϣʔβʔʹରͯ͠ɺಉ͡ ,FZ
    ໊ͷλά͸ 
    ͭͷΈͷઃఆͱͳΔͨΊɺ ෳ਺ϓϩδΣΫτʹؔ༩͍ͯ͠Δར༻ऀ͸ෳ਺ͷ *".
    Ϣʔβʔͷ࢖͍෼͚΍ *".
    Ϣʔβʔͷ࢖͍ճ͕͠ඞཁͱͳΔ
11. *".
    Ϣʔβʔͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏  ղܾઌͱͯ͠ɺϓϩδΣΫτຖʹ *".
    ϩʔϧΛ༻ҙͯ͠ *".
    Ϣʔβʔ͔Β εΠονϩʔϧͯ͠ར༻͢Δํ๏͕͋Δ
12. *".
    Ϣʔβʔͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏  *".
    ϩʔϧͷڐՄϙϦγʔ͸ ɺ*".
    ϢʔβʔͷλάΛར༻͢Δ৔߹ͱಉ༷ʹ ڞ௨ͷ *".
    ϙϦγʔͰ࣮ݱ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:List*", "ec2:Describe*", "ec2:Get*"], "Resource": "*" }, { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances", "ec2:RebootInstances"], "Resource": "*", "Condition": { "StringEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } ڐՄϙϦγʔ ৴པϙϦγʔ ڐՄϙϦγʔ ৴པϙϦγʔ
13. *".
    Ϣʔβʔͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏  *".
    ϩʔϧͷ৴པϙϦγʔʹ͓͍ͯɺεΠονϩʔϧͰ͖ΔϢʔβʔΛ੍ݶ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": [ "arn:aws:iam::111122223333:user/test-user", "arn:aws:iam::111122223333:user/test-user2" ] }, "Action": "sts:AssumeRole",} ] } ڐՄϙϦγʔ ৴པϙϦγʔ
14. "84
    ΞΧ΢ϯτͷߏ੒  *".
    Ϣʔβʔͱ *".
    ϩʔϧ͸ಉҰ "84
    ΞΧ΢ϯτ಺Ͱߏ੒Մೳ
15. "84
    ΞΧ΢ϯτͷߏ੒  *".
    Ϣʔβʔͱ *".
    ϩʔϧΛҟͳΔ "84
    ΞΧ΢ϯτͰߏ੒΋Մೳ
16. *".
    ϢʔβʔΛҰݩ؅ཧ͢ΔΞΧ΢ϯτΛ࡞Δ৔߹  *".
    ϢʔβʔΛू໿͢ΔϢʔβʔ؅ཧΞΧ΢ϯτʢผ໊ɿ+VNQ
    ΞΧ΢ϯτʣ Λ࡞੒͢Δϊ΢ϋ΢͸ࡢ೥ͷొஃࢿྉΛࢀর͍ͩ͘͞ IUUQTEFWDMBTTNFUIPEKQBSUJDMFT NVMUJBDDPVOUVTFSNBOBHFNFOU
17. "84
    *".
    *EFOUJUZ
    $FOUFS
    ʹ͓͚Δ "#"$
18. "84
    *".
    *EFOUJUZ
    $FOUFS
    ͸ϢʔβʔଐੑΛར༻  ϢʔβʔͷଐੑΩʔͱ஋Λ "#"$
    ʹར༻ʢར༻Ͱ͖Δଐੑʹ੍ݶ͋Γʣ
19. "84
    *".
    *EFOUJUZ
    $FOUFS
    ͸ϢʔβʔଐੑΛར༻  ϢʔβʔͷଐੑΩʔͱ஋Λ "#"$
    ʹར༻ʢར༻Ͱ͖Δଐੑʹ੍ݶ͋Γʣ
20. "84
    *".
    *EFOUJUZ
    $FOUFS
    ͸ϢʔβʔଐੑΛར༻  *".
    *EFOUJUZ
    $FOUFS
    ͷઃఆͰɺ೚ҙͷΩʔ໊ͷ஋ͱͯ͠ଐੑͷ஋Λؔ࿈෇͚
21. { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:List*", "ec2:Describe*", "ec2:Get*"], "Resource": "*" }, { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances", "ec2:RebootInstances"], "Resource": "*", "Condition": { "StringEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } "84
    *".
    *EFOUJUZ
    $FOUFS
    ͸ϢʔβʔଐੑΛར༻  ΞΫηεڐՄηοτʹؔ࿈෇͚ΔϙϦγʔͰ 1SPKFDU
    ΩʔΛࢦఆ
22. ϢʔβʔͷଐੑΩʔΛར༻͢Δ৔߹ͷ՝୊  *".
    *EFOUJUZ
    $FOUFS
    ϢʔβʔͷଐੑΩʔ͝ͱʹઃఆͰ͖Δ஋͸ 
    ͭͷΈ ͦͷͨΊɺෳ਺ϓϩδΣΫτʹؔ༩͢Δར༻ऀ͸ϓϩδΣΫτຖʹ࡞੒͞Εͨ Ϣʔβʔͷ࢖͍෼͚΍Ϣʔβʔͷ࢖͍ճ͠౳͕ඞཁͱͳΔ
23.  ղܾઌͱͯ͠ɺ"#"$
    Ͱ੍ޚ͍ͨ͠ΞΧ΢ϯτʹ͓͍ͯɺϓϩδΣΫτຖʹ *".
    ϩʔϧΛ༻ҙͯ͠εΠονϩʔϧͯ͠ར༻͢Δํ๏͕͋Δ *".
    *EFOUJUZ
    $FOUFS
    ͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏
24. *".
    *EFOUJUZ
    $FOUFS
    ͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏  "84
    ΞΫηεϙʔλϧ͔ΒϚωδϝϯτίϯιʔϧ΁ͷը໘ભҠΠϝʔδ スイッチロール
25.  { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "sts:AssumeRole", "Resource": "*" } ] } ΞΫηεڐՄηοτʹ͸εΠονϩʔϧͰ͖ΔݖݶΛΞλον ΞΫηεڐՄηοτʹ Ξλον͢ΔϙϦγʔ *".
    *EFOUJUZ
    $FOUFS
    ͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏
26.  લड़ͨ͠ *".
    ϢʔβʔϩʔϧͷλάΛ࢖͏৔߹ͱ ಉ༷ͷϙϦγʔ *".
    ϩʔϧͷڐՄϙϦγʔ͸ɺ*".
    ϢʔβʔϩʔϧΛ૊Έ߹Θͤͯ ར༻͢Δ৔߹ͱಉ͡ϙϦγʔͰ࣮ݱՄೳ ڐՄϙϦγʔ ৴པϙϦγʔ ڐՄϙϦγʔ ৴པϙϦγʔ *".
    *EFOUJUZ
    $FOUFS
    ͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏
27. *".
    ϩʔϧͷ৴པϙϦγʔͰ͸ɺ1SJODJQBM
    ʹΞΫηεڐՄηοτʹରԠ͢Δ *".
    ϩʔϧΛࢦఆ͠ɺ$POEJUJPO
    ͰεΠονϩʔϧͰ͖ΔϢʔβʔΛ੍ޚ  { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::111122223333:role/aws- reserved/sso.amazonaws.com/ap-northeast- 1/AWSReservedSSO_AssumeRoleOnlyAccess_22e9e155f6d2118f" }, "Action": "sts:AssumeRole", "Condition": { "StringLike": { "identitystore:UserId": [ ”aaaaaaaa-1111-aaaa-1111-aaaaaaaaaaaa", ”bbbbbbbb-2222-bbbb-2222-bbbbbbbbbbbb" ] } } } ڐՄϙϦγʔ ৴པϙϦγʔ *".
    *EFOUJUZ
    $FOUFS
    ͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏
28.  *".
    *EFOUJUZ
    $FOUFS
    Ϣʔβʔʹ͸ଐੑ৘ใͷઃఆ͸ෆཁ *".
    *EFOUJUZ
    $FOUFS
    ͱ *".
    ϩʔϧΛ૊Έ߹ͤͨํ๏
29. "#"$
    ͷ 5JQT
    
    ςΫχοΫू
30. "#"$
    ʹରԠ͍ͯ͠ΔαʔϏε͔ Ͳ͏͔ௐ΂Δํ๏
31. "84
    ϢʔβʔΨΠυͰ "#"$
    ରԠ༗ແΛௐࠪ  ֤αʔϏε͕ "#"$
    ʹରԠ͍ͯ͠Δ͔Ͳ͏͔͸ϢʔβʔΨΠυʹهࡌ͕͋Δ Ҿ༻ݩɿ*".
    ͱ࿈ܞ͢Δ "84
    ͷαʔϏε  "84
    *EFOUJUZ
    BOE
    "DDFTT
    .BOBHFNFOU
32. ϢʔβʔΨΠυʹϙϦγʔྫͷهࡌ͕͋Δ৔߹΋  αʔϏεʹΑͬͯ͸ϢʔβʔΨΠυʹ "#"$
    ͷϙϦγʔྫͷܝࡌ΋͋Δ Ҿ༻ݩɿଐੑϕʔεͷΞΫηε੍ޚ "#"$
    Λ࢖༻ͯ͠γʔΫϨοτ΁ͷΞΫηεΛ੍ޚ͢Δ  "84
    4FDSFUT
    .BOBHFS
33. ෳ਺ͷλάͷ৚݅Ͱ "#"$
34. ෳ਺ͷλάͷҰகʹΑΓ੍ޚ  ෳ਺ͷλάΛ৚݅ͱ͢Δ͜ͱ΋ՄೳʢԼਤ͸ 
    ͭͷλάΛ৚݅ͱ͍ͯ͠Δྫʣ
35. ෳ਺ͷλάͷҰகʹΑΓ੍ޚ  ෳ਺ͷλάΛ৚݅ͱ͢Δ͜ͱ΋ՄೳʢԼਤ͸ 
    ͭͷλάΛ৚݅ͱ͍ͯ͠Δྫʣ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:List*", "ec2:Describe*", "ec2:Get*"], "Resource": "*" }, { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances", "ec2:RebootInstances"], "Resource": "*", "Condition": { "StringEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}", "aws:ResourceTag/Environment": "${aws:PrincipalTag/Environment}" } } } ] } ڐՄϙϦγʔ ৴པϙϦγʔ
36. $POEJUJPO
    ͷධՁϩδοΫ  ෳ਺ͷ৚݅Ͱ࣮ݱ͍ͨ͠৔߹͸ɺ$POEJUJPO
    ͷධՁϩδοΫΛߟྀͯ͠ઃܭ͢Δ Ҿ༻ݩɿෳ਺ͷίϯςΩετΩʔ·ͨ͸஋ʹΑΔ৚݅  "84
    *EFOUJUZ
    BOE
    "DDFTT
    .BOBHFNFOU
37. "#"$
    Ͱ੍ޚ͢Δ "DUJPO
    Λ ϫΠϧυΧʔυͰࢦఆ
38. "DUJPO
    ΛϫΠϧυΧʔυͰࢦఆ΋Մೳ  "DUJPO
    ΛʮFD ʯͱهࡌͯ͠ର৅αʔϏεͷ͢΂ͯͷΞΫγϣϯΛؚΊΔ ϫΠϧυΧʔυࢦఆ΋Մೳ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:List*", "ec2:Describe*", "ec2:Get*"], "Resource": "*" }, { "Effect": "Allow", "Action": "ec2:*", "Resource": "*", "Condition": { "StringEquals": { ”aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } ڐՄϙϦγʔ ৴པϙϦγʔ ڐՄϙϦγʔ ৴པϙϦγʔ
39. ϫΠϧυΧʔυࢦఆͷཹҙ఺  ϫΠϧυΧʔυࢦఆ͸༰қʹ࣮ݱͰ͖ΔҰํͰɺ༩͑ΔݖݶΛ೺Ѳͮ͠Β͘ͳΔ ఺ʹ͸ཹҙ͕ඞཁ l কདྷతʹ௥Ճ͞ΕΔ৽͍͠ΞΫγϣϯ΋ࣗಈతʹڐՄ͞ΕΔ l ༧ظ͠ͳ͍ΞΫγϣϯ΋ڐՄ͞ΕΔՄೳੑ͕͋Δ ◦ ྫ͑͹ɺʮFD ʯʹ͸ 71$
    ʹؔ͢Δݖݶ΋ؚ·Ε͍ͯΔ l BXT3FTPVSDF5BH
    Λαϙʔτ͍ͯ͠ͳ͍ "DUJPO
    ͷ "MMPX
    ͸ڐՄ͞Εͳ͍ ◦ ྫ͑͹ɺʮFD$SFBUF7QDʯ͸ڐՄ͞Εͳ͍
40. 4
    ͷ "#"$ ؔ࿈ϒϩάɿ*".
    ϩʔϧͷλάͷ஋ͱ 4
    όέοτ໊ͷ෦෼ҰகͰૢ࡞Ͱ͖Δ 4
    όέοτΛ੍ݶͯ͠Έͨ c
    %FWFMPQFST*0 ʲ"#"$ʳ4Ͱλάϕʔε੍ޚΛߦ͏ ੍ݶ͋Γ
    c
    %FWFMPQFST*0
41. 4
    ͷ "#"$
    ରԠ͸෦෼త  4
    ͷ "#"$
    ͸෦෼తͳରԠͰ͋Γɺ൚༻όέοτ͸ະαϙʔτɺΦϒδΣΫτ ͸αϙʔτର৅ͱͳΔ Ҿ༻ݩɿ*".
    ͱ࿈ܞ͢Δ "84
    ͷαʔϏε  "84
    *EFOUJUZ
    BOE
    "DDFTT
    .BOBHFNFOU
42. 4
    ΦϒδΣΫτͷ "#"$  4
    ͸ΦϒδΣΫτຖͰλά෇͚͕Ͱ͖ɺΦϒδΣΫτͷλάΛར༻੍ͯ͠ޚՄೳ
43. 4
    ΦϒδΣΫτͷ "#"$  4
    ͸ΦϒδΣΫτ୯ҐͰλά෇͚͕Ͱ͖ɺΦϒδΣΫτͷλάΛར༻ͯ͠ ΞΫηε੍ޚ͕Ͱ͖Δ ڐՄϙϦγʔ ৴པϙϦγʔ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["s3:List*", "s3:GetBucketLocation"], "Resource": "*" }, { "Effect": "Allow", "Action": "s3:*", "Resource": "*", "Condition": { "StringEquals": { "s3:ExistingObjectTag/Project": "${aws:PrincipalTag/Project}" } } } ] }
44. 4
    ΦϒδΣΫτͷ "#"$  4
    ΦϒδΣΫτͷ "#"$
    Ͱ͸ BXT
    ͷ୅ΘΓʹ T
    Λར༻ Ҿ༻ݩɿ"NB[PO
    4
    Ͱͷ *".
    ͷػೳ  "NB[PO
    4JNQMF
    4UPSBHF
    4FSWJDF
45. 4
    ΦϒδΣΫτͷλά෇͚ͷ՝୊  4
    ΦϒδΣΫτͷλά෇͚ʹؔͯ͠ɺ࣍ͷ಺༰͕՝୊ͱͳΔ͜ͱ͕͋Δ l ΦϒδΣΫτʹλά෇͚͢Δखؒ l ΦϒδΣΫτͷλά෇͚͸༗ྉ Ҿ༻ݩɿྉۚ  "NB[PO
    4
    ʛ"84
46. 4
    όέοτ໊Λར༻੍ͨ͠ޚ  ୅ସࡦͱͯ͠ʮ4
    όέοτ໊ʯʹ *".
    ϩʔϧͷ "#"$
    ༻λάͷ஋ؚ͕·Εͯ ͍Δ͜ͱΛ৚݅ͱ੍ͨ͠ޚͷํ๏͕͋Δ
47. 4
    όέοτ໊Λར༻੍ͨ͠ޚ  *".
    ͷڐՄϙϦγʔʹ͓͍ͯɺ3FTPVSDF
    ಺Ͱλάͷ஋Λಈతʹࢀর όέοτ໊ʹλάͷ஋ؚ͕·ΕΔҐஔ͸Ϧιʔε໋໊نଇʹґଘ ڐՄϙϦγʔ ৴པϙϦγʔ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["s3:List*", "s3:GetBucketLocation"], "Resource": "*" }, { "Effect": "Allow", "Action": "s3:*", "Resource": [ "arn:aws:s3:::*-${aws:PrincipalTag/Project}-*", "arn:aws:s3:::*-${aws:PrincipalTag/Project}-*/*" ] } ] }
48. 4
    όέοτ໊Λར༻੍ͨ͠ޚ  ൚༻όέοτͷϥΠϑαΠΫϧϧʔϧ΍ϓϩύςΟͷมߋ΋Մೳ
49. λά͕෇༩͞Ε͍ͯΔϦιʔεͷΈ "#"$
    Ͱ੍ޚ͢Δํ๏ ؔ࿈ϒϩάɿ"NB[PO
    $MPVE8BUDI
    ϩάάϧʔϓʹରͯ͠ "#"$
    ༻λά͕͋Δ৔߹͸ "#"$
    ʹΑΓಡΈऔΓڐՄΛ੍ޚͯ͠ɺ"#"$
    ༻ λά͕ͳ͍৔߹͸ಡΈऔΓΛڐՄ͢ΔϙϦγʔΛࢼͯ͠Έͨ c
    %FWFMPQFST*0
50. λά͕͋ΔϦιʔεͷΈ "#"$
    Ͱ੍ޚ͢Δํ๏  ͜Ε·Ͱ঺հ͖ͯͨ͠ɺλάͷҰகͰΞΫγϣϯΛڐՄ͢ΔϙϦγʔͰ͸ɺ λά͕ͳ͍Ϧιʔεʹର͢Δૢ࡞ͷڐՄ͸༩͑ΒΕͳ͍
51. λά͕͋ΔϦιʔεͷΈ "#"$
    Ͱ੍ޚ͢Δํ๏  ҰํͰɺ$MPVE8BUDI
    -PHT
    ͳͲͷαʔϏεʹ͓͍ͯɺಛʹอޢ͍ͨ͠Ϧιʔε ͷΈ "#"$
    Ͱ੍ޚ͍ͨ͠৔߹΋͋Δ
52. λά͕͋ΔϦιʔεͷΈ "#"$
    Ͱ੍ޚ͢Δํ๏  ಡΈऔΓݖݶ
    λά͕ଘࡏ͔ͭλά஋͕Ұக͠ͳ͍৔߹ʹ໌ࣔతͳ %FOZ
    ͱ͢Δ ͜ͱͰ࣮ݱՄೳ { "Version": "2012-10-17", "Statement": [ { "Effect": "Deny", "Action": ["logs:Get*", "logs:FilterLogEvents", "logs:StartQuery", "logs:StopQuery", "logs:StartLiveTail", "logs:StopLiveTail", "logs:TestMetricFilter"], "Resource": "arn:aws:logs:*:*:log-group:*", "Condition": { "Null": { "aws:ResourceTag/Project": "false" }, "StringNotEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } ڐՄϙϦγʔ ৴པϙϦγʔ ʮ$MPVE8BUDI-PHT3FBE0OMZ"DDFTTʯ౳ͷಡΈऔΓݖݶ
53. { "Version": "2012-10-17", "Statement": [ { "Effect": "Deny", "Action": ["logs:Get*", "logs:FilterLogEvents", "logs:StartQuery", "logs:StopQuery", "logs:StartLiveTail", "logs:StopLiveTail", "logs:TestMetricFilter"], "Resource": "arn:aws:logs:*:*:log-group:*", "Condition": { "Null": { "aws:ResourceTag/Project": "false" }, "StringNotEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } λά͕͋ΔϦιʔεͷΈ "#"$
    Ͱ੍ޚ͢Δํ๏  $POEJUJPO
    ͸Լهͷ "OE
    ৚͕݅ຬͨ͞Εͨ৔߹ʹ໌ࣔతʹ %FOZ
    l ର৅Ϧιʔεʹ 1SPKFDU
    λά͕ଘࡏ͢Δʢ/VMM
    ͸ USVF
    Ͱଘࡏ͠ͳ͍ʣ l 1SJODJQBM
    *".
    ϩʔϧ౳
    ͱର৅Ϧιʔεͷ 1SPKFDU
    λάͷ஋͕Ұக͠ͳ͍
54. λά͕͋ΔϦιʔεͷΈ "#"$
    Ͱ੍ޚ͢Δํ๏  ݖݶͷΠϝʔδਤ ಡΈऔΓΛڐՄ $MPVE8BUDI-PHT3FBE0OMZ"DDFTT "#"$
    Ͱ ໌ࣔతʹڋ൱
55. "#"$
    ͱڞʹ༻͍Δ ಡΈऔΓݖݶͷύλʔϯ
56. ಡΈऔΓݖݶͷ෇༩ύλʔϯ "#"$
    Ͱ੍ޚ͢ΔαʔϏεʹؔ͢ΔಡΈऔΓݖݶΛҰॹʹ༩͑Δඞཁ͕͋Δ ಡΈऔΓݖݶ͸ɺ࠷খݖݶͱ͢Δํ๏΍ "84
    ؅ཧϙϦγʔΛར༻͢Δํ๏ͳͲ ͕͋Δ /P ํ๏ ݖݶͷ޿͞ ؅ཧͷखؒ උߟ  ඞཁ࠷খݶͷΞΫγϣϯͷΈࢦఆ ࠷খ େ   -JTU
    %FTDSJCF
    (FU
    ୯ҐͰࢦఆ ݶఆత த /P
    ͱಉ༷ͱͳΔ͜ͱ΋͋Δ  ֤αʔϏεʹରԠͨ͠ "84
    ؅ཧϙϦγʔ ͷಡΈऔΓݖݶ ݶఆత খ "NB[PO&$3FBE0OMZ"DDFTT
    ౳  "84
    ؅ཧϙϦγʔʮ3FBE0OMZ"DDFTTʯ ޿Ҭ খ 4
    ΦϒδΣΫτΛμ΢ϯϩʔυͰ ͖Δݖݶ΋ؚ·ΕΔ 
57. 
    ඞཁ࠷খݶͷΞΫγϣϯͷΈࢦఆ ࠷খݖݶΛ࣮ݱͰ͖Δ͕ɺௐࠪʹख͕͔͔ؒΔ఺΍ɺϚωδϝϯτίϯιʔϧ্ Ͱݖݶ͕ແ͍Ӿཡʹର͢ΔΤϥʔϝοηʔδʹΑΓࢹೝੑ͕མͪΔ఺͕ݒ೦ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "ec2:DescribeInstances", "Resource": "*" }, { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances", "ec2:RebootInstances"], "Resource": "*", "Condition": { "StringEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } 
58. 
    -JTU
    %FTDSJCF
    (FU
    ୯ҐͰࢦఆ -JTU
    %FTDSJCF
    (FU
    ؔ࿈ΞΫγϣϯΛϫΠϧυΧʔυͰ·ͱΊͯڐՄ (FU
    ܥΞΫγϣϯʹ͸σʔλμ΢ϯϩʔυؚ͕·ΕΔ͜ͱ΋͋Δ఺ʹ͸ཁ஫ҙ  { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:List*", "ec2:Describe*", "ec2:Get*"], "Resource": "*" }, { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances", "ec2:RebootInstances"], "Resource": "*", "Condition": { "StringEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } ࠷খݖݶͱൺֱͯ͠ɺӾཡ࣌ʹΤϥʔϝοηʔδ͕ දࣔ͞ΕΔ͜ͱ͸গͳ͍
59. 
    -JTU
    %FTDSJCF
    (FU
    ୯ҐͰࢦఆ ಡΈऔΓݖݶʹؔ͢Δ -JTU
    %FTDSJCF
    (FU
    ΞΫγϣϯͷ֬ೝ͸ɺ *".
    ϙϦγʔ࡞੒࣌ͷϙϦγʔΤσΟλʢϏδϡΞϧʣ͕ચ͍ग़͠ͷࢀߟʹͳΔ 
60. 
    ֤αʔϏεʹରԠͨ͠ "84
    ؅ཧϙϦγʔͷಡΈऔΓݖݶ "84
    ؅ཧϙϦγʔͷ֤αʔϏεʹରԠͨ͠ಡΈऔΓݖݶΛར༻͢Δ͜ͱͰɺ ϙϦγʔͷϝϯςϯεΛ͢Δඞཁ͕ͳ͘ͳΔϝϦοτ͋Γ  { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances", "ec2:RebootInstances"], "Resource": "*", "Condition": { "StringEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } "84
    ؅ཧϙϦγʔʮ"NB[PO&$3FBE0OMZ"DDFTTʯ FD
    Ҏ֎ʹ΋ؔ࿈͢ΔαʔϏεͷ Ұ෦ΞΫγϣϯ΋ؚ·Ε͍ͯΔ l FMBTUJDMPBECBMBODJOH%FTDSJCF l DMPVEXBUDI-JTU.FUSJDT l DMPVEXBUDI(FU.FUSJD4UBUJTUJDT l DMPVEXBUDI%FTDSJCF l BVUPTDBMJOH%FTDSJCF
61. 
    ֤αʔϏεʹରԠͨ͠ "84
    ؅ཧϙϦγʔͷಡΈऔΓݖݶ *".
    ϩʔϧʹΞλονͰ͖Δ *".
    ϙϦγʔͷ্ݶ͸ 
    ͷͨΊɺ ෳ਺ͷαʔϏεΛ 
    ͭͷ *".
    ϩʔϧͰ੍ޚ͢Δ৔߹ʹ͸ཹҙ͕ඞཁ  Ҿ༻ݩɿ*".
    ͱ "84
    454ΫΥʔλ  "84
    *EFOUJUZ
    BOE
    "DDFTT
    .BOBHFNFOU
62. 
    "84
    ؅ཧϙϦγʔʮ3FBE0OMZ"DDFTTʯ "84
    શମͷಡΈऔΓݖݶ͕ 
    ͭͷϙϦγʔͰ࣮ݱͰ͖Δ఺͕ັྗ ҰํͰɺσʔλͷμ΢ϯϩʔυݖݶ͕Ұ෦ؚ·ΕͯΔ఺ʹ͸ཹҙ͕ඞཁ  { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:StartInstances", "ec2:StopInstances", "ec2:RebootInstances"], "Resource": "*", "Condition": { "StringEquals": { "aws:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } "84
    ؅ཧϙϦγʔʮ3FBE0OMZ"DDFTTʯ 4
    ΦϒδΣΫτͷμ΢ϯϩʔυͳͲɺ σʔλΛऔಘͰ͖Δݖݶ͕Ұ෦ؚ·ΕΔ "#"$
    Λಋೖ͢Δ "84
    ΞΧ΢ϯτͰ͸ɺ ෳ਺γεςϜ͕ࠞࡏ͍ͯ͠Δ͜ͱ͕ଟ͍ ͨΊɺؔ࿈͠ͳ͍γεςϜͷσʔλ͕औ ಘͰ͖Δ఺͕໰୊ͳ͍͔ͷ֬ೝ͸ඞཁ
63. λάͷ෇༩ϛεͷ௿ݮɾੋਖ਼ ؔ࿈ϒϩάɿ"84
    ͷλάΤσΟλΛར༻ͯ͠ίετ഑෼λάͷઃఆϛεͷमਖ਼΍طଘͷλά஋ͷҰׅมߋΛࢼͯ͠Έͨ c
    %FWFMPQFST*0
64. λάΤσΟλʹΑΔλάͷੋਖ਼  λάΤσΟλػೳΛར༻ͯ͠ɺλά෇༩ϛεͷमਖ਼͕Մೳ ྫ͑͹ɺ1SPKFDU
    λάʹؔ͢ΔԼදͷΑ͏ͳεϖϧϛεͷੋਖ਼ʹ໾ཱͭ ޡͬͨλάͷΩʔ໊ ޡ͍ͬͯΔཧ༝ QSPKFDU 1
    ͕খจࣈ 1SPKFU D
    ͕ൈ͚͍ͯΔ 1SPKFUD D
    ͱ U
    ͕ೖΕସΘ͍ͬͯΔ 1SPKFFDU F ͕ଟ͍ 1SPKFDUT ࠷ޙʹ T
    ͕͍͍ͭͯΔ <1SPKFDU
    > ࠷ޙʹεϖʔε͕ೖ͍ͬͯΔ <
    1SPKFDU> ࠷ॳʹεϖʔε͕ೖ͍ͬͯΔ
65. λάΤσΟλʹΑΔλάͷੋਖ਼  λάͷΩʔ໊Λࢦఆ͢ΔՕॴͰεϖϧϛεͷλάΛ֬ೝͰ͖Δ
66. λάΤσΟλʹΑΔλάͷੋਖ਼Πϝʔδ  ͦͷ··λάΤσΟλͰλάͷमਖ਼͕Մೳʢෳ਺ϦιʔεͷҰׅมߋ΋Մೳʣ ਖ਼͍͠λάΩʔ໊ͷλάΛ௥Ճ εϖϧϛεͷλάΩʔ໊ͷλάΛ࡟আ
67. λάΤσΟλʹΑΔλάͷੋਖ਼ͷࢀߟࢿྉ  λάΤσΟλΛར༻ͨ͠λάͷΩʔ໊ͷमਖ਼ύλʔϯͷ͍͔ͭ͘͸ ϒϩάͰ΋ެ։த IUUQTEFWDMBTTNFUIPEKQBSUJDMFTNPEJGZ DPTUBMMPDBUJPOUBHTJOUBHFEJUPS
68. "84
    0SHBOJ[BUJPOT
    ͷλάϙϦγʔ  "84
    0SHBOJ[BUJPOT
    ؀ڥʹݶΔ͕ɺλάϙϦγʔʹΑΓλάͷඪ४Խ͕Մೳ λάΩʔͷେจࣈɾখจࣈͷ౷Ұ΍λά஋ͱͯ͠ೖྗͰ͖Δ஋ͷࢦఆ͕Մೳ
69. "84
    0SHBOJ[BUJPOT
    ͷλάϙϦγʔ  "84
    0SHBOJ[BUJPOT
    ؀ڥʹݶΔ͕ɺλάϙϦγʔʹΑΓλάͷඪ४Խ͕Մೳ λάΩʔͷେจࣈɾখจࣈͷ౷Ұ΍λά஋ͱͯ͠ೖྗͰ͖Δ஋ͷࢦఆ͕Մೳ 1SPKFDU
    Ωʔʹؔͯ͠ɺ࣍ͷΑ͏ ͳೖྗ͕ઃఆͰ͖ͳ͘ͳΓɺ େจࣈখจࣈͷ౷Ұ͕Ͱ͖Δ l QSPKFDU l 130+&$5 l 130KFDU
70. "84
    0SHBOJ[BUJPOT
    ͷλάϙϦγʔ  "84
    0SHBOJ[BUJPOT
    ؀ڥʹݶΔ͕ɺλάϙϦγʔʹΑΓλάͷඪ४Խ͕Մೳ λάΩʔͷେจࣈɾখจࣈͷ౷Ұ΍λά஋ͱͯ͠ೖྗͰ͖Δ஋ͷࢦఆ͕Մೳ 1SPKFDU
    Ωʔʹରͯ͠ɺࢦఆͨ͠ λά஋ͷΈೖྗͰ͖ΔΑ͏ʹ͢Δ l XBGGMFT l NPDIJ
71. λάϙϦγʔʹΑΓ੍ݶ͞Εͨͱ͖ͷྫ ʮେจࣈنଇʯʹඇ४ڌʢ1
    ͕খจࣈʣ ʮڐՄ͞ΕΔ஋ʯʹඇ४ڌ λάϙϦγʔʹΑΓλάͷߋ৽͕ڋ൱͞ΕͨࡍͷΤϥʔϝοηʔδ 
72. +VNQ
    ΞΧ΢ϯτߏ੒ʹ͓͍ͯ εΠονϩʔϧͰ͖Δ *".
    ϩʔϧ΋ "#"$
    Ͱ੍ޚ ؔ࿈ϒϩάɿ+VNQ
    ΞΧ΢ϯτߏ੒ʹ͓͍ͯ *".
    ϢʔβʔͷλάΛར༻ͨ͠ "#"$
    ʹΑΓ &$
    ΠϯελϯεͷىಈɾఀࢭڐՄΛ༩͑Δ c
    %FWFMPQFST*0
73. εΠονϩʔϧͰ͖Δ৚݅΋ "#"$
    Ͱ੍ޚ  *".
    ϢʔβʔͰ "#"$
    ༻ͷλάΛ؅ཧ͢Δલఏͷ৔߹͸ɺ *".
    Ϣʔβʔ͔ΒεΠονϩʔϧͰ͖Δ *".
    ϩʔϧͷڐՄʹ "#"$
    ΋׆༻Մೳ
74. εΠονϩʔϧͰ͖Δ৚݅΋ "#"$
    Ͱ੍ޚ  *".
    ϢʔβʔͷڐՄϙϦγʔʹ͓͚Δ TUT"TTVNF3PMF
    ͷ $POEJUJPO
    ʹɺ *".
    ϢʔβʔͷλάͱεΠονϩʔϧઌͷ *".
    ϩʔϧͷλάͷҰகΛؚΊΔ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": "sts:AssumeRole", "Resource": "*", "Condition": { "StringEquals": { "iam:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } ڐՄϙϦγʔ
75. "#"$
    ͷ೉͍͠ͱ͜Ζ ʢηΩϡϦςΟάϧʔϓͷ "#"$ʣ
76. ηΩϡϦςΟάϧʔϓͷ "#"$  ηΩϡϦςΟάϧʔϓͷઃఆมߋ΋ "#"$
    Ͱ࣮ݱՄೳʢͰ͋Δ͕ʜʣ { "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": ["ec2:List*", "ec2:Describe*", "ec2:Get*"], "Resource": "*" }, { "Effect": "Allow", "Action": "ec2:*", "Resource": "*", "Condition": { "StringEquals": { "ec2:ResourceTag/Project": "${aws:PrincipalTag/Project}" } } } ] } ڐՄϙϦγʔ
77. ηΩϡϦςΟάϧʔϓͷ "#"$  Ϛωδϝϯτίϯιʔϧ্Ͱૢ࡞͢Δલఏʹ͓͍ͯɺ ϧʔϧͷ௥Ճɾ࡟আ͸Ͱ͖Δ͕ɺมߋ͸Ͱ͖ͳ͍ʢλάΛ෇͚Δ·Ͱ͸ʣ ηΩϡϦςΟάϧʔϓ <1SPKFDU
    XBGGMFT> Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    
78. ηΩϡϦςΟάϧʔϓͷ "#"$  Ϛωδϝϯτίϯιʔϧ্Ͱૢ࡞͢Δલఏʹ͓͍ͯɺ ϧʔϧͷ௥Ճɾ࡟আ͸Ͱ͖Δ͕ɺมߋ͸Ͱ͖ͳ͍ʢλάΛ෇͚Δ·Ͱ͸ʣ ηΩϡϦςΟάϧʔϓ <1SPKFDU
    XBGGMFT> ηΩϡϦςΟάϧʔϓʹର͢Δ Πϯό΢ϯυϧʔϧͷ௥Ճ͸Մೳ Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
79. ηΩϡϦςΟάϧʔϓͷ "#"$  Ϛωδϝϯτίϯιʔϧ্Ͱૢ࡞͢Δલఏʹ͓͍ͯɺ ϧʔϧͷ௥Ճɾ࡟আ͸Ͱ͖Δ͕ɺมߋ͸Ͱ͖ͳ͍ʢλάΛ෇͚Δ·Ͱ͸ʣ ηΩϡϦςΟάϧʔϓ <1SPKFDU
    XBGGMFT> Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    Πϯό΢ϯυϧʔϧʹର͢Δ ߋ৽͸ෆՄೳ Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ  ˠ
80. ηΩϡϦςΟάϧʔϓͷ "#"$  Ϛωδϝϯτίϯιʔϧ্Ͱૢ࡞͢Δલఏʹ͓͍ͯɺ ϧʔϧͷ௥Ճɾ࡟আ͸Ͱ͖Δ͕ɺมߋ͸Ͱ͖ͳ͍ʢλάΛ෇͚Δ·Ͱ͸ʣ ηΩϡϦςΟάϧʔϓ <1SPKFDU
    XBGGMFT> Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    Πϯό΢ϯυϧʔϧʹର͢Δ ߋ৽͸ෆՄೳʢλά͕ͳ͍ͨΊʣ Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    <λάͳ͠>
81. ηΩϡϦςΟάϧʔϓͷ "#"$  Ϛωδϝϯτίϯιʔϧ্Ͱૢ࡞͢Δલఏʹ͓͍ͯɺ ϧʔϧͷ௥Ճɾ࡟আ͸Ͱ͖Δ͕ɺมߋ͸Ͱ͖ͳ͍ʢλάΛ෇͚Δ·Ͱ͸ʣ ηΩϡϦςΟάϧʔϓ <1SPKFDU
    XBGGMFT> Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    <1SPKFDU
    XBGGMFT>
    
    λά͕͋Γɺ৚͕݅߹͍ͬͯΕ͹ ߋ৽Մೳ Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    <λάͳ͠>
82. ηΩϡϦςΟάϧʔϓͷ "#"$  Ϛωδϝϯτίϯιʔϧ্Ͱૢ࡞͢Δલఏʹ͓͍ͯɺ ϧʔϧͷ௥Ճɾ࡟আ͸Ͱ͖Δ͕ɺมߋ͸Ͱ͖ͳ͍ʢλάΛ෇͚Δ·Ͱ͸ʣ ηΩϡϦςΟάϧʔϓ <1SPKFDU
    XBGGMFT> Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    <1SPKFDU
    XBGGMFT>
    
    Πϯό΢ϯυϧʔϧ r 5$1
    
    ڐՄ 
    <λάͳ͠> ηΩϡϦςΟάϧʔϓʹର͢Δ Πϯό΢ϯυϧʔϧͷ࡟আ͸Մೳ
83. ηΩϡϦςΟάϧʔϓͷ "#"$  "84
    Ϛωδϝϯτίϯιʔϧͷ࡞ۀͰ͸ϧʔϧ௥Ճͱಉ࣌ʹλάΛ෇༩Ͱ͖ͳ͍ ߦ୯ҐͰϧʔϧͷ௥Ճ͸Ͱ͖Δ͕ɺλά͸෇༩͞Εͳ͍ λά͕ແ͚Ε͹มߋ͸Ͱ͖ͳ͍
84. ηΩϡϦςΟάϧʔϓͷ "#"$  ϧʔϧΛ௥Ճͨ͠ޙʹλάΛ෇༩͢Δ͜ͱࣗମ͸ՄೳͰ͋Δ͕ɺ ͜ͷૢ࡞͸ߋ৽࡞ۀͳͷͰલड़ͨ͠ "#"$
    ͷϙϦγʔͰ͸λάΛ෇༩Ͱ͖ͳ͍
85. *".
    ϩʔϧͷҰׅ࡞੒
86. *".
    ϩʔϧͷҰׅ࡞੒  "#"$
    Ͱ͸λά஋ͷҟͳΔ *".
    ϩʔϧΛෳ਺࡞੒͢Δඞཁ͕͋Δ *".
    ϙϦγʔ͸ڞ༗ԽͰ͖ΔͨΊɺεΫϦϓτͳͲʹΑΓ *".
    ϩʔϧͷ࡞੒΋ ޮ཰ԽͰ͖Δ
87. *".
    ϩʔϧͷҰׅ࡞੒  ϓϩδΣΫτຖʹҟͳΔจࣈྻΛΠϯϓοτʹͯ͠ɺ*".
    ϩʔϧͷҰׅ࡞੒ खಈͰઃఆ͢Δ৔߹ͱൺ΂ͯɺλάͷઃఆϛεΛ๷͛ΔϝϦοτ΋͋Γ BBB CCC DDD ⋮ CJOTI ⋮ DSFBUFJBNSPMFTTI QSPKFDUTUYU JOQVU Ұׅ࡞੒
88. *".
    ϩʔϧͷҰׅ࡞੒࣌ͷߟྀ఺  ҰํͰɺ৴པϙϦγʔ͸ *".
    ϩʔϧຖʹҟͳΔ৔߹΋͋ΔͨΊɺҰׅ࡞੒࣌͸ $$P&
    ΍ςετ༻ͷϢʔβʔΛԾͰࢦఆ͓ͯ͘͠౳ͷߟྀ͕ඞཁͱͳΔ ஫ҙ఺ͱͯ͠ *".
    Ϣʔβʔ͸࣮ݱ͠ͳ͚Ε͹ *".
    ϩʔϧͷ࡞੒ʹࣦഊ͢Δ
89. ͍͞͝ʹ
90. ͍͞͝ʹ  ୯ҰΞΧ΢ϯτ಺ʹෳ਺ͷϓϩδΣΫτ͕ࠞࡏ͢Δ؀ڥʹ͓͚Δ ΞΫηε੍ޚΛ "#"$
    Ͱ࣮ݱ͢Δํ๏Λ঺հ͠·ͨ͠ "#"$
    ͸ศརͳҰํɺ࢖͍͜ͳ͢ʹ͸ *".
    ʹؔ͢ΔҰఆͷ஌͕ࣝඞཁͰ͢ 3#"$
    ͱ૊Έ߹Θͤͨར༻΍ "84
    ΞΧ΢ϯτΛϓϩδΣΫτຖʹ෼͚ͯΞ Ϋηε੍ޚ͢Δํ๏΋͝ݕ౼͍ͩ͘͞ Pʢ·ͩ·ͩॻ͖͍ͨ͜ͱ͸͋ΔͷͰผͷػձʹΞ΢τϓοτ͠·͢ʣ
91. ͍͞͝ʹ  ͍͞͝ʹ߹ΘͤͯಡΈ͍ͨࢿྉΛڞ༗͠·͢ IUUQTEFWDMBTTNFUIPEKQBSUJDMFTTIVUUZP EFWJPLBXBIBSBBCBD