Upgrade to Pro — share decks privately, control downloads, hide ads and more …

AWSでのセキュリティ対策全部盛り[初級から中級まで]

 AWSでのセキュリティ対策全部盛り[初級から中級まで]

弊社クラスメソッド株式会社主催のイベント「Developers.IO 2019 TOKYO」での登壇資料です。
セキュリティ対策メガ盛りマックス
ブログ: https://dev.classmethod.jp/cloud/aws/developers-io-2019-tokyo-all-security-in-aws/
ハッシュタグ: #cmdevio
ブログの方に喋った内容の補足など入れてあります
ちなみにブログをシェアしてくれると喜びマックス

cm-usuda-keisuke

November 01, 2019
Tweet

More Decks by cm-usuda-keisuke

Other Decks in Technology

Transcript

  1. ࣋ͪؼͬͯ΄͍͜͠ͱ   w ࢿྉ͸ެ։͞Ε͍ͯΔ͔Βޙ͔Βख़ಡɾࣾ಺ల։ w Ϋϥ΢υ͸෢ث w Ϋϥ΢υηΩϡϦςΟ΋෢ث w

    ΞδϦςΟΛམͱ͞ͳ͍߈ΊͷηΩϡϦςΟ w ήʔτ͔ΒΨʔυϨʔϧ΁ w ͢΂ͯͷਓ͕#VJMEFST w ηΩϡϦςΟ͸ΈΜͳͰ΍ΔͷͰ௚઀ؔ܎ͳ͍ͱࢥ͏಺༰ ΋ฉ͍ͯΈͯ
  2. ࢀߟʹ͢ΔυΩϡϝϯτ͍Ζ͍Ζ   w /*45αΠόʔηΩϡϦςΟϑϨʔϜϫʔΫ $4'  w IUUQTBXTBNB[PODPNKQCMPHTOFXTVQEBUFEXIJUFQBQFSOPXBWBJMBCMFBMJHOJOHUPUIFOJTU DZCFSTFDVSJUZGSBNFXPSLJOUIFBXTDMPVE

    w "84ηΩϡϦςΟϕετϓϥΫςΟε w IUUQTEBXTTUBUJDDPNXIJUFQBQFSTKB@+14FDVSJUZ"84@4FDVSJUZ@#FTU@1SBDUJDFTQEG w 8FMM"SDIJUFDUFEϑϨʔϜϫʔΫ w IUUQTBXTBNB[PODPNKQCMPHTOFXTBXTXFMMBSDIJUFDUFEXIJUFQBQFS w 1$*'*4$)*11"౳֤छίϯϓϥΠΞϯεͷυΩϡϝϯτ w IUUQTBXTBNB[PODPNKQDPNQMJBODFQSPHSBNT ͔͍ͭ·ΜͰղઆ
  3. 8FMM"SDIJUFDUFEϑϨʔϜϫʔΫ   w "84ͷϕετϓϥΫςΟεू w ͭͷப͕͋Δ ӡ༻্ͷ༏लੑɺηΩϡϦςΟɺ৴པੑɺύϑΥʔ Ϛϯεޮ཰ɺίετ࠷దԽ 

    w ηΩϡϦςΟͷபͷதʹ΋ͭͷཁૉ w ΞΠσϯςΟςΟ w ൃݟత౷੍ w Πϯϑϥอޢ w σʔλอޢ w ΠϯγσϯτϨεϙϯε
  4. *".ͷ࠷ॏཁࣄ߲   w *".Ϣʔβʹ͸.'"ඞਢ w ΞΫηεΩʔΛίʔυʹຒΊࠐ·ͳ͍ *".ϩʔϧΛར ༻͢Δ 

    w ίʔυΛѻ͏୺຤͢΂ͯʹHJUTFDSFUTΛಋೖ͢Δ w ࠷খݖݶΛҙࣝ͢Δ w "84ར༻Ϣʔβ͢΂ͯʹ*".ͷѻ͍ʹ͍ͭͯڭҭ͢Δ
  5. ར༻։࢝࣌ʹ༗ޮԽ͢ΔαʔϏε   w "84$MPVE5SBJM w "84ʹର͢Δ"1*ίʔϧΛه࿥͢Δ w "84$POpH w

    "84ϦιʔεϕʔεͷมߋཤྺΛه࿥͢Δ w "NB[PO(VBSE%VUZ w "84ʹର͢Δෆ৹ͳಈ͖Λݕ஌͢Δ w ෆਖ਼ͳϩάΠϯ΍ίΠϯϚΠχϯάͳͲͷڴҖΛݕ஌ w ͜ΕΒ͸ଟগ͓͕͔͔ۚͬͯ΋ඞਢ Կ͔͋ͬͨΒऔΓฦ͕ͭ͠ ͔ͳ͍ͷͰ
  6. 71$   w ؀ڥ͝ͱʹ71$΍ΞΧ΢ϯτΛ෼ׂ͢Δ w "84ΞΧ΢ϯτ͝ͱ෼ׂ͢Ε͹*".΋෼͚ΕΔ w 4FDVSJUZ(SPVQͱ/"$-Λద੾ʹར༻͢Δ w

    جຊ͸4FDVSJUZ(SPVQͰߜΔ w /"$-͸αϒωοτશମͰඞཁͳ΋ͷ͚ͩ w 71$಺͔Β"84αʔϏεΛར༻͢Δ৔߹͸71$ &OEQPJOU 1SJWBUF-JOL Λར༻͢Δ w ΠϯλʔωοτΛܦ༝͠ͳ͍"1*௨৴Λ࣮ݱ
  7. ҰൠతʹηΩϡΞͳߏ੒   w ࡾ૚ωοτϫʔΫ w ϑϩϯτҎ֎͸ϓϥΠϕʔτ w Ϛϧν"; w

    "VUP4DBMJOH w ֎෦௨৴͸/"5ܦ༝ w ඞཁʹԠ͡$MPVE'SPOU΍ 8"'Λಋೖ
  8. 4   w *".ϢʔβϩʔϧʹΞΫηεݖΛ༩͑Δ࣌͸3FTPVSDFͰό έοτΛ࠷খݶʹݶఆ͢Δ w ಛʹ&$-BNCEB w όέοτϙϦγʔͱ"$-Ͱ࠷খݖݶΛҙࣝ͢Δ

    w *1੍ݶͳͲߜΓ͗ͯࣗ͢෼͕ΞΫηεͰ͖ͳ͘ͳΔͷ͸ؾΛ ͚ͭΔ w ύϒϦοΫΞΫηεϒϩοΫͰ֎෦͔ΒͷΞΫηεΛଟॏʹ๷ ͙
  9. όοΫΞοϓ   w &$΍3%4ͳͲͷόοΫΞοϓ͸͖ͪΜͱऔΖ͏ ΋ ͪΖΜ৑௕Խ΋  w ઌ೔ͷো֐Ͱ෮چ͠ͳ͘ͳͬͨ&#4͕͋ͬͨͷͰɺ

    όοΫΞοϓઃఆ͸Ϣʔβ੹೚Ͱ͋Δ͜ͱΛڧ͘ҙࣝ ͢Δ w ࣗಈόοΫΞοϓʹ͸"NB[PO%-.΍"84 #BDLVQͳͲ͕͋Δ͕ɺฐࣾతʹ͸ฐࣾఏڙͷ 0QTXJUDI͕Φεεϝʂ
  10. 0QTXJUDIʢΦϓε΢Οονʣ   w Ͱ͖Δ͜ͱ w όοΫΞοϓ࡞੒ w Πϯελϯεͷىಈఀࢭ w

    Ϧʔδϣϯײίϐʔ w ϦιʔεࢭΊ๨ΕνΣοΫ w ॊೈͳεέδϡʔϧ࣮ߦ w ෳ਺"84ΞΧ΢ϯτΛ౷߹తʹ؅ཧͰ͖Δ w ΫϥεϝιουϝϯόʔζͷϓϨϛΞϜαʔϏεܖ໿ࡁΈͳΒ௥Ճ අ༻ແ͠Ͱར༻Մೳ
  11. ෆਖ਼ϓϩάϥϜରࡦ   w 04ϨΠϠʔҎ্͸͓٬༷੹೚ൣғ Ͱɺಛʹαʔό಺෦ͷରࡦ͸αʔυ ύʔςΟ੡඼͕ඞਢ w 8FCαΠτͰ͸Πϯλʔωοτʹ৮ ΕΔαʔό͸߈ܸΛ࠷ॳʹड͚Δ෦

    ෼ͷͨΊରࡦඞਢ w ฐࣾͷఏҊͱͯ͠͸04಺Ͱෳ਺ϨΠ ϠʔͷػೳΛ࣋ͭ%FFQ4FDVSJUZ͕ ਪ঑ "84ͱͷ਌࿨ੑ͕ߴ͍ ෆਖ਼ϓϩάϥϜରࡦ ηΩϡϦςΟϩά؂ࢹ มߋ؂ࢹ ɾ IDS/IPS ΞϯνϚϧ΢ΣΞ
  12. ੬ऑੑରࡦ   w ੬ऑੑ਍அ͸ϓϥοτϑΥʔϜ਍அͱ8FC ΞϓϦέʔγϣϯ਍அΛ྆ํ࣮ࢪ͢Δ w "NB[PO*OTQFDUPS͸ϓϥοτϑΥʔϜ਍ அͷΈͷͨΊɺఆৗతͳνΣοΫʹ͸޲͕͘ ϦϦʔεલͷશମνΣοΫʹ͸ྗෆ଍

    w ؆қతͳ8FCαΠτ ݸਓ৘ใΛ࣋ͨͳ͍ɾ ෳࡶͳϩδοΫ͕ͳ͍ ͳΒ'4FDVSF 3"%"3 πʔϧͰͷ਍அ Ͱ͍͍ w ্هʹ౰ͯ͸·Βͳ͍৔߹ʹ͸ΠΤϥΤη ΩϡϦςΟͷΑ͏ʹखಈͰ਍அ͢ΔαʔϏε ਪ঑ ੬ऑੑରࡦ ੬ऑੑ਍அ ੬ऑੑ(ύον)؅ཧ ๷ޚ Inspector SSM
  13. ੬ऑੑରࡦ   w ੬ऑੑ؅ཧ͸͢΂ͯͷαʔόͰඞਢ w 44.୯ମͰ΋Ͱ͖ͳ͘ͳ͍͕ɺύον ద༻ͷΈͷར༻͕޲͍͍ͯΔ w 04ϛυϧ΢ΣΞͷ੬ऑੑνΣοΫ͸

    'VUVSF7VMT͕͍͍ɺӡ༻ʹدΓఴ͑Δ w 8FCεΩϟϯͱ੬ऑੑ؅ཧɺνέοτ ػೳ͕͋Γ"1*࿈ܞͰ$*$%αΠΫϧ ʹ'4FDVSF3"%"3Λ૊ΈࠐΊΔͷ ͰͦΕ΋ݕ౼ͯ͠ΈΔ ੬ऑੑରࡦ ੬ऑੑ਍அ ੬ऑੑ(ύον)؅ཧ ๷ޚ Inspector SSM
  14. ੬ऑੑରࡦ   w ๷ޚ͸࢑ఆରॲͷͨΊ਍அ΍؅ཧΛ͠ ্ͨͰ׆༻ w %FFQ4FDVSJUZͰ04্Ͱͷରࡦ΋Մೳ ͕ͩɺՄೳͳΒલஈͰ8"'౳ͰࢭΊ͍ͨ w

    "848"'͸ΞϓϥΠΞϯε8"'ΑΓ ΋ػೳ͸ݶఆత͕ͩεέʔϧ౳૬ੑ͸͍ ͍ͷͰΤϯτϦʔϨϕϧ͔Βݕ౼͢Δ w "848"'ӡ༻ͷφϨοδ͕ͳ͍৔߹ʹ ͸8BG$IBSNʹΑΔࣗಈӡ༻΋ݕ౼ ੬ऑੑରࡦ ੬ऑੑ਍அ ੬ऑੑ(ύον)؅ཧ ๷ޚ Inspector SSM
  15. ӡ༻ઃܭ   ෯͕޿͗͢ΔͷͰ͔͍ͭ·ΜͰτϐοΫ͋͛·͢ w $MPVE8BUDIΛϕʔεʹ&$ͷࢮ׆؂ࢹ΍3PVUFͷ֎ܗ؂ࢹΛ࢖ͬͯ ΞϥʔτઃఆΛͯ͠ҟৗΛݕ஌͢Δ w ͦͷଞ࢖͍ͬͯΔαʔϏεͷϝτϦΫεͰԿΛݟΔ͔ɺΞϥʔττϦΨʔʹ ͢Δ͔ΛܾΊ͓ͯ͘

    ԿΛো֐ͱ͢Δ͔ఆٛ͢Δ  w ΞϓϦଆͷϝτϦΫεऔಘ΍ϩάͷ֎෦ग़ྗ 4΍$MPVE8BUDI-PHT Λ ߦ͏ w ݕ஌ޙͷ࣍੾Γ෼͚΍෮چϑϩʔΛ࡞͓ͬͯ͘ w Կճ΋ϑϩʔΛ࣮ࡍʹྲྀ͓ͯ͘͠ Ϋϥ΢υ͔ͩΒ΋͏Ұݸ؀ڥ࡞ͬͯ؆୯ʹ Ͱ͖·͢  w Ͱ͖Δ͚ͩࣗಈԽ͢Δ ྫ"VUP4DBMJOH࢖͏͚ͩͰ&$ͷ෮چΛࣗಈԽͰ ͖Δ
  16. ෮چܭը΋͔ͬ͠Γ࡞Δ   w ";ো֐͕ى͖ͨΒͲ͏͢Δ͔ w ϦʔδϣϯϨϕϧ΋ߟ͑Δͷ͔ w ؀ڥΛ࡞Γ௚͠΍͍͢Α͏ʹ$MPVE'PSNBUJPOͳͲ ͰςϯϓϨʔτԽ͢Δͱ͍͏ख΋͋Δ

    w ͍ΘΏΔ*OGSBTUSVDUVSFBT$PEF *B$  w ԿͰ΋૊ΈࠐΈ͗͢ͳ͍Α͏ʹ໨తʹ߹Θͤͨ࡞Γํ Λ͢ΔΑ͏ʹ มߋͷ൓ө͕खؒʹͳΓ͗ͨ͢Βຊ຤స ౗
  17. ؂ࢹɾϩΪϯάɾ෼ੳ   w ֤छϦιʔεͷϝτϦΫεͱϩάͷऔಘ͸ඞਢ w ϩά෼ੳ͸୯७ͳ8FCαΠτͳΒ༏ઌ౓͸௿Ίɻύ ϑΥʔϚϯε΍ηΩϡϦςΟཁ͕݅ߴ͍৔߹ʹ͸ݕ౼ ͢Δ w

    ϩάʹ͍ͭͯอଘ͸جຊ4อଘɺ෼ੳΛݕ౼͢Δͳ Β$MPVE8BUDI-PHT&MBTUJD4FBSDI4VNP -PHJD͕બ୒ࢶʹͳΔ w ෼ੳΛॳΊͯߦ͏৔߹΍෼ੳʹूத͍ͨ͠৔߹ɺε έʔϧ͕ಡΊͳ͍৔߹ʹ͸4VNP-PHJD͕ॳظμο γϡϘʔυͱΠϯςάϨʔγϣϯʹ༏Ε͍ͯΔͷͰ͍ ͍ ϩΪϯάɾ෼ੳ CloudWatch Config CloudTrail ؂ࢹ CloudWatch
  18. ൃݟత౷੍ͱ͸   w %FUFDUJWF$POUSPM w ༧๷తίϯτϩʔϧͱରൺͯ͠࢖ΘΕΔࣄ͕ଟ͍ w ϦεΫϚωδϝϯτͷ༻ޠ w

    8"'΍ύονద༻ͰΠϯγσϯτΛ༧๷͢Δ͚ͩͰͳ ͘ɺΠϯγσϯτ͕ى͖ͨ࣌ʹؾ෇͚ΔΑ͏ʹ͓ͯ͘͠ w ೔ຊͩͱൃݟత౷੍ͷମ੍͕ऑ͍ͱݴΘΕ·͢Ͷ
  19. ΠϯγσϯτϨεϙϯε *3 ͱ͸   w Πϯγσϯτ ো֐ͱ͔ηΩϡϦςΟࣄނͱ͔ݦࡏԽ ͨ͠ڴҖͳͲ ͷରԠ

    Ϩεϙϯε Λ͢Δ͜ͱ w "84ʹ͓͚ΔΠϯγσϯτϨεϙϯε͸֤छΞϥʔ τ౳͔Βݕ஌ͯ͠ɺϩά౳Λݟͯࣄ৅Λ֬ೝɺઃఆม ߋ΍؀ڥִ཭ɺ*".ͷ࡟আ౳Λߦ͍ͬͯ͘
  20. (VBSE%VUZͷରԠํ๏   w ݕ஌ͨ͠಺༰ʹΑΔ͕ΫϦςΟΧϧͳ΋ͷ͸छྨ w *".ෆਖ਼ར༻͸*".ΛແޮԽͯ͠Өڹௐࠪ w $MPVE5SBJMͰ֘౰ΫϨσϯγϟϧͰͷૢ࡞Λ͢΂ͯ֬ೝ w

    "ENJOݖݶ͕৐ͬऔΒΕ͍ͯͨΒ࠷ѱΞΧ΢ϯτഁغ w &$͕৐ͬऔΒΕ͍ͯͨΒִ཭ɾϑΥϨϯδοΫ w JOPVU͢΂੍ͯݶͨ͠4FDVSJUZ(SPVQͰִ཭ w TTNBRVJSF౳ͷπʔϧΛ࢖͏ͱָ w ॏཁͳσʔλʹΞΫηε͍ͯ͠ͳ͍͔ͱ͔֬ೝ
  21. ࣮ࡍͷ(VBSE%VUZͷରԠ   w ͪΌΜͱ΍͍ͬͯΕ͹ॏཁ౓ߴͷΞϥʔτ͸ͳ͍ w ॏཁ౓தҎԼ͸աݕ஌ͷ৔߹΋͋Δ w Ͱ΋಺༰͸֬ೝͯ͠Ͷ w

    Α͋͘Δ಺༰ w 6OVTVBM"DDFTTීஈͱ͸ҧ͏৔ॴ͔ΒͷΞΫηε w 6TFS1FSNJTTJPOT*".ͷݖݶมߋ w ͜ΕΒ͸؀ڥʹΑͬͯ͸Α্͕͘Δ͕ɺͨͩͷաݕ஌ͳͷ͔͸ͬ͠ ͔Γ֬ೝ͢Δ w ݕ஌݁ՌͱͦͷରԠ๏ w IUUQTEPDTBXTBNB[PODPNKB@KQHVBSEEVUZMBUFTUVHHVBSEEVUZ@pOEJOHUZQFTBDUJWFIUNM
  22. աݕ஌͕ଟ͍৔߹ͷରԠํ๏   w ·ͣϲ݄ఔ౓଴ͭ w ύλʔϯΛֶश͢ΔͨΊΑ͘ߦΘΕΔૢ࡞ͳΒݕ஌͞Εͳ͘ͳΔ w *1ΞυϨεͷϗϫΠτϦετొ࿥ w

    Φεεϝ͠ͳ͍ w શ͘ݕ஌݁Ռ͕࢒Βͳ͍ͨΊ w ࣗಈΞʔΧΠϒ w (VBSE%VUZͷ࢓૊ΈΛ࢖͏ w ΋͘͠͸#BDLMPH౳νέοτγεςϜଆͱ࿈ܞͯ͠ΞʔΧΠϒ ͢Δ࢓૊ΈΛ࡞Δ
  23. 4VNP-PHJDͷεεϝ   w "84ͷϩάΛ؆୯ʹڧྗʹՄࢹԽ σϑΥϧτͷμογϡ Ϙʔυ  w ηΩϡϦςΟҎ֎ʹ΋ӡ༻Ͱ׆༻Ͱ͖Δ

    w $MPVE'SPOU w "-# w -BNCEB w 3%4౳ʑ w ϛυϧ΢ΣΞͷϩάͳͲ΋μογϡϘʔυ͋Γ
  24. ࢀߟʹ͢ΔυΩϡϝϯτ͍Ζ͍Ζ࠶ܝ   ίϯϓϥΠΞϯεཁ݅΍ϑϨʔϜϫʔΫ౳ w /*45αʔόʔηΩϡϦςΟϑϨʔϜϫʔΫ $4'  w IUUQTBXTBNB[PODPNKQCMPHTOFXTVQEBUFEXIJUFQBQFSOPXBWBJMBCMFBMJHOJOHUPUIFOJTUDZCFSTFDVSJUZ

    GSBNFXPSLJOUIFBXTDMPVE w "84ηΩϡϦςΟϕετϓϥΫςΟε w IUUQTEBXTTUBUJDDPNXIJUFQBQFSTKB@+14FDVSJUZ"84@4FDVSJUZ@#FTU@1SBDUJDFTQEG w 8FMM"SDIJUFDUFEϑϨʔϜϫʔΫ w IUUQTBXTBNB[PODPNKQCMPHTOFXTBXTXFMMBSDIJUFDUFEXIJUFQBQFS w 1$*'*4$)*11"౳֤छίϯϓϥΠΞϯεͷυΩϡϝϯτ w IUUQTBXTBNB[PODPNKQDPNQMJBODFQSPHSBNT
  25. $$P&࡞Δ   w $MPVE$FOUFSPG&YDFMMFODFʢ$$P&ʣ w ଟ༷ͳઐ໳஌ࣝΛ࣋ͬͨνʔϜ w ૣ͍ஈ֊͔ΒΫϥ΢υʹऔΓ૊Έɺ੒ख़ͯ͠શମͷΫϥ΢υ ׆༻ͷࢧԉʹճΔ໾ׂ

    w ෦ॺԣஅͰόʔνϟϧͳ૊৫ʹ͢Δ৔߹΋ w ਐΊํͷྫ w IUUQTBXTBNB[PODPNKQCMPHTFOUFSQSJTFTUSBUFHZVTJOHBDMPVEDFOUFSPGFYDFMMFODFDDPF UPUSBOTGPSNUIFFOUJSFFOUFSQSJTF
  26. ίϯϓϥΠΞϯεɾΨόφϯεܥαʔϏε   w ࠷௿ݶͷηΩϡϦςΟνΣοΫ͕Մೳͳ JOTJHIUXBUDI͸ແྉͷͨΊ͢΂ͯͷΞΧ΢ϯτͰ༗ ޮ׆༻ͯ͠΄͍͠ w "845SVTUFE"EWJTPS΋ඞͣνΣοΫ w

    ΞϓϦن໛͕େ͖͍ɾεςʔΫϗϧμʔ͕ଟ͍ɾίϯ ϓϥΠΞϯε༻͕݅ߴ͍৔߹ʹ͸௥Ճͷ׆༻Λݕ౼ w %PNF͸1$*%44ͳͲͷίϯϓϥΠΞϯενΣοΫ ͕Ͱ͖Δଞɺ4FDVSJUZ(SPVQ͔ΒωοτϫʔΫΛՄ ࢹԽͨ͠Γ*".ͷ؅ཧΛߦ͑ΔͷͰେن໛ΞΧ΢ϯ τɾϚϧνΞΧ΢ϯτͷ؅ཧίετΛେ͖͘࡟ݮͰ͖ Δ ίϯϓϥΠΞϯεɾ Ψόφϯε Config Trusted Advisor Well-Arch SSM
  27. ϚϧνΞΧ΢ϯτઓུ   w ѻ͏"84؀ڥ͕ଟ͘ͳΔ৔߹ʹ͸ɺ؀ڥຖʹ"84ΞΧ΢ϯ τࣗମΛ෼͚Δ΄͏͕͍͍ w *".΍ωοτϫʔΫΛ׬શʹ੾Γ཭͢͜ͱ͕Ͱ͖Δ w ੹೚෼ք఺΍ηΩϡϦςΟͷڥք͕໌֬ʹͳΔ

    w γεςϜຖ෼͚Δ͔ɺγεςϜ εςʔδ ։ൃݕূຊ ൪౳ Ͱ෼͚Δ w Φεεϝ͸γεςϜ εςʔδ w ։ൃ؀ڥͷηΩϡϦςΟ͕ΏΔͯ͘΍ΒΕΔύλʔϯ͕Α͘ ͋ΔͷͰɺ͔ͦ͜ΒӨڹ͕ຊ൪؀ڥ·Ͱ೾ٴ͠ͳ͍Α͏ʹ
  28. "840SHBOJ[BUJPOT   w ϚϧνΞΧ΢ϯτͷ؅ཧΛߦ͏αʔϏε w 06 ૊৫୯Ґ Λ֊૚తʹ࡞੒ͯ͠"84ΞΧ΢ϯτΛॴଐ͞ ͤΔࣄ͕Ͱ͖Δ

    w αʔϏείϯτϩʔϧϙϦγʔ 4$1 Λར༻ͯ͠ར༻Մೳͳ ݖݶΛ੍ޚͰ͖Δ w ୅ཧళܦ༝ͷ"84ར༻ͷ৔߹੍໿͕͋Δ͜ͱ΋͋ΔͷͰ஫ҙ
  29. -BOEJOH;POF   w 0SHBOJ[BUJPOTΛϕʔεʹ༷ʑͳαʔ ϏεΛ૊Έ߹ΘͤͯϚϧνΞΧ΢ϯτͰΨ όφϯε΍ηΩϡϦςΟΛ֬อ͢Δߟ͑ํ w "84-BOEJOH;POFιϦϡʔγϣϯͱ ͯ͠$MPVE'PSNBUJPOςϯϓϨʔτͷ

    ఏڙ΋͋Γ w 0SHBOJ[BUJPOTΛར༻͍ͯ͠Δͱ੍໿ ͕͋Δ৔߹͕͋Δ͕ɺ0SHBOJ[BUJPOT ແ͠Ͱ΋ಉ͡Α͏ͳϚϧνΞΧ΢ϯτ࿈ܞ ͸ՄೳͳͷͰࢀߟʹͳΔ
  30. $POUSPM5PXFS   w -BOEJOH;POFΛϚωʔδυͰఏڙ͢ΔαʔϏε w "84-BOEJOH;POFιϦϡʔγϣϯͱ͸গ͠ΞʔΩ ςΫνϟ͕ҧ͏ w μογϡϘʔυͰ֤ΞΧ΢ϯτͷίϯϓϥΠΞϯεঢ়گ

    ͕೺ѲͰ͖Δ w 0SHBOJ[BUJPOTΛར༻͢ΔͷͰಉ͡Α͏ͳ੍໿͋Γ w ͔ͭ৽ن0SHBOJ[BUJPOTΛ࡞੒͢Δඞཁ͕͋Δ w ݱঢ়౦ژϦʔδϣϯͰ͸ఏڙ͞Ε͍ͯͳ͍
  31. $POUSPM5PXFSͷΞʔΩςΫνϟ   w ϚελʔΞΧ΢ϯτͰ$POUSPM5PXFS࡞੒ w 0SHBOJ[BUJPOT͕࡞੒͞Ε֤Ϣʔβ͸"84440Ͱ؅ཧ͞ ΕΔ w ؅ཧ༻ͷίΞΞΧ΢ϯτͭ࡞੒

    w ϩάΞʔΧΠϒ5SBJM΍$POpHϩάू໿ w ؂ࠪ(VBSE%VUZ΍$POpH3VMFT౳֤छηΩϡϦςΟ Ξϥʔτू໿ ֤ΞΧ΢ϯτ΁ͷ"ENJOݖݶ w 4FSWJDF$BUBMPH͔ΒܾΊΒΕͨύλʔϯͷ"84ΞΧ΢ϯ τΛ෷͍ग़͢ 71$΍ίϯϓϥΠΞϯεઃఆೖΓ
  32. $POUSPM5PXFS΁ͷظ଴   w ·ͩ·੍ͩ໿͕ଟ͍ w ୅ཧళܦ༝Ͱͷఏڙ͕ͮ͠Β͍ w ৽ن0SHBOJ[BUJPOTΛ࡞੒͠ͳ͍ͱ͍͚ͳ͍ w

    ౦ژʹདྷͯͳ͍ w ͜ͷล͕ղܾ͞ΕͨΒ͍͍ײ͡ʹϚϧνΞΧ΢ϯτͷ؅ཧ͕ ָʹͳΔ͔΋ w ͔͠͠ͳ͕Βɺݱঢ়Ͱ΋ಉ͡Α͏ͳ͜ͱ͸0SHBOJ[BUJPOT Λར༻͠ͳͯ͘΋Ͱ͖ΔͷͰࢀߟʹ͍ͯ͘͠
  33. "84؀ڥͷ؂ࠪ   w "84͸ΦϯϓϨϛεͱൺ΂ͯ৽͍͠ཁૉ͕୔ࢁ w ࣾ಺ͷ؂ࠪΛߦ͏෦ॺ େاۀʹ͔͠ແ͍͔΋͚ͩͲ ͸ݹ͍νΣοΫγʔτͷ··ɺݹ͍ߟ͑ํ ϙϦγʔ

    ͷ··Ͱ͸ਖ਼ৗʹ؂ࠪͰ͖ͳ͍ w "84Λར༻͍ͯ͠Δ෦ॺͰઆ໌͢Ε͹0,͸؂ࠪ ͍ͯ͠ͳ͍ͷͱಉ͡ w ؂ࠪ෦໳΋Ϋϥ΢υδϟʔχʔΛ୧͍ͬͯ͘ඞཁ͕͋ Δ
  34. ͋ΘͤͯಡΈ͍ͨ   w SF*OGPSDFͷ஫໨ηογϣϯಈըҰཡ w δϟϯϧ w 4FDVSJUZ%FFQ%JWFMFBEFSTIJQTFTTJPO w

    'PVOEBUJPOBM4FDVSJUZMFBEFSTIJQTFTTJPO w (PWFSOBODF 3JTL$PNQMJBODF MFBEFSTIJQTFTTJPO w "TQJSBUJPOBM4FDVSJUZMFBEFSTIJQTFTTJPO w IUUQTBXTBNB[PODPNKQCMPHTTFDVSJUZSFJOGPSDFXSBQVQBOETFTTJPOMJOLT
  35. தڃ·ͱΊ   w ൃݟత౷੍ΠϯγσϯτϨεϙϯεͷମ੍Λ࡞ͬͯͳ ʹ͔ى͖ͯ΋େৎ෉ͳΑ͏ʹ͢Δ w ೔ࠒ͔Β܇࿅͢Δ w (3$ͷ؍఺͸͘͢͝େࣄ

    w ηΩϡϦςΟ͸ҰਓͰ΍Δ΋ͷͰ͸ͳ͍ͷͰΈΜͳר ͖ࠐΉ w ؂ࠪ΋ࣗಈԽͰ͖Δʂ w ߈ΊͷηΩϡϦςΟΛ࣮ફ͍ͯ͘͠
  36. ࿩ͨ͠಺༰   w શൠ w ήʔτ͔ΒΨʔυϨʔϧ΁ w ͢΂ͯͷਓ͕#VJMEFST w

    ࢀߟʹͳΔυΩϡϝϯτΛ࢖ͬͯࣗ෼ͨͪʹԠ༻ w ॳڃ w "84͸͖ͪΜͱ֮͑ͭͭ04ΞϓϦ͸ैདྷͲ͓Γ Ћ w ӡ༻ઃܭʂ w தڃ w ൃݟత౷੍*3ͷମ੍࡞Δ w (3$Λҙࣝ͢Δ
  37. ֤छ৘ใऩू   w #MBDL#FMU w IUUQTBXTBNB[PODPNKQBXTKQJOUSPEVDUJPO w "844FDVSJUZ#MPH w

    IUUQTBXTBNB[PODPNKQCMPHTTFDVSJUZ w "84%FWFMPQFS'PSVNT4FDVSJUZ$BUFHPSZ 344 w IUUQTEFWDMBTTNFUIPEKQDMPVEBXTBXTSTTGFFET w "-"4 "NB[PO-JOVY4FDVSJUZ$FOUFS  w IUUQTBMBTBXTBNB[PODPN
  38. ֤छ৘ใऩू   w SF*OWFOUSF*OGPSDF w "84࠷େͷΠϕϯτ࠷େͷηΩϡϦςΟΠϕϯτ w ݱ஍ࢀՃ͸ಛʹܹࢗతʂ w

    +"846( ೔ຊͷ"84Ϣʔβʔάϧʔϓ  w IUUQTKBXTVHKQ w 4FDVSJUZ+"84 ηΩϡϦςΟಛԽͷࢧ෦  w IUUQTTKBXTEPPSLFFQFSKQ w +"84%":4 ೥ʹҰ౓ͷ+"84࠷େΠϕϯτ  w IUUQTKBXTEBZTKBXTVHKQ