\n| Bastion\uff08\u8e0f\u307f\u53f0\uff09<\/td>\n | \u30d1\u30d6\u30ea\u30c3\u30af\uff08\u307e\u305f\u306f SSM \u3067\u4e0d\u8981\u5316\uff09<\/td>\n | \u904b\u7528\u30a2\u30af\u30bb\u30b9\u306e\u5165\u53e3<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \u30dd\u30a4\u30f3\u30c8\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b5\u30fc\u30d0\u30fc\u3084DB\u3092\u30d1\u30d6\u30ea\u30c3\u30af\u306b\u7f6e\u304b\u306a\u3044<\/strong>\u3053\u3068\u3067\u3059\u3002\u5916\u90e8\u304b\u3089\u306e\u53d7\u3051\u53e3\u306f ALB \u306b\u96c6\u7d04\u3057\u3001\u305d\u306e\u80cc\u5f8c\u306f\u5168\u3066\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u306b\u9589\u3058\u8fbc\u3081\u307e\u3059\u3002\u3053\u308c\u3060\u3051\u3067\u653b\u6483\u9762\uff08\u30a2\u30bf\u30c3\u30af\u30b5\u30fc\u30d5\u30a7\u30b9\uff09\u304c\u5927\u304d\u304f\u6e1b\u308a\u307e\u3059\u3002<\/p>\nNAT\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4 \u2014 \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u306e\u300c\u51fa\u53e3\u300d<\/h2>\n\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b5\u30d6\u30cd\u30c3\u30c8\u306e\u30b5\u30fc\u30d0\u30fc\u3082\u3001\u5916\u5411\u304d\u306e\u901a\u4fe1\u306f\u5fc5\u8981\u3067\u3059\uff08OS\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3001\u5916\u90e8API\u30b3\u30fc\u30eb\u3001\u30d1\u30c3\u30b1\u30fc\u30b8\u53d6\u5f97\u306a\u3069\uff09\u3002\u3053\u306e\u3068\u304d\u4f7f\u3046\u306e\u304c NAT\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4<\/strong> \u3067\u3059\u3002<\/p>\n\n- NAT\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306f \u30d1\u30d6\u30ea\u30c3\u30af\u30b5\u30d6\u30cd\u30c3\u30c8<\/strong> \u306b\u7f6e\u304f<\/li>\n
- \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b5\u30d6\u30cd\u30c3\u30c8\u306e\u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\u3067
0.0.0.0\/0<\/code> \u3092 NAT \u306b\u5411\u3051\u308b<\/li>\n- \u300c\u5185 \u2192 \u5916\u300d\u306f\u901a\u3059\u304c\u3001\u300c\u5916 \u2192 \u5185\u300d\u306f\u901a\u3055\u306a\u3044\uff08\uff1d\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u6027\u3092\u7dad\u6301\u3057\u305f\u307e\u307e\u5916\u306b\u51fa\u3089\u308c\u308b\uff09<\/li>\n<\/ul>\n
NAT\u306f\u30b3\u30b9\u30c8\u6ce8\u610f\u30dd\u30a4\u30f3\u30c8<\/h3>\n\u5165\u9580\u6bb5\u968e\u3067\u5fc5\u305a\u77e5\u3063\u3066\u304a\u304d\u305f\u3044\u306e\u304c\u3001NAT\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306f\u7121\u6599\u3067\u306f\u306a\u3044<\/strong>\u3053\u3068\u3067\u3059\u3002\u8d77\u52d5\u3057\u3066\u3044\u308b\u3060\u3051\u3067\u6642\u9593\u8ab2\u91d1\u304c\u767a\u751f\u3057\u3001\u901a\u904e\u30c7\u30fc\u30bf\u91cf\u306b\u3082\u8ab2\u91d1\u3055\u308c\u307e\u3059\u3002<\/p>\n\u305d\u306e\u305f\u3081\u3001\u53ef\u7528\u6027\u91cd\u8996\u306a\u3089 AZ \u3054\u3068\u306b NAT \u3092\u7f6e\u304d\u307e\u3059\u304c\u3001\u30b3\u30b9\u30c8\u91cd\u8996\u306e\u691c\u8a3c\u74b0\u5883\u3067\u306f NAT \u30921\u3064\u306b\u96c6\u7d04\u3059\u308b\u3001\u3042\u308b\u3044\u306f VPC\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8<\/strong> \u3092\u4f7f\u3063\u3066 NAT \u3092\u7d4c\u7531\u305b\u305a AWS \u30b5\u30fc\u30d3\u30b9\uff08S3, DynamoDB \u306a\u3069\uff09\u3078\u76f4\u63a5\u30a2\u30af\u30bb\u30b9\u3055\u305b\u308b\u3001\u3068\u3044\u3063\u305f\u6700\u9069\u5316\u304c\u5b9a\u77f3\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n\u30b5\u30d6\u30cd\u30c3\u30c8\u306eCIDR\u8a2d\u8a08<\/h2>\n\u30b5\u30d6\u30cd\u30c3\u30c8\u306b\u5272\u308a\u5f53\u3066\u308b IP \u30ec\u30f3\u30b8\uff08CIDR\uff09\u306f\u5f8c\u304b\u3089\u5e83\u3052\u306b\u304f\u3044\u306e\u3067\u3001\u6700\u521d\u306b\u5c11\u3057\u4f59\u88d5\u3092\u3082\u3063\u3066\u5207\u308a\u307e\u3059\u3002VPC \u3092 10.0.0.0\/16<\/code> \u3068\u3057\u305f\u5834\u5408\u306e\u4e00\u4f8b:<\/p>\n\n\n\n| \u30b5\u30d6\u30cd\u30c3\u30c8<\/th>\n | CIDR<\/th>\n | AZ<\/th>\n | \u7a2e\u5225<\/th>\n<\/tr>\n<\/thead>\n | \n\n| public-1a<\/td>\n | 10.0.0.0\/24<\/code><\/td>\n| ap-northeast-1a<\/td>\n | \u30d1\u30d6\u30ea\u30c3\u30af<\/td>\n<\/tr>\n | \n| public-1c<\/td>\n | 10.0.1.0\/24<\/code><\/td>\n| ap-northeast-1c<\/td>\n | \u30d1\u30d6\u30ea\u30c3\u30af<\/td>\n<\/tr>\n | \n| private-app-1a<\/td>\n | 10.0.10.0\/24<\/code><\/td>\n| ap-northeast-1a<\/td>\n | \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8<\/td>\n<\/tr>\n | \n| private-app-1c<\/td>\n | 10.0.11.0\/24<\/code><\/td>\n| ap-northeast-1c<\/td>\n | \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8<\/td>\n<\/tr>\n | \n| private-db-1a<\/td>\n | 10.0.20.0\/24<\/code><\/td>\n| ap-northeast-1a<\/td>\n | \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8<\/td>\n<\/tr>\n | \n| private-db-1c<\/td>\n | 10.0.21.0\/24<\/code><\/td>\n| ap-northeast-1c<\/td>\n | \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n \u88dc\u8db3: AWS \u3067\u306f\u5404\u30b5\u30d6\u30cd\u30c3\u30c8\u3067\u5148\u982d4\u3064\uff0b\u672b\u5c3e1\u3064\u306e\u8a085\u30a2\u30c9\u30ec\u30b9\u304c\u4e88\u7d04<\/strong>\u3055\u308c\u308b\u305f\u3081\u3001\/24<\/code>\uff08256\u500b\uff09\u3067\u3082\u5b9f\u969b\u306b\u4f7f\u3048\u308b\u306e\u306f251\u500b\u3067\u3059\u3002\u7d30\u304b\u304f\u5207\u308a\u3059\u304e\u308b\u3068\u8db3\u308a\u306a\u304f\u306a\u308b\u306e\u3067\u6ce8\u610f\u3057\u307e\u3059\u3002<\/p>\n\u5b9f\u88c5\u4f8b\uff08\u69cb\u6210\u30a4\u30e1\u30fc\u30b8\uff09<\/h2>\nTerraform \u3067\u306e\u30a4\u30e1\u30fc\u30b8\uff08\u629c\u7c8b\u30fb\u6982\u5ff5\u78ba\u8a8d\u7528\uff09:<\/p>\n # \u30d1\u30d6\u30ea\u30c3\u30af\u30b5\u30d6\u30cd\u30c3\u30c8\nresource \"aws_subnet\" \"public_1a\" {\n vpc_id = aws_vpc.main.id\n cidr_block = \"10.0.0.0\/24\"\n availability_zone = \"ap-northeast-1a\"\n map_public_ip_on_launch = true # \u8d77\u52d5\u6642\u306b\u81ea\u52d5\u3067\u30d1\u30d6\u30ea\u30c3\u30afIP\u4ed8\u4e0e\n tags = { Name = \"public-1a\" }\n}\n\n# \u30d1\u30d6\u30ea\u30c3\u30af\u7528\u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\uff08IGW\u3078\uff09\nresource \"aws_route_table\" \"public\" {\n vpc_id = aws_vpc.main.id\n route {\n cidr_block = \"0.0.0.0\/0\"\n gateway_id = aws_internet_gateway.main.id\n }\n}\n\nresource \"aws_route_table_association\" \"public_1a\" {\n subnet_id = aws_subnet.public_1a.id\n route_table_id = aws_route_table.public.id\n}\n\n# \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b5\u30d6\u30cd\u30c3\u30c8\nresource \"aws_subnet\" \"private_app_1a\" {\n vpc_id = aws_vpc.main.id\n cidr_block = \"10.0.10.0\/24\"\n availability_zone = \"ap-northeast-1a\"\n tags = { Name = \"private-app-1a\" }\n}\n\n# \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u7528\u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\uff08NAT\u3078\uff09\nresource \"aws_route_table\" \"private\" {\n vpc_id = aws_vpc.main.id\n route {\n cidr_block = \"0.0.0.0\/0\"\n nat_gateway_id = aws_nat_gateway.main.id\n }\n}<\/pre>\nmap_public_ip_on_launch = true<\/code> \u3092\u4ed8\u3051\u308b\u3068\u3001\u305d\u306e\u30b5\u30d6\u30cd\u30c3\u30c8\u3067\u8d77\u52d5\u3057\u305f\u30a4\u30f3\u30b9\u30bf\u30f3\u30b9\u306b\u81ea\u52d5\u3067\u30d1\u30d6\u30ea\u30c3\u30af IP \u304c\u632f\u3089\u308c\u307e\u3059\u3002\u30d1\u30d6\u30ea\u30c3\u30af\u30b5\u30d6\u30cd\u30c3\u30c8\u7528\u306e\u8a2d\u5b9a\u3067\u3059\u3002<\/p>\n\u78ba\u8a8d\u65b9\u6cd5<\/h2>\n\u8a2d\u8a08\u304c\u610f\u56f3\u3069\u304a\u308a\u304b\u3001\u6b21\u306e\u89b3\u70b9\u3067\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n \n- \u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\u306e\u78ba\u8a8d<\/strong> \u2014 \u5bfe\u8c61\u30b5\u30d6\u30cd\u30c3\u30c8\u306b\u7d10\u3065\u304f\u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\u3092\u958b\u304d\u3001
0.0.0.0\/0<\/code> \u306e\u5411\u304d\u5148\u304c IGW \u304b NAT \u304b\u3092\u898b\u308b<\/li>\n- \u758e\u901a\u78ba\u8a8d\uff08\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u5074\uff09<\/strong> \u2014 \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u306e\u30b5\u30fc\u30d0\u30fc\u304b\u3089
curl https:\/\/example.com<\/code> \u306a\u3069\u3067\u5916\u5411\u304d\u901a\u4fe1\u304c\u901a\u308b\u3053\u3068\uff08NAT\u7d4c\u7531\uff09\u3001\u5916\u90e8\u304b\u3089\u305d\u306e\u30b5\u30fc\u30d0\u30fc\u3078\u76f4\u63a5\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u3044\u3053\u3068<\/li>\n- DB\u306e\u9694\u96e2\u78ba\u8a8d<\/strong> \u2014 RDS \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30b0\u30eb\u30fc\u30d7\u304c\u3001\u30a2\u30d7\u30ea\u5c64\u306eSG\u304b\u3089\u306e\u307f\u8a31\u53ef\u3055\u308c\u3066\u304a\u308a\u3001\u30d1\u30d6\u30ea\u30c3\u30af\u304b\u3089\u306e\u7d4c\u8def\u304c\u306a\u3044\u3053\u3068<\/li>\n<\/ol>\n
\u6ce8\u610f\u70b9<\/h2>\n\n- \u30d1\u30d6\u30ea\u30c3\u30af\/\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u306f\u300c\u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\u6b21\u7b2c\u300d\u3067\u3042\u308a\u3001\u30b5\u30d6\u30cd\u30c3\u30c8\u540d\u3060\u3051\u3067\u5224\u65ad\u3057\u306a\u3044<\/li>\n
- AP\u30b5\u30fc\u30d0\u30fc\u30fbDB\u306f\u30d1\u30d6\u30ea\u30c3\u30af\u306b\u7f6e\u304b\u306a\u3044\uff08\u5916\u90e8\u53d7\u3051\u53e3\u306f ALB \u306b\u96c6\u7d04\uff09<\/li>\n
- \u30d1\u30d6\u30ea\u30c3\u30afIP\u3092\u4ed8\u3051\u3066\u3082\u30eb\u30fc\u30c8\u4e0d\u8db3\u306a\u3089\u758e\u901a\u3057\u306a\u3044\uff083\u70b9\u30bb\u30c3\u30c8\u3092\u78ba\u8a8d\uff09<\/li>\n
- NAT\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306f\u5e38\u6642\u8ab2\u91d1\uff0b\u8ee2\u9001\u8ab2\u91d1\u3002\u691c\u8a3c\u74b0\u5883\u3067\u306f\u96c6\u7d04\u3084 VPC\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3067\u30b3\u30b9\u30c8\u6700\u9069\u5316<\/li>\n
- CIDR \u306f\u5404\u30b5\u30d6\u30cd\u30c3\u30c8\u30675\u30a2\u30c9\u30ec\u30b9\u4e88\u7d04\u3055\u308c\u308b\u70b9\u3092\u7e54\u308a\u8fbc\u3080<\/li>\n
- \u672c\u756a\u3067\u306f NACL\uff08\u30b9\u30c6\u30fc\u30c8\u30ec\u30b9\uff09\u3068 SG\uff08\u30b9\u30c6\u30fc\u30c8\u30d5\u30eb\uff09\u306e\u5f79\u5272\u306e\u9055\u3044\u3082\u62bc\u3055\u3048\u308b<\/li>\n<\/ul>\n
\u307e\u3068\u3081<\/h2>\n\n- \u30d1\u30d6\u30ea\u30c3\u30af\/\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u306e\u5dee\u306f
0.0.0.0\/0<\/code> \u306e\u5411\u304d\u5148\u304c IGW \u304b NAT \u304b<\/strong> \u306e\u4e00\u70b9<\/li>\n- \u5916\u90e8\u304b\u3089\u76f4\u63a5\u30a2\u30af\u30bb\u30b9\u3055\u308c\u308b\u3082\u306e\u3060\u3051\u3092\u30d1\u30d6\u30ea\u30c3\u30af\u306b\u3001\u305d\u308c\u4ee5\u5916\u306f\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u306b<\/li>\n
- \u5916\u5411\u304d\u901a\u4fe1\u306f NAT \u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u7d4c\u7531\uff08\u30b3\u30b9\u30c8\u306b\u6ce8\u610f\u3001VPC\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u3067\u6700\u9069\u5316\uff09<\/li>\n
- ALB\uff1d\u30d1\u30d6\u30ea\u30c3\u30af\u3001AP\/DB\uff1d\u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u3001\u304c\u57fa\u672c\u5f62<\/li>\n<\/ul>\n
\u300c\u30b5\u30d6\u30cd\u30c3\u30c8\u306e\u8272\u306f\u540d\u524d\u3067\u306a\u304f\u30eb\u30fc\u30c8\u30c6\u30fc\u30d6\u30eb\u304c\u6c7a\u3081\u308b\u300d\u2014\u2014\u3053\u306e\u4e00\u70b9\u3092\u62bc\u3055\u3048\u3066\u304a\u304f\u3068\u3001VPC\u8a2d\u8a08\u3067\u8ff7\u3044\u306b\u304f\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":" AWS \u3067 VPC \u3092\u8a2d\u8a08\u3059\u308b\u3068\u304d\u3001\u6700\u521d\u306b\u8ff7\u3046\u306e\u304c\u300c\u30b5\u30d6\u30cd\u30c3\u30c8\u3092\u3069\u3046\u5206\u3051\u308b\u304b\u300d\u3067\u3059\u3002\u3068\u304f\u306b \u30d1\u30d6\u30ea\u30c3\u30af\u30b5\u30d6\u30cd\u30c3\u30c8 \u3068 \u30d7\u30e9\u30a4\u30d9\u30fc\u30c8\u30b5\u30d6\u30cd\u30c3\u30c8 \u306e\u9055\u3044\u3068\u4f7f\u3044\u5206\u3051\u306f\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u306b\u3082\u30b3\u30b9\u30c8\u306b\u3082\u76f4\u7d50\u3059\u308b\u57fa\u672c\u8a2d\u8a08\u3067\u3059\u3002\u3053\u306e\u8a18\u4e8b\u3067\u306f\u3001\u4e21\u8005\u306e\u9055\u3044\u3092\u300c\u30eb\u2026<\/p>\n","protected":false},"author":1,"featured_media":3419,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"sns_share_botton_hide":"","vkExUnit_sns_title":"","_vk_print_noindex":"","sitemap_hide":"","_veu_custom_css":"","veu_display_promotion_alert":"","vkexunit_cta_each_option":"","_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[75],"tags":[499,679,1095,562,472],"class_list":["post-3420","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-code-of-serverside","tag-aws","tag-679","tag-1095","tag-562","tag-472"],"veu_head_title_object":{"title":"","add_site_title":""},"jetpack_publicize_connections":[],"jetpack-related-posts":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/qol-kk.com\/wp2\/wp-content\/uploads\/2026\/09\/20260917-plan025-thumbnail.jpg","_links":{"self":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/comments?post=3420"}],"version-history":[{"count":1,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3420\/revisions"}],"predecessor-version":[{"id":3433,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/posts\/3420\/revisions\/3433"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/media\/3419"}],"wp:attachment":[{"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/media?parent=3420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/categories?post=3420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/qol-kk.com\/wp2\/wp-json\/wp\/v2\/tags?post=3420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
| | | | | | | |