May 2026
Intermediate
496 pages
12h 11m
Japanese
book
実践 ハイブリッドクラウド・セキュリティアーキテクチャ ―ゼロトラスト原則を用いたセキュリティ設計の実践的手法
by Mark Buckwell, Stefaan Van daele, Carsten Horst, 石川 朝久
Content preview from 実践 ハイブリッドクラウド・セキュリティアーキテクチャ ―ゼロトラスト原則を用いたセキュリティ設計の実践的手法
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
286
8
章 インフラストラクチャセキュリティ
表 8-5 パブリッククラウドのネットワーク設計
ソリュー
ション観点
AWS Azure GCP IBM Cloud
全体ネット
ワーク構造
ワークロードの
グループごとに
VPCを展開する
「統合モデル」
Hub & Spoke 型アーキテ
クチャ
VPCネットワーク
は複数リージョン
にまたがるグロー
バルリソース
VPCがMZR（複数ゾーン）
にまたがるリージョンでは、
VPC内のいずれかのサブ
ネットにリソースを接続
外部通信・
内部通信
中央集約型の
Ingress VPCと
Egress VPCを
展開
すべてのインターネット
向けインバウンド／アウ
トバウンド通信はハブを
経由
インターネット通
信は専用VPC、
内部通信は共有
VPCを経由
すべてのインターネット入出
力通信がトランジットVPC
を利用するよう構成
本番・開発
環境の分離
最も粒度の細か
い分離。環境ご
とにOUを作成
し、アプリケー
ションごとにア
カウントを分離
環境×アプリケーション
ごとにサブスクリプショ
ンを作成することで最も
細かい分離が可能。
より粗い分離としては本
番環境用／開発環境用
サブスクリプション分割
も可能
環境は組織配下
のFolderとして
表現。本番環境
リソースと開発環
境リソースは別
フォルダで分離
Enterprise Account配下の
Cloud Accountによる分離な
ど複数の選択肢あり。
Resource Groupと Access
Group ／ Trusted Profileに
よるアクセス分 離、VPCに
よるワー
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.