[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"article:digital-cho-government-cloud":3},{"meta":4,"markdown":65},{"type":5,"articleId":6,"slug":7,"title":8,"titleEn":9,"category":10,"summary":11,"publishedAt":12,"image":13,"vocabulary":14},"article","tech-digital-cho-cloud","digital-cho-government-cloud","デジタル庁ガバメントクラウド技術詳細","Digital Agency Government Cloud — Technical Details","tech","An overview of Japan's Government Cloud (Gov-Cloud) architecture: multi-cloud selection across AWS, Azure, GCP, Oracle Cloud, and Sakura Internet; ISMAP certification requirements; the migration schedule for approximately 1,700 municipalities; security baselines; and the cost model.\n","2026-04-27T00:00:00Z","https:\u002F\u002Fimages.yamiyomi.com\u002Ftech-digital-cho-cloud.png",[15,20,25,29,33,37,41,45,49,53,57,61],{"word":16,"reading":17,"meaning":18,"level":19},"庁","ちょう","agency","N2",{"word":21,"reading":22,"meaning":23,"level":24},"自治体","じちたい","municipality","N1",{"word":26,"reading":27,"meaning":28,"level":19},"移行","いこう","migration",{"word":30,"reading":31,"meaning":32,"level":24},"選定","せんてい","selection",{"word":34,"reading":35,"meaning":36,"level":24},"認証","にんしょう","certification",{"word":38,"reading":39,"meaning":40,"level":24},"要件","ようけん","requirement",{"word":42,"reading":43,"meaning":44,"level":24},"監査","かんさ","audit",{"word":46,"reading":47,"meaning":48,"level":19},"行政","ぎょうせい","administration",{"word":50,"reading":51,"meaning":52,"level":24},"調達","ちょうたつ","procurement",{"word":54,"reading":55,"meaning":56,"level":19},"基盤","きばん","infrastructure",{"word":58,"reading":59,"meaning":60,"level":19},"整備","せいび","development",{"word":62,"reading":63,"meaning":64,"level":19},"期限","きげん","deadline","\n::para\n[日本]{にほん:Japan:N5}の[行政]{ぎょうせい:administration:N3}デジタル[改革]{かいかく:reform:N2}の[中核]{ちゅうかく:core:N1}を[担う]{になう:bears:N2}デジタル[庁]{ちょう:agency:N2}は、[全国]{ぜんこく:nationwide:N3}の[国]{くに:national:N5}・[地方]{ちほう:local:N4}[公共]{こうきょう:public:N3}[団体]{だんたい:bodies:N2}が[共通]{きょうつう:commonly:N3}[利用]{りよう:use:N3}できる「ガバメントクラウド」を[整備]{せいび:developing:N1}しています。[本]{ほん:this:N5}[記事]{きじ:article:N3}では、その[技術的]{ぎじゅつてき:technical:N2}な[全体像]{ぜんたいぞう:overall picture:N2}と[今後]{こんご:future:N5}の[展開]{てんかい:rollout:N1}[計画]{けいかく:plan:N4}を[整理]{せいり:organize:N1}します。\n\n#en\nThe Digital Agency, which bears the core of Japan's administrative digital reform, is developing the \"Government Cloud\" — a platform that all national and local public bodies can commonly use. This article organizes its technical overall picture and future rollout plan.\n::\n\n::heading\nマルチクラウドの[選定]{せんてい:selection:N3}[基準]{きじゅん:criteria:N1}\n\n#en\nMulti-Cloud Selection Criteria\n::\n\n::para\nガバメントクラウドは[現在]{げんざい:currently:N3}、AWS、Microsoft Azure、Google Cloud、Oracle Cloud、そして[国産]{こくさん:domestic:N3}クラウドのさくらインターネットの5[社]{しゃ:companies:N4}が[選定]{せんてい:selected:N3}されています。[選定]{せんてい:selection:N3}には[毎年]{まいとし:annually:N5}[公募]{こうぼ:open call for proposals:N2}が[行われ]{おこなわれ:conducted:N5}、[技術]{ぎじゅつ:technical:N2}[要件]{ようけん:requirements:N3}と[価格]{かかく:price:N1}の[両面]{りょうめん:both sides:N3}で[評価]{ひょうか:evaluated:N1}されます。[特に]{とくに:particularly:N4}、[国産]{こくさん:domestic:N3}クラウドの[参入]{さんにゅう:entry:N3}は[経済]{けいざい:economic:N3}[安全]{あんぜん:security:N3}[保障]{ほしょう:assurance:N1}の[観点]{かんてん:perspective:N3}からも[重視]{じゅうし:emphasized:N1}されています。\n\n#en\nThe Government Cloud currently has five providers selected: AWS, Microsoft Azure, Google Cloud, Oracle Cloud, and the domestic cloud Sakura Internet. Selection is conducted via an annual open call for proposals, evaluated on both technical requirements and price. Particularly, the entry of domestic clouds is also emphasized from the perspective of economic security.\n::\n\n::callout\n[補足]{ほそく:supplementary note:N2}：[海外]{かいがい:overseas:N4}クラウドのみに[依存]{いぞん:depend:N2}する[状態]{じょうたい:state:N1}は[地政学]{ちせいがく:geopolitical:N3}リスクが[大きい]{おおきい:large:N5}ため、[国産]{こくさん:domestic:N3}クラウドの[育成]{いくせい:cultivation:N3}が[政策]{せいさく:policy:N1}[目的]{もくてき:goal:N4}に[含まれ]{ふくまれ:included:N2}ています。\n\n#en\nSupplementary note: A state dependent solely on overseas clouds carries large geopolitical risk, so cultivating domestic clouds is included as a policy goal.\n::\n\n::heading\nISMAPによる[認証]{にんしょう:certification:N1}[要件]{ようけん:requirements:N3}\n\n#en\nCertification Requirements via ISMAP\n::\n\n::para\nガバメントクラウドへ[参入]{さんにゅう:enter:N3}するには、ISMAP（Information system Security Management and Assessment Program、[政府]{せいふ:government:N2}[情報]{じょうほう:information:N3}システムのためのセキュリティ[評価]{ひょうか:assessment:N1}[制度]{せいど:system:N3}）の[認証]{にんしょう:certification:N1}が[必須]{ひっす:mandatory:N1}です。ISMAPはISO\u002FIEC 27001やNIST SP 800-53などの[国際]{こくさい:international:N3}[標準]{ひょうじゅん:standards:N1}を[参考]{さんこう:reference:N3}に、[日本]{にほん:Japan:N5}[政府]{せいふ:government:N2}の[要件]{ようけん:requirements:N3}に[合わせ]{あわせ:tailored to:N3}て[策定]{さくてい:formulated:N1}されたものです。[第三者]{だいさんしゃ:third party:N1}[監査]{かんさ:audit:N1}[機関]{きかん:institutions:N3}による[年次]{ねんじ:annual:N3}[監査]{かんさ:audits:N1}が[義務付け]{ぎむづけ:mandated:N1}られています。\n\n#en\nTo enter the Government Cloud, ISMAP (Information system Security Management and Assessment Program — the security assessment system for government information systems) certification is mandatory. ISMAP was formulated based on international standards such as ISO\u002FIEC 27001 and NIST SP 800-53, tailored to Japanese government requirements. Annual audits by third-party audit institutions are mandated.\n::\n\n::heading\n[約]{やく:approximately:N3}1700[自治体]{じちたい:municipalities:N3}の[移行]{いこう:migration:N2}スケジュール\n\n#en\nMigration Schedule for Approximately 1,700 Municipalities\n::\n\n::para\nデジタル[庁]{ちょう:agency:N2}は[全国]{ぜんこく:nationwide:N3}[約]{やく:approximately:N3}1700の[自治体]{じちたい:municipalities:N3}に[対し]{たいし:to:N3}、[基幹]{きかん:core:N1}[業務]{ぎょうむ:business:N3}システム（[住民]{じゅうみん:resident:N3}[基本]{きほん:basic:N1}[台帳]{だいちょう:registry:N1}、[税]{ぜい:tax:N2}、[国民]{こくみん:national:N3}[健康]{けんこう:health:N1}[保険]{ほけん:insurance:N1}など20[業務]{ぎょうむ:business operations:N3}）の[標準]{ひょうじゅん:standardized:N1}[準拠]{じゅんきょ:compliant:N1}システムへの[移行]{いこう:migration:N2}[期限]{きげん:deadline:N3}を[設定]{せってい:set:N2}しました。[当初]{とうしょ:originally:N3}は2025[年度]{ねんど:fiscal year:N4}[末]{まつ:end:N3}が[期限]{きげん:deadline:N3}でしたが、[各]{かく:each:N2}[自治体]{じちたい:municipality:N3}の[実情]{じつじょう:actual circumstances:N3}を[考慮]{こうりょ:considering:N1}し、[移行]{いこう:migration:N2}が[困難]{こんなん:difficult:N3}な[団体]{だんたい:bodies:N2}には[期限]{きげん:deadline:N3}の[延長]{えんちょう:extension:N2}も[認められ]{みとめられ:allowed:N3}ています。\n\n#en\nThe Digital Agency set a deadline for approximately 1,700 nationwide municipalities to migrate their core business systems (20 business operations including the Basic Resident Registry, tax, National Health Insurance, etc.) to standards-compliant systems. The deadline was originally end of fiscal year 2025, but considering each municipality's actual circumstances, deadline extensions are also allowed for bodies for which migration is difficult.\n::\n\n::callout\n[要点]{ようてん:key point:N3}：[標準化]{ひょうじゅんか:standardization:N1}と[移行]{いこう:migration:N2}を[同時]{どうじ:simultaneously:N4}に[進める]{すすめる:advance:N3}には、[国]{くに:national:N5}と[自治体]{じちたい:local government:N3}の[緊密]{きんみつ:close:N1}な[連携]{れんけい:coordination:N1}が[不可欠]{ふかけつ:indispensable:N3}です。\n\n#en\nKey point: Advancing standardization and migration simultaneously requires close coordination between national and local government.\n::\n\n::heading\n[共通]{きょうつう:common:N3}セキュリティベースライン\n\n#en\nCommon Security Baseline\n::\n\n::para\nガバメントクラウド[上]{じょう:on:N5}に[構築]{こうちく:built:N2}されるシステムは、デジタル[庁]{ちょう:agency:N2}が[定める]{さだめる:set:N3}[共通]{きょうつう:common:N3}セキュリティベースラインに[準拠]{じゅんきょ:comply:N1}する[必要]{ひつよう:must:N3}があります。これにはネットワーク[分離]{ぶんり:isolation:N1}、[暗号化]{あんごうか:encryption:N3}（[保存時]{ほぞんじ:at rest:N1}と[通信時]{つうしんじ:in transit:N3}の[両方]{りょうほう:both:N3}）、[多]{た:multi:N4}[要素]{ようそ:factor:N1}[認証]{にんしょう:authentication:N1}、[監査]{かんさ:audit:N1}ログの[長期]{ちょうき:long-term:N3}[保存]{ほぞん:retention:N1}などが[含まれ]{ふくまれ:included:N2}ます。[各]{かく:each:N2}クラウド[事業者]{じぎょうしゃ:provider:N4}は、これらの[要件]{ようけん:requirements:N3}を[満たす]{みたす:satisfy:N3}リファレンスアーキテクチャを[公開]{こうかい:publish:N4}しています。\n\n#en\nSystems built on the Government Cloud must comply with a common security baseline set by the Digital Agency. This includes network isolation, encryption (both at rest and in transit), multi-factor authentication, and long-term retention of audit logs. Each cloud provider publishes reference architectures that satisfy these requirements.\n::\n\n::heading\nコストモデルと[調達]{ちょうたつ:procurement:N3}[改革]{かいかく:reform:N2}\n\n#en\nCost Model and Procurement Reform\n::\n\n::para\n[従来]{じゅうらい:conventional:N1}の[行政]{ぎょうせい:government:N3}[調達]{ちょうたつ:procurement:N3}は[単年度]{たんねんど:single fiscal year:N3}[契約]{けいやく:contract:N1}が[原則]{げんそく:principle:N2}でしたが、クラウドの[従量]{じゅうりょう:usage-based:N1}[課金]{かきん:billing:N2}モデルとは[相性]{あいしょう:compatibility:N3}が[悪い]{わるい:poor:N4}という[問題]{もんだい:problem:N4}がありました。デジタル[庁]{ちょう:agency:N2}は[複数]{ふくすう:multiple:N2}[年度]{ねんど:fiscal year:N4}の[包括]{ほうかつ:comprehensive:N1}[契約]{けいやく:contract:N1}や、[利用]{りよう:usage:N3}[実績]{じっせき:track record:N2}に[応じた]{おうじた:according to:N1}[支払い]{しはらい:payment:N3}の[仕組み]{しくみ:mechanism:N3}を[導入]{どうにゅう:introduced:N2}し、クラウドの[特性]{とくせい:characteristics:N3}を[活かせる]{いかせる:can leverage:N3}[調達]{ちょうたつ:procurement:N3}[制度]{せいど:system:N3}に[改革]{かいかく:reformed:N2}しました。\n\n#en\nConventional government procurement was, in principle, single-fiscal-year contracts, but this had poor compatibility with the usage-based billing model of cloud. The Digital Agency introduced multi-year comprehensive contracts and payment mechanisms based on usage track record, reforming the procurement system into one that can leverage cloud characteristics.\n::\n\n::heading\n[今後]{こんご:going forward:N5}の[課題]{かだい:challenges:N2}\n\n#en\nChallenges Going Forward\n::\n\n::para\nガバメントクラウドの[今後]{こんご:going forward:N5}の[課題]{かだい:challenges:N2}としては、[自治体]{じちたい:municipalities:N3}[側]{がわ:side:N3}の[人材]{じんざい:human resources:N2}[不足]{ふそく:shortage:N4}、[既存]{きそん:existing:N1}ベンダーロックインの[解消]{かいしょう:resolution:N3}、そしてマルチクラウド[間]{かん:between:N5}でのデータ[移植性]{いしょくせい:portability:N2}の[確保]{かくほ:ensuring:N1}が[挙げられ]{あげられ:cited:N1}ます。デジタル[庁]{ちょう:agency:N2}は[共通]{きょうつう:common:N3}コンポーネント（[認証]{にんしょう:authentication:N1}、[決済]{けっさい:payment:N3}、[通知]{つうち:notification:N4}など）を[整備]{せいび:developing:N1}し、[各]{かく:each:N2}[自治体]{じちたい:municipality:N3}が[個別]{こべつ:individually:N2}に[実装]{じっそう:implement:N2}しなくて[済む]{すむ:does not need to:N3}よう[支援]{しえん:support:N1}しています。\n\n#en\nChallenges going forward for the Government Cloud include human resource shortages on the municipal side, dissolving existing vendor lock-in, and ensuring data portability between multiple clouds. The Digital Agency is developing common components (authentication, payment, notifications, etc.) to support municipalities so they do not need to implement them individually.\n::\n"]