Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
信頼ルールはGoogle Drive共有の孫の手になるか?
Search
fnifni
September 15, 2023
Technology
0
160
信頼ルールはGoogle Drive共有の孫の手になるか?
BTCON2023の登壇資料です
fnifni
September 15, 2023
Tweet
Share
More Decks by fnifni
See All by fnifni
生成AIのガバナンスとこれから
fnifni
0
83
AWS re:Inforce 2024 に コミュニティから登壇してきた話
fnifni
0
19
COM224: How organizations are actually applying AWS security best practices
fnifni
0
22
BsidesTokyo2024_AWSセキュリティの ベストプラクティスに関する 利用実態調査のレポートの紹介
fnifni
0
23
re:Inforce2024-recap_英語力ゴミカスでもフル英語登壇を乗り切る成功メソッド
fnifni
0
92
ゼロトラスト導入支援ってどんなことやってるの?
fnifni
0
47
ログの話
fnifni
0
55
re:Inforce 2021 ReCap
fnifni
0
180
CloudTailをAzure Sentinelで 分析するということ
fnifni
1
180
Other Decks in Technology
See All in Technology
『GRANBLUE FANTASY Relink』ソフトウェアラスタライザによる実践的なオクルージョンカリング
cygames
0
140
プロダクトエンジニアを支えるための開発生産性向上施策
tsukakei
0
140
ロリポップ! for Gamersを支えるインフラ/lolipop for gamers infrastructure
takumakume
0
130
四国クラウドお遍路 2024 in 高知 オープニング
yukataoka
0
200
持続可能なソフトウェア開発を支える『GitHub CI/CD実践ガイド』
tmknom
6
1.3k
技術的負債解消の取り組みと専門チームのお話
bengo4com
0
330
DevRelの始め方
moongift
PRO
1
380
自作Cコンパイラ 8時間の奮闘
soukouki
0
830
どこよりも遅めなWinActor Ver.7.5.0 新機能紹介
tamai_63
0
200
「自動テストのプラクティスを効果的に学ぶためのカードゲーム」 ( #sqip2024 )
teyamagu
PRO
2
180
サーバー管理しないサーバーサービスManaged DevOps Pool
kkamegawa
0
130
LLVM/ASMを使った有限体の高速実装
herumi
0
120
Featured
See All Featured
Build your cross-platform service in a week with App Engine
jlugia
228
18k
The Illustrated Children's Guide to Kubernetes
chrisshort
47
48k
Reflections from 52 weeks, 52 projects
jeffersonlam
346
20k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
41
6.5k
Web Components: a chance to create the future
zenorocha
308
42k
Building a Modern Day E-commerce SEO Strategy
aleyda
36
6.8k
In The Pink: A Labor of Love
frogandcode
139
22k
10 Git Anti Patterns You Should be Aware of
lemiorhan
653
58k
Robots, Beer and Maslow
schacon
PRO
157
8.2k
Rails Girls Zürich Keynote
gr2m
93
13k
GraphQLとの向き合い方2022年版
quramy
43
13k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
irinanazarova
0
97
Transcript
Will the trust rule be the granddaddy of Google Drive
sharing? Considering the Pain of Google Drive Sharing … At Business Technology Conference Japan 2023 2023.01.21 / Lecture by Hirokazu
৴པϧʔϧ Google Driveڞ༗ͷଙͷखʹͳΔ͔ʁ Google Drive ڞ༗ͷ௧ΈΛߟ͑Δ … At Business
Technology Conference Japan 2023 2023.01.21 / ͻΖ͔ͣ
Who am I !? Hirokazu Yoshida @ CloudNative Inc. Job
: Security Engineer Community : Security-JAWS Recent Interests : Data Governance ɹɹɹɹɹɹɹɹPrivacy
Attention !! • τϐοΫͷੑ্࣭ɺGoogle DriveͷҰൠతͳ༷ެ։ใϨ ϕϧͷϕετϓϥΫςΟεʹ৮Ε·͕͢ɺࣄࡉ͔ͳղઆτ ϦοΩʔͳར༻ํ๏ʹݴٴ͠·ͤΜɻ • ϢʔεέʔεΛྫࣔ͠·͕͢ɺࣗ͝Ͱ࣮ࢪ͢Δࡍɺ
Google WorkspaceGoogle DriveͷϥΠηϯεنΛࣗ͝ Ͱ֬ೝ͔ͯ͠Βߦ͍ͬͯͩ͘͞ɻ
Google Driveͬͯ·͔͢ʁ
ײతͰ͍͍͢Ͱ͢ΑͶʔ
Types of Google Drive • ڞ༗υϥΠϒ • ϚΠυϥΠϒ
Types of Google Drive • ڞ༗υϥΠϒ • ෦ϓϩδΣΫτɾΠϕϯτɺ֎෦ڞ༗ઌͳͲͷ༻్͝ͱʹڞ༗υϥΠϒΛ࡞ͬͯཧ • γϯϓϧͳཧݖݶ
ཧऀɺίϯςϯπཧऀɺߘऀɺӾཡऀʢίϝϯτՄʣɺӾཡऀ • ϑΝΠϧϑΥϧμͷΦʔφʔɺνʔϜʹͳΔ • ΰϛശ30Ͱશআ or ཧऀ͕खಈͰશআʢ෮ݩɺߘऀҎ্Ͱ࣮ࢪՄೳʣ
Types of Google Drive • ϚΠυϥΠϒ • ݸਓతͳϑΝΠϧඇެ։ϑΝΠϧ(1on1ϝϞɺ৬ೳධՁͳͲϓϥΠόγʔ͕ؾ ʹͳΔͷ)Λ֨ೲ •
ϑΝΠϧϑΥϧμͷΦʔφʔɺ࡞ͨ͠ϢʔβʔʹͳΔ • Ϣʔβʔ͕͍ͳ͘ͳΔͱɺίϯςϯπফ͑Δ • ΰϛശ30Ͱશআʢ෮ݩϑΝΠϧͷΦʔφʔͰ࣮ࢪՄೳʣ
ϑΥϧμฤΞΫηεݖઃఆͬͯ Ͳ͏ͬͯ·͢ʁ
Best Practice (shared drive) • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ • ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻
• ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
͓ؾ͖͍͍ͮͨͩͨͰ͋Ζ͏͔…
Best Practice (shared drive) : reprint • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ
• ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻ • ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) : reprint • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
A Glimpse of Google Drive's Philosophy in Best Practices •
Google Driveʹ֨ೲͨ͠ίϯςϯπͷڞ༗ΞΫηεݖཧ ɺར༻ऀͷࡋྔʹҕͶΒΕ͍ͯΔ • ϑΥϧμߏར༻ঢ়گʹԠͯ͡ɺར༻ऀ͕ࣗൃతʹݟ͢ ͷͱ͍ͯ͠Δ • ϚΠυϥΠϒͷίϯςϯπͷڞ༗ํ๏ར༻ऀͷࡋྔ
ͭ·Γ ίϯςϯπΞΫηεݖͷཧ ར༻ऀͷϦςϥγʔʹֻ͔͍ͬͯΔ
ཧऀଆͰؤுͬͯ ϑΥϧμߏ࡞Ε͍͍Μ͡Όͳ͍ʁ
🤔
A common scene on site (1) • ͜ͷϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺ૬खνʔϜʹϑΥϧμͷΞΫη εݖ͕ͳ͍͠ɺϑΥϧμͷΞΫηεݖཧͷݖݶͳ͍ •
͍·ɺ͜ͷϑΝΠϧ͚ͩݟͤΒΕΕ͍͍ • Կਓ͔͍Δ͚ͲɺෳνʔϜʹؔऀ͕͍Δ͠ɺ͍͍ͪͪಛ ఆϢʔβʔΛࢦఆ͢Δͷɺ࿙Ε͕͋Γͦ͏Ͱμϧ͍ɻ • ͜ͷϑΝΠϧͷͨΊʹϑΥϧμ࡞ਃͱ͔ͬͱμϧ͍ɻ
A common scene on site (1) • ͍͠͠ɺʮ͍·ɺ͑Δ͜ͱʯΛ༏ઌ͍ͨ͠ • ͦ͏ͩɺڞ༗ͷʮҰൠతͳΞΫηεʯΛ͍͍͑Μ͡ΌΜʂ
• ϦϯΫΛνϟοτϧʔϜʹషͬͯͱ…
A common scene on site (1) • νϟοτϧʔϜͷެ։ൣғ ʹσʔλͷެ։ൣғ •
ޙ͔ΒνϟοτϧʔϜʹ ࢀՃͨ͠ਓݟΒΕΔ • ͦ͜·Ͱߟ͑ͯ·͢ʁ
A common scene on site (2) • ֎෦ͱେ͖͍ϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺਃखଓ͖͕ࡶͰɺ ϝʔϧ͑ͳ͍ •
͍͠͠ɺʮ͍·ɺΓ͍ͨʯ • ֎෦͔ΒͷটΛड͚ͯͦ͜ʹஔ͜͏ • ςφϯτઃఆͰ֎෦ڞ༗Λېࢭ͍ͯ͠Δ߹ɺΞοϓϩʔ υෆՄͰ͋Δ͕ɺطଘϑΝΠϧͷฤू্ॻ͖อଘՄೳ
A common scene on site (2) • ଞࣾςφϯτɺݸਓͷ gmail.comͷ߹͋Δ •
CASBͰࣗࣾςφϯτ ͷΞοϓϩʔυͱࣝผ • টΛड͚Δ͜ͱࣗମࢭ ΊΒΕͣɺه͞Εͳ͍
A common scene on site (Summary) • Google Driveࣗମɺར༻ऀͷϦςϥγʔʹґଘ͢Δઃܭࢥ •
ެ։ൣғΞΫηεݖʹ͍ͭͯɺ࢛࣌தߟ͍͑ͯΔਓͳΜͯ ͍·͢ʁ • ςφϯτઃఆϑΥϧμઃܭɺӡ༻ϧʔϧΛఆΊͯɺ ศརػೳʹΑͬͯɺൈ͚݀తʹར༻Ͱ͖Δ
Google Drive ਓྨʹૣ͗ͨ͢ͷ͔…
ͦΜͳࡴെͱͨ͠εϨʹ ৴པϧʔϧ͕ʂ
What are trust rules? • ৴པϧʔϧʹΑΓɺཧऀ෦͓Αͼ֎෦ͷڞ༗Λ੍ݶ͢Δ ϙϦγʔΛద༻Ͱ͖·͢ɻ • ৫୯Ґάϧʔϓ୯ҐͰϧʔϧΛઃఆͰ͖ΔͨΊɺͯ͢ͷ Ϣʔβʔʹରͯ͠แׅతͳϙϦγʔΛద༻͢ΔΑΓɺΑΓ͖
Ίࡉ͔͍Ξϓϩʔν͕ՄೳʹͳΓ·͢ɻ • Google Workspace Ent Plus / Ent Std, Edu Plus / Edu Std https://workspaceupdates.googleblog.com/2022/11/google-drive-trust-rules- generally-available.html
What are trust rules? • ϚʔέςΟϯά νʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ ύʔτφʔ৫ͷಛఆͷϢʔβʔͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ৫ͷଞͷνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺύʔ
τφʔ৫ͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ • ύʔτφʔ৫ͷଞͷνʔϜ͕৫ͷͲͷϢʔβʔͱ ϑΝΠϧΛڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺࡒνʔϜ͓ ΑͼΤάθΫςΟϒ νʔϜͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ৫ͷଞͷ
νʔϜͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ൣғɿϙϦγʔͷద༻ൣғ (৫ or / and
άϧʔϓ - আ֎Մ) • τϦΨʔɿڞ༗ or / and ड৴ • ݅ɿڞ༗ or ड৴͢Δ૬ख (৫ or / and άϧʔϓ - আ֎ෆՄ) • ૢ࡞ɿڐՄ or ڋ൱ https://support.google.com/a/answer/10621317
ͳΔ΄ͲΘ͔ΒΜ
In short, it looks like this • ڞ༗ͱड৴͕Ұகͨ͠૬खͷΈ ڞ༗͕Ͱ͖Δ •
֎෦ϢʔβʔҰக͠ͳͯ͘ Α͍ • ڋ൱͕ڧ͍ͷͰڐՄΛ͍͔ʹ Έ߹ΘͤΔ͔͕ΧΪ • Ϣʔεέʔε͕ෳࡶͩͱ…
ເ͕͕Δʂ ͙͢ʹࢼ͍ͨ͠ʂ
It's easy to get started, but... • ৴པϧʔϧΛ༗ޮԽ͢Δͱɺطଘͷςφϯτ֎෦ڞ༗ઃఆ͕ແޮͱͳΓɺ σϑΥϧτͷ৴པϧʔϧ͕࡞͞ΕΔ
• ݱࡏͷςφϯτ֎෦ڞ༗ઃఆΛؑΈͨϧʔϧ͕࡞͞ΕΔͷͰɺ ৴པϧʔϧΛ༗ޮԽ͚ͨͩ͠ͰӨڹൃੜ͠ͳ͍ • ࡞ͨ͠৴པϧʔϧ͕༗ޮʹ࡞༻͍ͯ͠Δ͔ɺτϥΠΞϯυΤϥʔͰͷ֬ೝͱͳΔ ݕূڥΛ༻ҙͯ͠࡞ΓࠐΉͷ͕͓קΊ • ৴པϧʔϧΛແޮԽ͢ΔͱɺΓΔͷͰۓٸ࣌҆৺ (?)
It is a step-by-step process • ৫άϧʔϓؒͷ ڞ༗Մ൱ؔΛཧ •
ڞ༗Մ൱ؔΛجʹઃఆʹམ ͱ͠ࠐΉ • γφϦΦΛ࡞ͬͯಈ࡞֬ೝ • Ϣʔεέʔε͕ෳࡶͩͱ…
ͳΜ͔ͦ͠͏…
Concept of Trust Rules • ৴པϧʔϧɺΨʔυϨʔϧͱͯ͠͏ • ϢʔβʔମݧมΘΒͳ͍ɻ ແअؾʹڞ༗ͯ͠Β͔ͬͯ·Θͳ͍ɻ
• ৫ઃܭతʹڐՄ͠ͳ͍ൣғͷڞ༗Λ͙͜ͱ͕Ͱ͖Δ • Ͱ͖Δ͚ͩγϯϓϧʹߏ͢Δͷ͕ྑͦ͞͏
Use cases that may be addictive • ظޏ༻ऀ༻Ϣʔβʔʹର͢Δެ։ൣғ౷੍ • ϝʔϧࣾγεςϜͷར༻ͷͨΊʹGWSΞΧϯτΛൃߦ͍ͯ͠Δ
• νϟοτʹࢀՃ͢ΔͷͰURLʹ৮ΕΔػձ͋Δ͕ɺ ڞ༗υϥΠϒͰڐՄͨ͠σʔλҎ֎ͷࣾσʔλʹ৮Εͤͨ͘͞ͳ͍ • ϚΠυϥΠϒ͍͍͕ͬͯɺ֎෦ͱڞ༗ͤͨ͘͞ͳ͍
Use cases that may be addictive • ֎෦ڞ༗ΛϗϫΠτϦετʢ·ͨېࢭʣϙϦγʔపఈ • ڞ༗ͱड৴ΛಛఆυϝΠϯͷΈʹݶΔ͜ͱͰɺ
ैདྷͷൈ͚݀ʢड৴ͨ͠ڞ༗ίϯςϯπͷ্ॻ͖ʣΛ࠹͙ • ֎෦ڞ༗Google Driveར༻͠ͳ͍͕ɺۀऀͷݟੵΓडྖͳ Ͳྫ֎తʹಛఆ෦ɾάϧʔϓͷΈGoogle DriveΛ༻͍ͨ֎෦ ͱͷڞ༗ (ड৴) ΛڐՄ͢Δ
Use cases that may not work • ࡒνʔϜΤάθΫςΟϒνʔϜͱ͚ͩڞ༗͢Δ • ಛఆνʔϜؒͱ͚ͩڞ༗Ͱ͖Ε͍͍ɻͳΜͯ͋Δʁ
• ڞ༗υϥΠϒͷϑΥϧμߏͱݖݶઃఆΛ ͜·Ίʹϝϯςφϯε͓ͯ͠Γɺۀ༰ͷఆ͕ٛ໌֬Ͱɺ ͦΕલఏͰۀઃܭ͞Ε͍ͯΔ…ͳͲϝλཁૉ͕ඞཁͦ͏
Anti-patterns • ͍͖ͳΓڋ൱ϙϦγʔΛશࣾల։ (ڐՄϙϦγʔͷల։࿙Ε)ͯ͠ɺ طଘͷ֎෦͔Βڞ༗͞Εͨίϯςϯπ͕ݟ͑ͳ͘ͳΔ • ͜ͷϑΝΠϧ͚ͩྫ֎ʹͯ͠΄͍͠ • ڞ༗ɾड৴ͷରͱͳΔ৫άϧʔϓʹআ֎݅Λ͚͍ͭͨ
• ϙϦγʔͷద༻ൣғɺআ֎݅ΛઃఆͰ͖Δ
To make it easier to do • ·ͣɺࣾڞ௨తͳڐՄϙϦγʔΛ༻ҙͯ͠શମʹద༻ • ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓআ֎͢Δ
• ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓ͚ͷڐՄϙϦγʔΛద༻ • ڋ൱ϙϦγʔɺࡉ͔͍άϧʔϓ৫ʹରͯ͠ݕ౼ • جຊతʹɺڐՄ͠ͳ͚Ε͍͍ͷͰɺઈରېࢭͷέʔεͷΈར༻
ಛੑΛཧղ͢Εɺ ͔Ώ͍ͱ͜Ζʹख͕ಧ͖ͦ͏
conclusion • ศར͚ͩͲେࡶͩͬͨڞ༗ͷʮҰൠతͳΞΫηεʯʹΨʔυ Ϩʔϧ͕Ͱ͖ͨ • ઃܭ8ׂ (৫ɾάϧʔϓͷ୨Է͕͠)ɺ ݕূڥͰೖ೦ʹςετ1.5ׂ •
Google Driveͷڞ༗υϥΠϒͷӡ༻ํ๏ɾϝϯςφϯεํʹ Αͬͯɺ͍ํ͕มΘ͖ͬͯͦ͏
Α͍ Google Drive LifeΛʂ
Thank you !