Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
信頼ルールはGoogle Drive共有の孫の手になるか?
Search
fnifni
September 15, 2023
Technology
440
0
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
信頼ルールはGoogle Drive共有の孫の手になるか?
BTCON2023の登壇資料です
fnifni
September 15, 2023
Transcript
47 slides
Will the trust rule be the granddaddy of Google Drive
sharing? Considering the Pain of Google Drive Sharing … At Business Technology Conference Japan 2023 2023.01.21 / Lecture by Hirokazu
৴པϧʔϧ Google Driveڞ༗ͷଙͷखʹͳΔ͔ʁ Google Drive ڞ༗ͷ௧ΈΛߟ͑Δ … At Business
Technology Conference Japan 2023 2023.01.21 / ͻΖ͔ͣ
Who am I !? Hirokazu Yoshida @ CloudNative Inc. Job
: Security Engineer Community : Security-JAWS Recent Interests : Data Governance ɹɹɹɹɹɹɹɹPrivacy
Attention !! • τϐοΫͷੑ্࣭ɺGoogle DriveͷҰൠతͳ༷ެ։ใϨ ϕϧͷϕετϓϥΫςΟεʹ৮Ε·͕͢ɺࣄࡉ͔ͳղઆτ ϦοΩʔͳར༻ํ๏ʹݴٴ͠·ͤΜɻ • ϢʔεέʔεΛྫࣔ͠·͕͢ɺࣗ͝Ͱ࣮ࢪ͢Δࡍɺ
Google WorkspaceGoogle DriveͷϥΠηϯεنΛࣗ͝ Ͱ֬ೝ͔ͯ͠Βߦ͍ͬͯͩ͘͞ɻ
Google Driveͬͯ·͔͢ʁ
ײతͰ͍͍͢Ͱ͢ΑͶʔ
Types of Google Drive • ڞ༗υϥΠϒ • ϚΠυϥΠϒ
Types of Google Drive • ڞ༗υϥΠϒ • ෦ϓϩδΣΫτɾΠϕϯτɺ֎෦ڞ༗ઌͳͲͷ༻్͝ͱʹڞ༗υϥΠϒΛ࡞ͬͯཧ • γϯϓϧͳཧݖݶ
ཧऀɺίϯςϯπཧऀɺߘऀɺӾཡऀʢίϝϯτՄʣɺӾཡऀ • ϑΝΠϧϑΥϧμͷΦʔφʔɺνʔϜʹͳΔ • ΰϛശ30Ͱશআ or ཧऀ͕खಈͰશআʢ෮ݩɺߘऀҎ্Ͱ࣮ࢪՄೳʣ
Types of Google Drive • ϚΠυϥΠϒ • ݸਓతͳϑΝΠϧඇެ։ϑΝΠϧ(1on1ϝϞɺ৬ೳධՁͳͲϓϥΠόγʔ͕ؾ ʹͳΔͷ)Λ֨ೲ •
ϑΝΠϧϑΥϧμͷΦʔφʔɺ࡞ͨ͠ϢʔβʔʹͳΔ • Ϣʔβʔ͕͍ͳ͘ͳΔͱɺίϯςϯπফ͑Δ • ΰϛശ30Ͱશআʢ෮ݩϑΝΠϧͷΦʔφʔͰ࣮ࢪՄೳʣ
ϑΥϧμฤΞΫηεݖઃఆͬͯ Ͳ͏ͬͯ·͢ʁ
Best Practice (shared drive) • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ • ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻
• ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
͓ؾ͖͍͍ͮͨͩͨͰ͋Ζ͏͔…
Best Practice (shared drive) : reprint • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ
• ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻ • ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) : reprint • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
A Glimpse of Google Drive's Philosophy in Best Practices •
Google Driveʹ֨ೲͨ͠ίϯςϯπͷڞ༗ΞΫηεݖཧ ɺར༻ऀͷࡋྔʹҕͶΒΕ͍ͯΔ • ϑΥϧμߏར༻ঢ়گʹԠͯ͡ɺར༻ऀ͕ࣗൃతʹݟ͢ ͷͱ͍ͯ͠Δ • ϚΠυϥΠϒͷίϯςϯπͷڞ༗ํ๏ར༻ऀͷࡋྔ
ͭ·Γ ίϯςϯπΞΫηεݖͷཧ ར༻ऀͷϦςϥγʔʹֻ͔͍ͬͯΔ
ཧऀଆͰؤுͬͯ ϑΥϧμߏ࡞Ε͍͍Μ͡Όͳ͍ʁ
🤔
A common scene on site (1) • ͜ͷϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺ૬खνʔϜʹϑΥϧμͷΞΫη εݖ͕ͳ͍͠ɺϑΥϧμͷΞΫηεݖཧͷݖݶͳ͍ •
͍·ɺ͜ͷϑΝΠϧ͚ͩݟͤΒΕΕ͍͍ • Կਓ͔͍Δ͚ͲɺෳνʔϜʹؔऀ͕͍Δ͠ɺ͍͍ͪͪಛ ఆϢʔβʔΛࢦఆ͢Δͷɺ࿙Ε͕͋Γͦ͏Ͱμϧ͍ɻ • ͜ͷϑΝΠϧͷͨΊʹϑΥϧμ࡞ਃͱ͔ͬͱμϧ͍ɻ
A common scene on site (1) • ͍͠͠ɺʮ͍·ɺ͑Δ͜ͱʯΛ༏ઌ͍ͨ͠ • ͦ͏ͩɺڞ༗ͷʮҰൠతͳΞΫηεʯΛ͍͍͑Μ͡ΌΜʂ
• ϦϯΫΛνϟοτϧʔϜʹషͬͯͱ…
A common scene on site (1) • νϟοτϧʔϜͷެ։ൣғ ʹσʔλͷެ։ൣғ •
ޙ͔ΒνϟοτϧʔϜʹ ࢀՃͨ͠ਓݟΒΕΔ • ͦ͜·Ͱߟ͑ͯ·͢ʁ
A common scene on site (2) • ֎෦ͱେ͖͍ϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺਃखଓ͖͕ࡶͰɺ ϝʔϧ͑ͳ͍ •
͍͠͠ɺʮ͍·ɺΓ͍ͨʯ • ֎෦͔ΒͷটΛड͚ͯͦ͜ʹஔ͜͏ • ςφϯτઃఆͰ֎෦ڞ༗Λېࢭ͍ͯ͠Δ߹ɺΞοϓϩʔ υෆՄͰ͋Δ͕ɺطଘϑΝΠϧͷฤू্ॻ͖อଘՄೳ
A common scene on site (2) • ଞࣾςφϯτɺݸਓͷ gmail.comͷ߹͋Δ •
CASBͰࣗࣾςφϯτ ͷΞοϓϩʔυͱࣝผ • টΛड͚Δ͜ͱࣗମࢭ ΊΒΕͣɺه͞Εͳ͍
A common scene on site (Summary) • Google Driveࣗମɺར༻ऀͷϦςϥγʔʹґଘ͢Δઃܭࢥ •
ެ։ൣғΞΫηεݖʹ͍ͭͯɺ࢛࣌தߟ͍͑ͯΔਓͳΜͯ ͍·͢ʁ • ςφϯτઃఆϑΥϧμઃܭɺӡ༻ϧʔϧΛఆΊͯɺ ศརػೳʹΑͬͯɺൈ͚݀తʹར༻Ͱ͖Δ
Google Drive ਓྨʹૣ͗ͨ͢ͷ͔…
ͦΜͳࡴെͱͨ͠εϨʹ ৴པϧʔϧ͕ʂ
What are trust rules? • ৴པϧʔϧʹΑΓɺཧऀ෦͓Αͼ֎෦ͷڞ༗Λ੍ݶ͢Δ ϙϦγʔΛద༻Ͱ͖·͢ɻ • ৫୯Ґάϧʔϓ୯ҐͰϧʔϧΛઃఆͰ͖ΔͨΊɺͯ͢ͷ Ϣʔβʔʹରͯ͠แׅతͳϙϦγʔΛద༻͢ΔΑΓɺΑΓ͖
Ίࡉ͔͍Ξϓϩʔν͕ՄೳʹͳΓ·͢ɻ • Google Workspace Ent Plus / Ent Std, Edu Plus / Edu Std https://workspaceupdates.googleblog.com/2022/11/google-drive-trust-rules- generally-available.html
What are trust rules? • ϚʔέςΟϯά νʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ ύʔτφʔ৫ͷಛఆͷϢʔβʔͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ৫ͷଞͷνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺύʔ
τφʔ৫ͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ • ύʔτφʔ৫ͷଞͷνʔϜ͕৫ͷͲͷϢʔβʔͱ ϑΝΠϧΛڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺࡒνʔϜ͓ ΑͼΤάθΫςΟϒ νʔϜͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ৫ͷଞͷ
νʔϜͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ൣғɿϙϦγʔͷద༻ൣғ (৫ or / and
άϧʔϓ - আ֎Մ) • τϦΨʔɿڞ༗ or / and ड৴ • ݅ɿڞ༗ or ड৴͢Δ૬ख (৫ or / and άϧʔϓ - আ֎ෆՄ) • ૢ࡞ɿڐՄ or ڋ൱ https://support.google.com/a/answer/10621317
ͳΔ΄ͲΘ͔ΒΜ
In short, it looks like this • ڞ༗ͱड৴͕Ұகͨ͠૬खͷΈ ڞ༗͕Ͱ͖Δ •
֎෦ϢʔβʔҰக͠ͳͯ͘ Α͍ • ڋ൱͕ڧ͍ͷͰڐՄΛ͍͔ʹ Έ߹ΘͤΔ͔͕ΧΪ • Ϣʔεέʔε͕ෳࡶͩͱ…
ເ͕͕Δʂ ͙͢ʹࢼ͍ͨ͠ʂ
It's easy to get started, but... • ৴པϧʔϧΛ༗ޮԽ͢Δͱɺطଘͷςφϯτ֎෦ڞ༗ઃఆ͕ແޮͱͳΓɺ σϑΥϧτͷ৴པϧʔϧ͕࡞͞ΕΔ
• ݱࡏͷςφϯτ֎෦ڞ༗ઃఆΛؑΈͨϧʔϧ͕࡞͞ΕΔͷͰɺ ৴པϧʔϧΛ༗ޮԽ͚ͨͩ͠ͰӨڹൃੜ͠ͳ͍ • ࡞ͨ͠৴པϧʔϧ͕༗ޮʹ࡞༻͍ͯ͠Δ͔ɺτϥΠΞϯυΤϥʔͰͷ֬ೝͱͳΔ ݕূڥΛ༻ҙͯ͠࡞ΓࠐΉͷ͕͓קΊ • ৴པϧʔϧΛແޮԽ͢ΔͱɺΓΔͷͰۓٸ࣌҆৺ (?)
It is a step-by-step process • ৫άϧʔϓؒͷ ڞ༗Մ൱ؔΛཧ •
ڞ༗Մ൱ؔΛجʹઃఆʹམ ͱ͠ࠐΉ • γφϦΦΛ࡞ͬͯಈ࡞֬ೝ • Ϣʔεέʔε͕ෳࡶͩͱ…
ͳΜ͔ͦ͠͏…
Concept of Trust Rules • ৴པϧʔϧɺΨʔυϨʔϧͱͯ͠͏ • ϢʔβʔମݧมΘΒͳ͍ɻ ແअؾʹڞ༗ͯ͠Β͔ͬͯ·Θͳ͍ɻ
• ৫ઃܭతʹڐՄ͠ͳ͍ൣғͷڞ༗Λ͙͜ͱ͕Ͱ͖Δ • Ͱ͖Δ͚ͩγϯϓϧʹߏ͢Δͷ͕ྑͦ͞͏
Use cases that may be addictive • ظޏ༻ऀ༻Ϣʔβʔʹର͢Δެ։ൣғ౷੍ • ϝʔϧࣾγεςϜͷར༻ͷͨΊʹGWSΞΧϯτΛൃߦ͍ͯ͠Δ
• νϟοτʹࢀՃ͢ΔͷͰURLʹ৮ΕΔػձ͋Δ͕ɺ ڞ༗υϥΠϒͰڐՄͨ͠σʔλҎ֎ͷࣾσʔλʹ৮Εͤͨ͘͞ͳ͍ • ϚΠυϥΠϒ͍͍͕ͬͯɺ֎෦ͱڞ༗ͤͨ͘͞ͳ͍
Use cases that may be addictive • ֎෦ڞ༗ΛϗϫΠτϦετʢ·ͨېࢭʣϙϦγʔపఈ • ڞ༗ͱड৴ΛಛఆυϝΠϯͷΈʹݶΔ͜ͱͰɺ
ैདྷͷൈ͚݀ʢड৴ͨ͠ڞ༗ίϯςϯπͷ্ॻ͖ʣΛ࠹͙ • ֎෦ڞ༗Google Driveར༻͠ͳ͍͕ɺۀऀͷݟੵΓडྖͳ Ͳྫ֎తʹಛఆ෦ɾάϧʔϓͷΈGoogle DriveΛ༻͍ͨ֎෦ ͱͷڞ༗ (ड৴) ΛڐՄ͢Δ
Use cases that may not work • ࡒνʔϜΤάθΫςΟϒνʔϜͱ͚ͩڞ༗͢Δ • ಛఆνʔϜؒͱ͚ͩڞ༗Ͱ͖Ε͍͍ɻͳΜͯ͋Δʁ
• ڞ༗υϥΠϒͷϑΥϧμߏͱݖݶઃఆΛ ͜·Ίʹϝϯςφϯε͓ͯ͠Γɺۀ༰ͷఆ͕ٛ໌֬Ͱɺ ͦΕલఏͰۀઃܭ͞Ε͍ͯΔ…ͳͲϝλཁૉ͕ඞཁͦ͏
Anti-patterns • ͍͖ͳΓڋ൱ϙϦγʔΛશࣾల։ (ڐՄϙϦγʔͷల։࿙Ε)ͯ͠ɺ طଘͷ֎෦͔Βڞ༗͞Εͨίϯςϯπ͕ݟ͑ͳ͘ͳΔ • ͜ͷϑΝΠϧ͚ͩྫ֎ʹͯ͠΄͍͠ • ڞ༗ɾड৴ͷରͱͳΔ৫άϧʔϓʹআ֎݅Λ͚͍ͭͨ
• ϙϦγʔͷద༻ൣғɺআ֎݅ΛઃఆͰ͖Δ
To make it easier to do • ·ͣɺࣾڞ௨తͳڐՄϙϦγʔΛ༻ҙͯ͠શମʹద༻ • ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓআ֎͢Δ
• ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓ͚ͷڐՄϙϦγʔΛద༻ • ڋ൱ϙϦγʔɺࡉ͔͍άϧʔϓ৫ʹରͯ͠ݕ౼ • جຊతʹɺڐՄ͠ͳ͚Ε͍͍ͷͰɺઈରېࢭͷέʔεͷΈར༻
ಛੑΛཧղ͢Εɺ ͔Ώ͍ͱ͜Ζʹख͕ಧ͖ͦ͏
conclusion • ศར͚ͩͲେࡶͩͬͨڞ༗ͷʮҰൠతͳΞΫηεʯʹΨʔυ Ϩʔϧ͕Ͱ͖ͨ • ઃܭ8ׂ (৫ɾάϧʔϓͷ୨Է͕͠)ɺ ݕূڥͰೖ೦ʹςετ1.5ׂ •
Google Driveͷڞ༗υϥΠϒͷӡ༻ํ๏ɾϝϯςφϯεํʹ Αͬͯɺ͍ํ͕มΘ͖ͬͯͦ͏
Α͍ Google Drive LifeΛʂ
Thank you !
More Decks by fnifni
See All by fnifni
生成AIのガバナンスの全体像と現実解
fnifni
2
550
生成AIのガバナンスとこれから
fnifni
0
200
AWS re:Inforce 2024 に コミュニティから登壇してきた話
fnifni
0
76
COM224: How organizations are actually applying AWS security best practices
fnifni
0
110
BsidesTokyo2024_AWSセキュリティの ベストプラクティスに関する 利用実態調査のレポートの紹介
fnifni
0
120
re:Inforce2024-recap_英語力ゴミカスでもフル英語登壇を乗り切る成功メソッド
fnifni
0
150
ゼロトラスト導入支援ってどんなことやってるの?
fnifni
0
120
ログの話
fnifni
0
88
re:Inforce 2021 ReCap
fnifni
0
210
Other Decks in Technology
See All in Technology
gem install とrequire のむこうがわ
ydah
0
110
あの日、見つかっていなかったらどうなっていたか
kazzpapa3
2
220
アラートを見直していたら営業組織への理解にちょっとだけ繋がった話
z63d
1
200
高品質と高スピードを支える品質のシフトレフトのアプローチ
goyoki
4
1.3k
Claude Codeで新規事業を伸ばせるか? Zennの試行錯誤の記録
wadayusuke
2
200
田んぼの見回りをIoTで減らしたい!水位監視から電池駆動カメラまでの試行錯誤
itosoft
1
220
SSFの現在地 ― CAEP/RISCからAI Identityへ
oidfj
0
440
20261113_JAWS_Osaka
takuyay0ne
0
510
異夢同船〜異なる夢でも同じ船でなんとかする〜
fortegp05
0
310
Where Should Platform Complexity Live? Lessons from a Cross-Team PR Preview Platform
taiki45
0
110
Agent Harnessはどう作る?事例から学ぶAI Agentの設計思想
sergicalsix
0
320
SREのためのFinOps入門
muziyoshiz
3
1.6k
Featured
See All Featured
A Modern Web Designer's Workflow
chriscoyier
699
190k
Building Flexible Design Systems
yeseniaperezcruz
330
41k
Easily Structure & Communicate Ideas using Wireframe
afnizarnur
194
17k
B2B Lead Gen: Tactics, Traps & Triumph
marketingsoph
1
300
How GitHub (no longer) Works
holman
316
150k
How to Create Impact in a Changing Tech Landscape [PerfNow 2023]
tammyeverts
56
3.5k
Optimising Largest Contentful Paint
csswizardry
37
4k
Why Mistakes Are the Best Teachers: Turning Failure into a Pathway for Growth
auna
0
350
Building AI with AI
inesmontani
PRO
1
1.4k
Fireside Chat
paigeccino
43
4.1k
ラッコキーワード サービス紹介資料
rakko
5
5.8M
Collaborative Software Design: How to facilitate domain modelling decisions
baasie
1
380