信頼ルールはGoogle Drive共有の孫の手になるか？

BTCON2023の登壇資料です

Transcript

1. Will the trust rule be the granddaddy of Google Drive sharing? Considering the Pain of Google Drive Sharing … At Business Technology Conference Japan 2023 2023.01.21 / Lecture by Hirokazu
2. ৴པϧʔϧ͸ 
 Google Driveڞ༗ͷଙͷखʹͳΔ͔ʁ Google Drive ڞ༗ͷ௧ΈΛߟ͑Δ … At Business Technology Conference Japan 2023 2023.01.21 / ͻΖ͔ͣ
3. Who am I !? Hirokazu Yoshida @ CloudNative Inc. Job : Security Engineer Community : Security-JAWS Recent Interests : Data Governance 
 ɹɹɹɹɹɹɹɹPrivacy
4. Attention !! • τϐοΫͷੑ্࣭ɺGoogle DriveͷҰൠతͳ࢓༷΍ެ։৘ใϨ ϕϧͷϕετϓϥΫςΟεʹ৮Ε·͕͢ɺࣄࡉ͔ͳղઆ΍τ ϦοΩʔͳར༻ํ๏ʹ͸ݴٴ͠·ͤΜɻ • ϢʔεέʔεΛྫࣔ͠·͕͢ɺࣗ͝਎Ͱ࣮ࢪ͢Δࡍ͸ɺ 
 Google Workspace΍Google DriveͷϥΠηϯεن໿Λࣗ͝਎ Ͱ֬ೝ͔ͯ͠Βߦ͍ͬͯͩ͘͞ɻ
5. Google Drive࢖ͬͯ·͔͢ʁ
6. ௚ײతͰ࢖͍΍͍͢Ͱ͢ΑͶʔ
7. Types of Google Drive • ڞ༗υϥΠϒ • ϚΠυϥΠϒ
8. Types of Google Drive • ڞ༗υϥΠϒ • ෦໳΍ϓϩδΣΫτɾΠϕϯτɺ֎෦ڞ༗ઌͳͲͷ༻్͝ͱʹڞ༗υϥΠϒΛ࡞ͬͯ؅ཧ • γϯϓϧͳ؅ཧݖݶ 
 ؅ཧऀɺίϯςϯπ؅ཧऀɺ౤ߘऀɺӾཡऀʢίϝϯτՄʣɺӾཡऀ • ϑΝΠϧ΍ϑΥϧμͷΦʔφʔ͸ɺνʔϜʹͳΔ • ΰϛശ͸30೔Ͱ׬શ࡟আ or ؅ཧऀ͕खಈͰ׬શ࡟আʢ෮ݩ͸ɺ౤ߘऀҎ্Ͱ࣮ࢪՄೳʣ
9. Types of Google Drive • ϚΠυϥΠϒ • ݸਓతͳϑΝΠϧ΍ඇެ։ϑΝΠϧ(1on1ϝϞɺ৬ೳධՁͳͲϓϥΠόγʔ͕ؾ ʹͳΔ΋ͷ)Λ֨ೲ • ϑΝΠϧ΍ϑΥϧμͷΦʔφʔ͸ɺ࡞੒ͨ͠ϢʔβʔʹͳΔ • Ϣʔβʔ͕͍ͳ͘ͳΔͱɺίϯςϯπ΋ফ͑Δ • ΰϛശ͸30೔Ͱ׬શ࡟আʢ෮ݩ͸ϑΝΠϧͷΦʔφʔͰ࣮ࢪՄೳʣ
10. ϑΥϧμฤ੒΍ΞΫηεݖઃఆͬͯ 
 Ͳ͏΍ͬͯ·͢ʁ
11. Best Practice (shared drive) • ڞಉฤू΍ΈΜͳͰࢀর͢Δ΋ͷΛ֨ೲ͢Δ • ޡ࡟আ͕৺഑ͳΒɺ౤ߘऀҎԼʹݶఆ͢Δ • ϝϯόʔΛա౓ʹ௥Ճ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻ • ίϯςϯπͷڞ༗͸੹೚Λ࣋ͬͯߦ͏ • ϑΥϧμ಺ʹϑΥϧμ͕͋Δ৔߹͸ɺΞΫηεݖΛཹҙ͠ɺ 
 ΞΫηεݖ؅ཧ͕೉͘͠ͳͬͨΒϑΥϧμߏ଄Λ࠶ฤ͢Δ • ໋໊نଇʢࣾ಺ɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺ஍Ҭ໊ͳͲͷ઀಄จࣈʣΛ͚ͭΔ
12. Best Practice (my drive) • ࡞੒ͨ͠υϥϑτΛɺ౤ߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
13. ͓ؾ͖͍͍ͮͨͩͨͰ͋Ζ͏͔…
14. Best Practice (shared drive) : reprint • ڞಉฤू΍ΈΜͳͰࢀর͢Δ΋ͷΛ֨ೲ͢Δ • ޡ࡟আ͕৺഑ͳΒɺ౤ߘऀҎԼʹݶఆ͢Δ • ϝϯόʔΛա౓ʹ௥Ճ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻ • ίϯςϯπͷڞ༗͸੹೚Λ࣋ͬͯߦ͏ • ϑΥϧμ಺ʹϑΥϧμ͕͋Δ৔߹͸ɺΞΫηεݖΛཹҙ͠ɺ 
 ΞΫηεݖ؅ཧ͕೉͘͠ͳͬͨΒϑΥϧμߏ଄Λ࠶ฤ͢Δ • ໋໊نଇʢࣾ಺ɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺ஍Ҭ໊ͳͲͷ઀಄จࣈʣΛ͚ͭΔ
15. Best Practice (my drive) : reprint • ࡞੒ͨ͠υϥϑτΛɺ౤ߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
16. A Glimpse of Google Drive's Philosophy in Best Practices • Google Driveʹ֨ೲͨ͠ίϯςϯπͷڞ༗΍ΞΫηεݖ؅ཧ ͸ɺར༻ऀͷࡋྔʹҕͶΒΕ͍ͯΔ • ϑΥϧμߏ଄͸ར༻ঢ়گʹԠͯ͡ɺར༻ऀ͕ࣗൃతʹݟ௚͢΋ ͷͱ͍ͯ͠Δ • ϚΠυϥΠϒ಺ͷίϯςϯπͷڞ༗ํ๏΋ར༻ऀͷࡋྔ
17. ͭ·Γ 
 ίϯςϯπ΍ΞΫηεݖͷ؅ཧ͸ 
 ར༻ऀͷϦςϥγʔʹֻ͔͍ͬͯΔ
18. ؅ཧऀଆͰؤுͬͯ 
 ϑΥϧμߏ଄࡞Ε͹͍͍Μ͡Όͳ͍ʁ
19. 🤔
20. A common scene on site (1) • ͜ͷϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺ૬खνʔϜʹϑΥϧμͷΞΫη εݖ͕ͳ͍͠ɺϑΥϧμͷΞΫηεݖ؅ཧͷݖݶ΋ͳ͍ • ͍·ɺ͜ͷϑΝΠϧ͚ͩݟͤΒΕΕ͹͍͍ • Կਓ͔͍Δ͚Ͳɺෳ਺νʔϜʹؔ܎ऀ͕͍Δ͠ɺ͍͍ͪͪಛ ఆϢʔβʔΛࢦఆ͢Δͷ΋ɺ࿙Ε͕͋Γͦ͏Ͱμϧ͍ɻ • ͜ͷϑΝΠϧͷͨΊʹϑΥϧμ࡞੒ਃ੥ͱ͔΋ͬͱμϧ͍ɻ
21. A common scene on site (1) • ๩͍͠͠ɺʮ͍·ɺ࢖͑Δ͜ͱʯΛ༏ઌ͍ͨ͠ • ͦ͏ͩɺڞ༗ͷʮҰൠతͳΞΫηεʯΛ࢖͑͹͍͍Μ͡ΌΜʂ • ϦϯΫΛνϟοτϧʔϜʹషͬͯͱ…
22. A common scene on site (1) • νϟοτϧʔϜͷެ։ൣғ ʹσʔλͷެ։ൣғ • ޙ͔ΒνϟοτϧʔϜʹ 
 ࢀՃͨ͠ਓ΋ݟΒΕΔ • ͦ͜·Ͱߟ͑ͯ·͢ʁ
23. A common scene on site (2) • ֎෦ͱେ͖͍ϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺਃ੥खଓ͖͕൥ࡶͰɺ ϝʔϧ΋࢖͑ͳ͍ • ๩͍͠͠ɺʮ͍·ɺ΍Γ͍ͨʯ • ֎෦͔Βͷট଴Λड͚ͯͦ͜ʹஔ͜͏ • ςφϯτઃఆͰ֎෦ڞ༗Λېࢭ͍ͯ͠Δ৔߹͸ɺΞοϓϩʔ υ͸ෆՄͰ͋Δ͕ɺطଘϑΝΠϧͷฤू΍্ॻ͖อଘ͸Մೳ
24. A common scene on site (2) • ଞࣾςφϯτ͸ɺݸਓͷ gmail.comͷ৔߹΋͋Δ • CASBͰ͸ࣗࣾςφϯτ΁ ͷΞοϓϩʔυͱࣝผ • ট଴Λड͚Δ͜ͱࣗମ͸ࢭ ΊΒΕͣɺه࿥΋͞Εͳ͍
25. A common scene on site (Summary) • Google Driveࣗମ͸ɺར༻ऀͷϦςϥγʔʹґଘ͢Δઃܭࢥ૝ • ެ։ൣғ΍ΞΫηεݖʹ͍ͭͯɺ࢛࿡࣌தߟ͍͑ͯΔਓͳΜͯ ͍·͢ʁ • ςφϯτઃఆ΍ϑΥϧμઃܭɺӡ༻ϧʔϧΛఆΊͯ΋ɺ 
 ศརػೳʹΑͬͯɺൈ͚݀తʹར༻Ͱ͖Δ
26. Google Drive͸ 
 ਓྨʹ͸ૣ͗ͨ͢ͷ͔…
27. ͦΜͳࡴെͱͨ͠εϨʹ 
 ৴པϧʔϧ͕ʂ
28. What are trust rules? • ৴པϧʔϧʹΑΓɺ؅ཧऀ͸಺෦͓Αͼ֎෦ͷڞ༗Λ੍ݶ͢Δ ϙϦγʔΛద༻Ͱ͖·͢ɻ • ૊৫୯Ґ΍άϧʔϓ୯ҐͰϧʔϧΛઃఆͰ͖ΔͨΊɺ͢΂ͯͷ Ϣʔβʔʹରͯ͠แׅతͳϙϦγʔΛద༻͢ΔΑΓ΋ɺΑΓ͖ Ίࡉ͔͍Ξϓϩʔν͕ՄೳʹͳΓ·͢ɻ • Google Workspace Ent Plus / Ent Std, Edu Plus / Edu Std https://workspaceupdates.googleblog.com/2022/11/google-drive-trust-rules- generally-available.html
29. What are trust rules? • ϚʔέςΟϯά νʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ ύʔτφʔ૊৫ͷಛఆͷϢʔβʔͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ૊৫಺ͷଞͷνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺύʔ τφʔ૊৫ͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ • ύʔτφʔ૊৫಺ͷଞͷνʔϜ͕૊৫಺ͷͲͷϢʔβʔͱ΋ ϑΝΠϧΛڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
30. What are trust rules? • ࡒ຿νʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺࡒ຿νʔϜ͓ ΑͼΤάθΫςΟϒ νʔϜͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ࡒ຿νʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ૊৫಺ͷଞͷ νʔϜͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
31. What are trust rules? • ൣғɿϙϦγʔͷద༻ൣғ (૊৫ or / and άϧʔϓ - আ֎Մ) • τϦΨʔɿڞ༗ or / and ड৴ • ৚݅ɿڞ༗ or ड৴͢Δ૬ख (૊৫ or / and άϧʔϓ - আ֎ෆՄ) • ૢ࡞ɿڐՄ or ڋ൱ https://support.google.com/a/answer/10621317
32. ͳΔ΄ͲΘ͔ΒΜ
33. In short, it looks like this • ڞ༗ͱड৴͕Ұகͨ͠૬खͷΈ ڞ༗͕Ͱ͖Δ • ֎෦Ϣʔβʔ͸Ұக͠ͳͯ͘ ΋Α͍ • ڋ൱͕ڧ͍ͷͰڐՄΛ͍͔ʹ 
 ૊Έ߹ΘͤΔ͔͕ΧΪ • Ϣʔεέʔε͕ෳࡶͩͱ…
34. ເ͕޿͕Δʂ 
 ͙͢ʹࢼ͍ͨ͠ʂ
35. It's easy to get started, but... • ৴པϧʔϧΛ༗ޮԽ͢Δͱɺطଘͷςφϯτ֎෦ڞ༗ઃఆ͕ແޮͱͳΓɺ 
 σϑΥϧτͷ৴པϧʔϧ͕࡞੒͞ΕΔ • ݱࡏͷςφϯτ֎෦ڞ༗ઃఆΛؑΈͨϧʔϧ͕࡞੒͞ΕΔͷͰɺ 
 ৴པϧʔϧΛ༗ޮԽ͚ͨͩ͠Ͱ͸Өڹ͸ൃੜ͠ͳ͍ • ࡞੒ͨ͠৴པϧʔϧ͕༗ޮʹ࡞༻͍ͯ͠Δ͔͸ɺτϥΠΞϯυΤϥʔͰͷ֬ೝͱͳΔ 
 ݕূ؀ڥΛ༻ҙͯ͠࡞ΓࠐΉͷ͕͓קΊ • ৴པϧʔϧΛແޮԽ͢Δͱɺ੾Γ໭ΔͷͰۓٸ࣌΋҆৺ (?)
36. It is a step-by-step process • ૊৫΍άϧʔϓؒͷ 
 ڞ༗Մ൱ؔ܎Λ੔ཧ • ڞ༗Մ൱ؔ܎Λجʹઃఆʹམ ͱ͠ࠐΉ • γφϦΦΛ࡞ͬͯಈ࡞֬ೝ • Ϣʔεέʔε͕ෳࡶͩͱ…
37. ͳΜ͔೉ͦ͠͏…
38. Concept of Trust Rules • ৴པϧʔϧ͸ɺΨʔυϨʔϧͱͯ͠࢖͏ • Ϣʔβʔମݧ͸มΘΒͳ͍ɻ 
 ແअؾʹڞ༗ͯ͠΋Βͬͯ΋͔·Θͳ͍ɻ • ૊৫ઃܭతʹڐՄ͠ͳ͍ൣғ΁ͷڞ༗Λ๷͙͜ͱ͕Ͱ͖Δ • Ͱ͖Δ͚ͩγϯϓϧʹߏ੒͢Δͷ͕ྑͦ͞͏
39. Use cases that may be addictive • ୹ظޏ༻ऀ༻Ϣʔβʔʹର͢Δެ։ൣғ౷੍ • ϝʔϧ΍ࣾ಺γεςϜͷར༻ͷͨΊʹGWSΞΧ΢ϯτΛൃߦ͍ͯ͠Δ • νϟοτʹ΋ࢀՃ͢ΔͷͰURLʹ৮ΕΔػձ΋͋Δ͕ɺ 
 ڞ༗υϥΠϒͰڐՄͨ͠σʔλҎ֎ͷࣾ಺σʔλʹ৮Εͤͨ͘͞ͳ͍ • ϚΠυϥΠϒ͸࢖ͬͯ΋͍͍͕ɺ֎෦ͱڞ༗ͤͨ͘͞ͳ͍
40. Use cases that may be addictive • ֎෦ڞ༗ΛϗϫΠτϦετʢ·ͨ͸ېࢭʣϙϦγʔపఈ • ڞ༗ͱड৴ΛಛఆυϝΠϯͷΈʹݶΔ͜ͱͰɺ 
 ैདྷͷൈ͚݀ʢड৴ͨ͠ڞ༗ίϯςϯπ΁ͷ্ॻ͖ʣΛ࠹͙ • ֎෦ڞ༗͸Google Drive͸ར༻͠ͳ͍͕ɺۀऀͷݟੵΓडྖͳ Ͳྫ֎తʹಛఆ෦໳ɾάϧʔϓͷΈGoogle DriveΛ༻͍ͨ֎෦ ͱͷڞ༗ (ड৴) ΛڐՄ͢Δ
41. Use cases that may not work • ࡒ຿νʔϜ͸ΤάθΫςΟϒνʔϜͱ͚ͩڞ༗͢Δ • ಛఆνʔϜؒͱ͚ͩڞ༗Ͱ͖Ε͹͍͍ɻͳΜͯ͋Δʁ • ڞ༗υϥΠϒͷϑΥϧμߏ଄ͱݖݶઃఆΛ 
 ͜·Ίʹϝϯςφϯε͓ͯ͠Γɺۀ຿಺༰ͷఆ͕ٛ໌֬Ͱɺ 
 ͦΕલఏͰۀ຿ઃܭ͞Ε͍ͯΔ…ͳͲϝλཁૉ͕ඞཁͦ͏
42. Anti-patterns • ͍͖ͳΓڋ൱ϙϦγʔΛશࣾల։ (ڐՄϙϦγʔͷల։࿙Ε)ͯ͠ɺ 
 طଘͷ֎෦͔Βڞ༗͞Εͨίϯςϯπ͕ݟ͑ͳ͘ͳΔ • ͜ͷϑΝΠϧ͚ͩ͸ྫ֎ʹͯ͠΄͍͠ • ڞ༗ɾड৴ͷର৅ͱͳΔ૊৫΍άϧʔϓʹআ֎৚݅Λ͚͍ͭͨ • ϙϦγʔͷద༻ൣғ͸ɺআ֎৚݅ΛઃఆͰ͖Δ
43. To make it easier to do • ·ͣɺࣾ಺ڞ௨తͳڐՄϙϦγʔΛ༻ҙͯ͠શମʹద༻ • ݸผͷ੍ޚΛ͍ͨ͠૊৫΍άϧʔϓ͸আ֎͢Δ • ݸผͷ੍ޚΛ͍ͨ͠૊৫΍άϧʔϓ޲͚ͷڐՄϙϦγʔΛద༻ • ڋ൱ϙϦγʔ͸ɺࡉ͔͍άϧʔϓ΍૊৫ʹରͯ͠ݕ౼ • جຊతʹ͸ɺڐՄ͠ͳ͚Ε͹͍͍ͷͰɺઈରېࢭͷέʔεͷΈར༻
44. ಛੑΛཧղ͢Ε͹ɺ 
 ͔Ώ͍ͱ͜Ζʹख͕ಧ͖ͦ͏
45. conclusion • ศར͚ͩͲେࡶ೺ͩͬͨڞ༗ͷʮҰൠతͳΞΫηεʯʹΨʔυ Ϩʔϧ͕Ͱ͖ͨ • ઃܭ8ׂ (૊৫ɾάϧʔϓͷ୨Է͕͠൒෼)ɺ 
 ݕূ؀ڥͰೖ೦ʹςετ1.5ׂ • Google Driveͷڞ༗υϥΠϒͷӡ༻ํ๏ɾϝϯςφϯεํ਑ʹ Αͬͯɺ࢖͍ํ͕มΘ͖ͬͯͦ͏
46. Α͍ Google Drive LifeΛʂ
47. Thank you !