Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Sign up for free
Menu
Search
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Features
All features
Private URLs
Password Protection
Custom URLS
Scheduled publishing
Remove Branding
Restrict embedding
Deck Collections
Notes
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Explore
Featured decks
Featured speakers
Programming
Technology
Storyboards
Pricing
Search
Sign in
Sign up for free
信頼ルールはGoogle Drive共有の孫の手になるか?
Search
fnifni
September 15, 2023
Technology
440
0
Share
Embed
Copy iframe code
Copy JS code
Copy link
Start on current slide
信頼ルールはGoogle Drive共有の孫の手になるか?
BTCON2023の登壇資料です
fnifni
September 15, 2023
Transcript
47 slides
Will the trust rule be the granddaddy of Google Drive
sharing? Considering the Pain of Google Drive Sharing … At Business Technology Conference Japan 2023 2023.01.21 / Lecture by Hirokazu
৴པϧʔϧ Google Driveڞ༗ͷଙͷखʹͳΔ͔ʁ Google Drive ڞ༗ͷ௧ΈΛߟ͑Δ … At Business
Technology Conference Japan 2023 2023.01.21 / ͻΖ͔ͣ
Who am I !? Hirokazu Yoshida @ CloudNative Inc. Job
: Security Engineer Community : Security-JAWS Recent Interests : Data Governance ɹɹɹɹɹɹɹɹPrivacy
Attention !! • τϐοΫͷੑ্࣭ɺGoogle DriveͷҰൠతͳ༷ެ։ใϨ ϕϧͷϕετϓϥΫςΟεʹ৮Ε·͕͢ɺࣄࡉ͔ͳղઆτ ϦοΩʔͳར༻ํ๏ʹݴٴ͠·ͤΜɻ • ϢʔεέʔεΛྫࣔ͠·͕͢ɺࣗ͝Ͱ࣮ࢪ͢Δࡍɺ
Google WorkspaceGoogle DriveͷϥΠηϯεنΛࣗ͝ Ͱ֬ೝ͔ͯ͠Βߦ͍ͬͯͩ͘͞ɻ
Google Driveͬͯ·͔͢ʁ
ײతͰ͍͍͢Ͱ͢ΑͶʔ
Types of Google Drive • ڞ༗υϥΠϒ • ϚΠυϥΠϒ
Types of Google Drive • ڞ༗υϥΠϒ • ෦ϓϩδΣΫτɾΠϕϯτɺ֎෦ڞ༗ઌͳͲͷ༻్͝ͱʹڞ༗υϥΠϒΛ࡞ͬͯཧ • γϯϓϧͳཧݖݶ
ཧऀɺίϯςϯπཧऀɺߘऀɺӾཡऀʢίϝϯτՄʣɺӾཡऀ • ϑΝΠϧϑΥϧμͷΦʔφʔɺνʔϜʹͳΔ • ΰϛശ30Ͱશআ or ཧऀ͕खಈͰશআʢ෮ݩɺߘऀҎ্Ͱ࣮ࢪՄೳʣ
Types of Google Drive • ϚΠυϥΠϒ • ݸਓతͳϑΝΠϧඇެ։ϑΝΠϧ(1on1ϝϞɺ৬ೳධՁͳͲϓϥΠόγʔ͕ؾ ʹͳΔͷ)Λ֨ೲ •
ϑΝΠϧϑΥϧμͷΦʔφʔɺ࡞ͨ͠ϢʔβʔʹͳΔ • Ϣʔβʔ͕͍ͳ͘ͳΔͱɺίϯςϯπফ͑Δ • ΰϛശ30Ͱશআʢ෮ݩϑΝΠϧͷΦʔφʔͰ࣮ࢪՄೳʣ
ϑΥϧμฤΞΫηεݖઃఆͬͯ Ͳ͏ͬͯ·͢ʁ
Best Practice (shared drive) • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ • ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻
• ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
͓ؾ͖͍͍ͮͨͩͨͰ͋Ζ͏͔…
Best Practice (shared drive) : reprint • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ
• ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻ • ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) : reprint • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
A Glimpse of Google Drive's Philosophy in Best Practices •
Google Driveʹ֨ೲͨ͠ίϯςϯπͷڞ༗ΞΫηεݖཧ ɺར༻ऀͷࡋྔʹҕͶΒΕ͍ͯΔ • ϑΥϧμߏར༻ঢ়گʹԠͯ͡ɺར༻ऀ͕ࣗൃతʹݟ͢ ͷͱ͍ͯ͠Δ • ϚΠυϥΠϒͷίϯςϯπͷڞ༗ํ๏ར༻ऀͷࡋྔ
ͭ·Γ ίϯςϯπΞΫηεݖͷཧ ར༻ऀͷϦςϥγʔʹֻ͔͍ͬͯΔ
ཧऀଆͰؤுͬͯ ϑΥϧμߏ࡞Ε͍͍Μ͡Όͳ͍ʁ
🤔
A common scene on site (1) • ͜ͷϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺ૬खνʔϜʹϑΥϧμͷΞΫη εݖ͕ͳ͍͠ɺϑΥϧμͷΞΫηεݖཧͷݖݶͳ͍ •
͍·ɺ͜ͷϑΝΠϧ͚ͩݟͤΒΕΕ͍͍ • Կਓ͔͍Δ͚ͲɺෳνʔϜʹؔऀ͕͍Δ͠ɺ͍͍ͪͪಛ ఆϢʔβʔΛࢦఆ͢Δͷɺ࿙Ε͕͋Γͦ͏Ͱμϧ͍ɻ • ͜ͷϑΝΠϧͷͨΊʹϑΥϧμ࡞ਃͱ͔ͬͱμϧ͍ɻ
A common scene on site (1) • ͍͠͠ɺʮ͍·ɺ͑Δ͜ͱʯΛ༏ઌ͍ͨ͠ • ͦ͏ͩɺڞ༗ͷʮҰൠతͳΞΫηεʯΛ͍͍͑Μ͡ΌΜʂ
• ϦϯΫΛνϟοτϧʔϜʹషͬͯͱ…
A common scene on site (1) • νϟοτϧʔϜͷެ։ൣғ ʹσʔλͷެ։ൣғ •
ޙ͔ΒνϟοτϧʔϜʹ ࢀՃͨ͠ਓݟΒΕΔ • ͦ͜·Ͱߟ͑ͯ·͢ʁ
A common scene on site (2) • ֎෦ͱେ͖͍ϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺਃखଓ͖͕ࡶͰɺ ϝʔϧ͑ͳ͍ •
͍͠͠ɺʮ͍·ɺΓ͍ͨʯ • ֎෦͔ΒͷটΛड͚ͯͦ͜ʹஔ͜͏ • ςφϯτઃఆͰ֎෦ڞ༗Λېࢭ͍ͯ͠Δ߹ɺΞοϓϩʔ υෆՄͰ͋Δ͕ɺطଘϑΝΠϧͷฤू্ॻ͖อଘՄೳ
A common scene on site (2) • ଞࣾςφϯτɺݸਓͷ gmail.comͷ߹͋Δ •
CASBͰࣗࣾςφϯτ ͷΞοϓϩʔυͱࣝผ • টΛड͚Δ͜ͱࣗମࢭ ΊΒΕͣɺه͞Εͳ͍
A common scene on site (Summary) • Google Driveࣗମɺར༻ऀͷϦςϥγʔʹґଘ͢Δઃܭࢥ •
ެ։ൣғΞΫηεݖʹ͍ͭͯɺ࢛࣌தߟ͍͑ͯΔਓͳΜͯ ͍·͢ʁ • ςφϯτઃఆϑΥϧμઃܭɺӡ༻ϧʔϧΛఆΊͯɺ ศརػೳʹΑͬͯɺൈ͚݀తʹར༻Ͱ͖Δ
Google Drive ਓྨʹૣ͗ͨ͢ͷ͔…
ͦΜͳࡴെͱͨ͠εϨʹ ৴པϧʔϧ͕ʂ
What are trust rules? • ৴པϧʔϧʹΑΓɺཧऀ෦͓Αͼ֎෦ͷڞ༗Λ੍ݶ͢Δ ϙϦγʔΛద༻Ͱ͖·͢ɻ • ৫୯Ґάϧʔϓ୯ҐͰϧʔϧΛઃఆͰ͖ΔͨΊɺͯ͢ͷ Ϣʔβʔʹରͯ͠แׅతͳϙϦγʔΛద༻͢ΔΑΓɺΑΓ͖
Ίࡉ͔͍Ξϓϩʔν͕ՄೳʹͳΓ·͢ɻ • Google Workspace Ent Plus / Ent Std, Edu Plus / Edu Std https://workspaceupdates.googleblog.com/2022/11/google-drive-trust-rules- generally-available.html
What are trust rules? • ϚʔέςΟϯά νʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ ύʔτφʔ৫ͷಛఆͷϢʔβʔͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ৫ͷଞͷνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺύʔ
τφʔ৫ͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ • ύʔτφʔ৫ͷଞͷνʔϜ͕৫ͷͲͷϢʔβʔͱ ϑΝΠϧΛڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺࡒνʔϜ͓ ΑͼΤάθΫςΟϒ νʔϜͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ৫ͷଞͷ
νʔϜͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ൣғɿϙϦγʔͷద༻ൣғ (৫ or / and
άϧʔϓ - আ֎Մ) • τϦΨʔɿڞ༗ or / and ड৴ • ݅ɿڞ༗ or ड৴͢Δ૬ख (৫ or / and άϧʔϓ - আ֎ෆՄ) • ૢ࡞ɿڐՄ or ڋ൱ https://support.google.com/a/answer/10621317
ͳΔ΄ͲΘ͔ΒΜ
In short, it looks like this • ڞ༗ͱड৴͕Ұகͨ͠૬खͷΈ ڞ༗͕Ͱ͖Δ •
֎෦ϢʔβʔҰக͠ͳͯ͘ Α͍ • ڋ൱͕ڧ͍ͷͰڐՄΛ͍͔ʹ Έ߹ΘͤΔ͔͕ΧΪ • Ϣʔεέʔε͕ෳࡶͩͱ…
ເ͕͕Δʂ ͙͢ʹࢼ͍ͨ͠ʂ
It's easy to get started, but... • ৴པϧʔϧΛ༗ޮԽ͢Δͱɺطଘͷςφϯτ֎෦ڞ༗ઃఆ͕ແޮͱͳΓɺ σϑΥϧτͷ৴པϧʔϧ͕࡞͞ΕΔ
• ݱࡏͷςφϯτ֎෦ڞ༗ઃఆΛؑΈͨϧʔϧ͕࡞͞ΕΔͷͰɺ ৴པϧʔϧΛ༗ޮԽ͚ͨͩ͠ͰӨڹൃੜ͠ͳ͍ • ࡞ͨ͠৴པϧʔϧ͕༗ޮʹ࡞༻͍ͯ͠Δ͔ɺτϥΠΞϯυΤϥʔͰͷ֬ೝͱͳΔ ݕূڥΛ༻ҙͯ͠࡞ΓࠐΉͷ͕͓קΊ • ৴པϧʔϧΛແޮԽ͢ΔͱɺΓΔͷͰۓٸ࣌҆৺ (?)
It is a step-by-step process • ৫άϧʔϓؒͷ ڞ༗Մ൱ؔΛཧ •
ڞ༗Մ൱ؔΛجʹઃఆʹམ ͱ͠ࠐΉ • γφϦΦΛ࡞ͬͯಈ࡞֬ೝ • Ϣʔεέʔε͕ෳࡶͩͱ…
ͳΜ͔ͦ͠͏…
Concept of Trust Rules • ৴པϧʔϧɺΨʔυϨʔϧͱͯ͠͏ • ϢʔβʔମݧมΘΒͳ͍ɻ ແअؾʹڞ༗ͯ͠Β͔ͬͯ·Θͳ͍ɻ
• ৫ઃܭతʹڐՄ͠ͳ͍ൣғͷڞ༗Λ͙͜ͱ͕Ͱ͖Δ • Ͱ͖Δ͚ͩγϯϓϧʹߏ͢Δͷ͕ྑͦ͞͏
Use cases that may be addictive • ظޏ༻ऀ༻Ϣʔβʔʹର͢Δެ։ൣғ౷੍ • ϝʔϧࣾγεςϜͷར༻ͷͨΊʹGWSΞΧϯτΛൃߦ͍ͯ͠Δ
• νϟοτʹࢀՃ͢ΔͷͰURLʹ৮ΕΔػձ͋Δ͕ɺ ڞ༗υϥΠϒͰڐՄͨ͠σʔλҎ֎ͷࣾσʔλʹ৮Εͤͨ͘͞ͳ͍ • ϚΠυϥΠϒ͍͍͕ͬͯɺ֎෦ͱڞ༗ͤͨ͘͞ͳ͍
Use cases that may be addictive • ֎෦ڞ༗ΛϗϫΠτϦετʢ·ͨېࢭʣϙϦγʔపఈ • ڞ༗ͱड৴ΛಛఆυϝΠϯͷΈʹݶΔ͜ͱͰɺ
ैདྷͷൈ͚݀ʢड৴ͨ͠ڞ༗ίϯςϯπͷ্ॻ͖ʣΛ࠹͙ • ֎෦ڞ༗Google Driveར༻͠ͳ͍͕ɺۀऀͷݟੵΓडྖͳ Ͳྫ֎తʹಛఆ෦ɾάϧʔϓͷΈGoogle DriveΛ༻͍ͨ֎෦ ͱͷڞ༗ (ड৴) ΛڐՄ͢Δ
Use cases that may not work • ࡒνʔϜΤάθΫςΟϒνʔϜͱ͚ͩڞ༗͢Δ • ಛఆνʔϜؒͱ͚ͩڞ༗Ͱ͖Ε͍͍ɻͳΜͯ͋Δʁ
• ڞ༗υϥΠϒͷϑΥϧμߏͱݖݶઃఆΛ ͜·Ίʹϝϯςφϯε͓ͯ͠Γɺۀ༰ͷఆ͕ٛ໌֬Ͱɺ ͦΕલఏͰۀઃܭ͞Ε͍ͯΔ…ͳͲϝλཁૉ͕ඞཁͦ͏
Anti-patterns • ͍͖ͳΓڋ൱ϙϦγʔΛશࣾల։ (ڐՄϙϦγʔͷల։࿙Ε)ͯ͠ɺ طଘͷ֎෦͔Βڞ༗͞Εͨίϯςϯπ͕ݟ͑ͳ͘ͳΔ • ͜ͷϑΝΠϧ͚ͩྫ֎ʹͯ͠΄͍͠ • ڞ༗ɾड৴ͷରͱͳΔ৫άϧʔϓʹআ֎݅Λ͚͍ͭͨ
• ϙϦγʔͷద༻ൣғɺআ֎݅ΛઃఆͰ͖Δ
To make it easier to do • ·ͣɺࣾڞ௨తͳڐՄϙϦγʔΛ༻ҙͯ͠શମʹద༻ • ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓআ֎͢Δ
• ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓ͚ͷڐՄϙϦγʔΛద༻ • ڋ൱ϙϦγʔɺࡉ͔͍άϧʔϓ৫ʹରͯ͠ݕ౼ • جຊతʹɺڐՄ͠ͳ͚Ε͍͍ͷͰɺઈରېࢭͷέʔεͷΈར༻
ಛੑΛཧղ͢Εɺ ͔Ώ͍ͱ͜Ζʹख͕ಧ͖ͦ͏
conclusion • ศར͚ͩͲେࡶͩͬͨڞ༗ͷʮҰൠతͳΞΫηεʯʹΨʔυ Ϩʔϧ͕Ͱ͖ͨ • ઃܭ8ׂ (৫ɾάϧʔϓͷ୨Է͕͠)ɺ ݕূڥͰೖ೦ʹςετ1.5ׂ •
Google Driveͷڞ༗υϥΠϒͷӡ༻ํ๏ɾϝϯςφϯεํʹ Αͬͯɺ͍ํ͕มΘ͖ͬͯͦ͏
Α͍ Google Drive LifeΛʂ
Thank you !
More Decks by fnifni
See All by fnifni
生成AIのガバナンスの全体像と現実解
fnifni
2
550
生成AIのガバナンスとこれから
fnifni
0
200
AWS re:Inforce 2024 に コミュニティから登壇してきた話
fnifni
0
76
COM224: How organizations are actually applying AWS security best practices
fnifni
0
110
BsidesTokyo2024_AWSセキュリティの ベストプラクティスに関する 利用実態調査のレポートの紹介
fnifni
0
120
re:Inforce2024-recap_英語力ゴミカスでもフル英語登壇を乗り切る成功メソッド
fnifni
0
150
ゼロトラスト導入支援ってどんなことやってるの?
fnifni
0
120
ログの話
fnifni
0
88
re:Inforce 2021 ReCap
fnifni
0
210
Other Decks in Technology
See All in Technology
少ない人手 限られた予算 それでも守る 消せない・見つける・戻れる オールハザード型BCP on AWS / 20261107 Mitsutoshi Matsuo
shift_evolve
PRO
0
390
おうち環境でも「なるべく止めたくない!」 ― おうち環境の機器冗長化の理想と現実
yuutosi
1
410
Intro to Kiro (One agent, every surface) | Kiro: Zero to Hero 01
inariku
PRO
2
140
LLM 基盤と kagent v0 を全部 k8s に入れてみた / Deploy both LLM and kagent v0 in k8s
kota2and3kan
0
220
属人化したISMS運用をGitHubとAIで仕組み化した1年間の記録
sioncojp
4
2.6k
Reticulum, le réseau cypherpunk dont vous avez besoin !
rlifchitz
0
140
サーバーラックは作る時代! 3Dプリンターで作る10インチラックのススメ
jacopen
1
170
市販IoT機器や自作IoT機器とHomeAssistantを駆使して家の電気代をできる限り見える化する方法の考案
harutiro
0
260
Kiro を使うコツ (頼み方、覚えさせ方、任せ方) | 目指せ Kiro マスター 09
inariku
PRO
3
170
セキュリティ専任チームなしで攻撃を先回りするSREが実践したSIEM on Amazon OpenSearch Service
cscengineer
PRO
1
900
ラクスル会社紹介資料|エンジニア向け / RAKSUL Introduction for Engineers
raksulrecruiting
0
110
AWS基盤改善を支える 私たちの理念と行動指針
kentosuzuki
0
230
Featured
See All Featured
Heart Work Chapter 1 - Part 1
lfama
PRO
11
37k
Rebuilding a faster, lazier Slack
samanthasiow
85
9.8k
GraphQLの誤解/rethinking-graphql
sonatard
75
12k
Visual Storytelling: How to be a Superhuman Communicator
reverentgeek
2
750
ピンチをチャンスに:未来をつくるプロダクトロードマップ #pmconf2020
aki_iinuma
128
56k
Understanding Cognitive Biases in Performance Measurement
bluesmoon
32
3.1k
[RailsConf 2023 Opening Keynote] The Magic of Rails
eileencodes
31
10k
Faster Mobile Websites
deanohume
310
32k
Building a Scalable Design System with Sketch
lauravandoore
464
34k
How to train your dragon (web standard)
notwaldorf
96
6.9k
What the history of the web can teach us about the future of AI
inesmontani
PRO
3
810
Why Your Marketing Sucks and What You Can Do About It - Sophie Logan
marketingsoph
0
470