Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
信頼ルールはGoogle Drive共有の孫の手になるか?
Search
fnifni
September 15, 2023
Technology
0
160
信頼ルールはGoogle Drive共有の孫の手になるか?
BTCON2023の登壇資料です
fnifni
September 15, 2023
Tweet
Share
More Decks by fnifni
See All by fnifni
生成AIのガバナンスとこれから
fnifni
0
76
AWS re:Inforce 2024 に コミュニティから登壇してきた話
fnifni
0
18
COM224: How organizations are actually applying AWS security best practices
fnifni
0
22
BsidesTokyo2024_AWSセキュリティの ベストプラクティスに関する 利用実態調査のレポートの紹介
fnifni
0
20
re:Inforce2024-recap_英語力ゴミカスでもフル英語登壇を乗り切る成功メソッド
fnifni
0
92
ゼロトラスト導入支援ってどんなことやってるの?
fnifni
0
47
ログの話
fnifni
0
55
re:Inforce 2021 ReCap
fnifni
0
180
CloudTailをAzure Sentinelで 分析するということ
fnifni
1
180
Other Decks in Technology
See All in Technology
20240911_New_Relicダッシュボード活用例
speakerdeckfk
0
100
AI活用したくてもできなかった不動産SaaSの今とこれから
nealle
0
260
効果的なオンコール対応と障害対応
ryuichi1208
5
2.7k
Agile in Automotive Industry, puzzles and lights.
hiranabe
2
580
Oracle Database Backup Service:サービス概要のご紹介
oracle4engineer
PRO
0
4.1k
やってやろうじゃないかメカアジャイル! / Let's do it, mechanical agile!
psj59129
1
180
ビジネスとエンジニアリングを繋ぐプロダクトを中心とした組織づくりの実践
sansantech
PRO
1
170
四国クラウドお遍路 2024 in 高知 エンディング
yukataoka
0
190
Tricentisにおけるテスト自動化へのAI活用ご紹介/20240910Shunsuke Katakura
shift_evolve
0
180
contenteditableと向き合う
kikuchikakeru
2
290
アプリをリリースできる状態に保ったまま 段階的にリファクタリングするための 戦略と戦術 / Strategies and tactics for incremental refactoring
yanzm
6
760
株式会社M2X エンジニアチーム紹介資料
m2xsoftware
0
620
Featured
See All Featured
Six Lessons from altMBA
skipperchong
26
3.3k
Build your cross-platform service in a week with App Engine
jlugia
228
18k
Code Review Best Practice
trishagee
62
16k
Become a Pro
speakerdeck
PRO
22
4.9k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
kevinliebholz
25
3.9k
It's Worth the Effort
3n
182
27k
Designing for Performance
lara
604
68k
A Tale of Four Properties
chriscoyier
155
22k
WebSockets: Embracing the real-time Web
robhawkes
59
7.3k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
danielanewman
225
22k
Making the Leap to Tech Lead
cromwellryan
128
8.8k
The Cult of Friendly URLs
andyhume
76
6k
Transcript
Will the trust rule be the granddaddy of Google Drive
sharing? Considering the Pain of Google Drive Sharing … At Business Technology Conference Japan 2023 2023.01.21 / Lecture by Hirokazu
৴པϧʔϧ Google Driveڞ༗ͷଙͷखʹͳΔ͔ʁ Google Drive ڞ༗ͷ௧ΈΛߟ͑Δ … At Business
Technology Conference Japan 2023 2023.01.21 / ͻΖ͔ͣ
Who am I !? Hirokazu Yoshida @ CloudNative Inc. Job
: Security Engineer Community : Security-JAWS Recent Interests : Data Governance ɹɹɹɹɹɹɹɹPrivacy
Attention !! • τϐοΫͷੑ্࣭ɺGoogle DriveͷҰൠతͳ༷ެ։ใϨ ϕϧͷϕετϓϥΫςΟεʹ৮Ε·͕͢ɺࣄࡉ͔ͳղઆτ ϦοΩʔͳར༻ํ๏ʹݴٴ͠·ͤΜɻ • ϢʔεέʔεΛྫࣔ͠·͕͢ɺࣗ͝Ͱ࣮ࢪ͢Δࡍɺ
Google WorkspaceGoogle DriveͷϥΠηϯεنΛࣗ͝ Ͱ֬ೝ͔ͯ͠Βߦ͍ͬͯͩ͘͞ɻ
Google Driveͬͯ·͔͢ʁ
ײతͰ͍͍͢Ͱ͢ΑͶʔ
Types of Google Drive • ڞ༗υϥΠϒ • ϚΠυϥΠϒ
Types of Google Drive • ڞ༗υϥΠϒ • ෦ϓϩδΣΫτɾΠϕϯτɺ֎෦ڞ༗ઌͳͲͷ༻్͝ͱʹڞ༗υϥΠϒΛ࡞ͬͯཧ • γϯϓϧͳཧݖݶ
ཧऀɺίϯςϯπཧऀɺߘऀɺӾཡऀʢίϝϯτՄʣɺӾཡऀ • ϑΝΠϧϑΥϧμͷΦʔφʔɺνʔϜʹͳΔ • ΰϛശ30Ͱશআ or ཧऀ͕खಈͰશআʢ෮ݩɺߘऀҎ্Ͱ࣮ࢪՄೳʣ
Types of Google Drive • ϚΠυϥΠϒ • ݸਓతͳϑΝΠϧඇެ։ϑΝΠϧ(1on1ϝϞɺ৬ೳධՁͳͲϓϥΠόγʔ͕ؾ ʹͳΔͷ)Λ֨ೲ •
ϑΝΠϧϑΥϧμͷΦʔφʔɺ࡞ͨ͠ϢʔβʔʹͳΔ • Ϣʔβʔ͕͍ͳ͘ͳΔͱɺίϯςϯπফ͑Δ • ΰϛശ30Ͱશআʢ෮ݩϑΝΠϧͷΦʔφʔͰ࣮ࢪՄೳʣ
ϑΥϧμฤΞΫηεݖઃఆͬͯ Ͳ͏ͬͯ·͢ʁ
Best Practice (shared drive) • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ • ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻
• ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
͓ؾ͖͍͍ͮͨͩͨͰ͋Ζ͏͔…
Best Practice (shared drive) : reprint • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ
• ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻ • ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) : reprint • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
A Glimpse of Google Drive's Philosophy in Best Practices •
Google Driveʹ֨ೲͨ͠ίϯςϯπͷڞ༗ΞΫηεݖཧ ɺར༻ऀͷࡋྔʹҕͶΒΕ͍ͯΔ • ϑΥϧμߏར༻ঢ়گʹԠͯ͡ɺར༻ऀ͕ࣗൃతʹݟ͢ ͷͱ͍ͯ͠Δ • ϚΠυϥΠϒͷίϯςϯπͷڞ༗ํ๏ར༻ऀͷࡋྔ
ͭ·Γ ίϯςϯπΞΫηεݖͷཧ ར༻ऀͷϦςϥγʔʹֻ͔͍ͬͯΔ
ཧऀଆͰؤுͬͯ ϑΥϧμߏ࡞Ε͍͍Μ͡Όͳ͍ʁ
🤔
A common scene on site (1) • ͜ͷϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺ૬खνʔϜʹϑΥϧμͷΞΫη εݖ͕ͳ͍͠ɺϑΥϧμͷΞΫηεݖཧͷݖݶͳ͍ •
͍·ɺ͜ͷϑΝΠϧ͚ͩݟͤΒΕΕ͍͍ • Կਓ͔͍Δ͚ͲɺෳνʔϜʹؔऀ͕͍Δ͠ɺ͍͍ͪͪಛ ఆϢʔβʔΛࢦఆ͢Δͷɺ࿙Ε͕͋Γͦ͏Ͱμϧ͍ɻ • ͜ͷϑΝΠϧͷͨΊʹϑΥϧμ࡞ਃͱ͔ͬͱμϧ͍ɻ
A common scene on site (1) • ͍͠͠ɺʮ͍·ɺ͑Δ͜ͱʯΛ༏ઌ͍ͨ͠ • ͦ͏ͩɺڞ༗ͷʮҰൠతͳΞΫηεʯΛ͍͍͑Μ͡ΌΜʂ
• ϦϯΫΛνϟοτϧʔϜʹషͬͯͱ…
A common scene on site (1) • νϟοτϧʔϜͷެ։ൣғ ʹσʔλͷެ։ൣғ •
ޙ͔ΒνϟοτϧʔϜʹ ࢀՃͨ͠ਓݟΒΕΔ • ͦ͜·Ͱߟ͑ͯ·͢ʁ
A common scene on site (2) • ֎෦ͱେ͖͍ϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺਃखଓ͖͕ࡶͰɺ ϝʔϧ͑ͳ͍ •
͍͠͠ɺʮ͍·ɺΓ͍ͨʯ • ֎෦͔ΒͷটΛड͚ͯͦ͜ʹஔ͜͏ • ςφϯτઃఆͰ֎෦ڞ༗Λېࢭ͍ͯ͠Δ߹ɺΞοϓϩʔ υෆՄͰ͋Δ͕ɺطଘϑΝΠϧͷฤू্ॻ͖อଘՄೳ
A common scene on site (2) • ଞࣾςφϯτɺݸਓͷ gmail.comͷ߹͋Δ •
CASBͰࣗࣾςφϯτ ͷΞοϓϩʔυͱࣝผ • টΛड͚Δ͜ͱࣗମࢭ ΊΒΕͣɺه͞Εͳ͍
A common scene on site (Summary) • Google Driveࣗମɺར༻ऀͷϦςϥγʔʹґଘ͢Δઃܭࢥ •
ެ։ൣғΞΫηεݖʹ͍ͭͯɺ࢛࣌தߟ͍͑ͯΔਓͳΜͯ ͍·͢ʁ • ςφϯτઃఆϑΥϧμઃܭɺӡ༻ϧʔϧΛఆΊͯɺ ศརػೳʹΑͬͯɺൈ͚݀తʹར༻Ͱ͖Δ
Google Drive ਓྨʹૣ͗ͨ͢ͷ͔…
ͦΜͳࡴെͱͨ͠εϨʹ ৴པϧʔϧ͕ʂ
What are trust rules? • ৴པϧʔϧʹΑΓɺཧऀ෦͓Αͼ֎෦ͷڞ༗Λ੍ݶ͢Δ ϙϦγʔΛద༻Ͱ͖·͢ɻ • ৫୯Ґάϧʔϓ୯ҐͰϧʔϧΛઃఆͰ͖ΔͨΊɺͯ͢ͷ Ϣʔβʔʹରͯ͠แׅతͳϙϦγʔΛద༻͢ΔΑΓɺΑΓ͖
Ίࡉ͔͍Ξϓϩʔν͕ՄೳʹͳΓ·͢ɻ • Google Workspace Ent Plus / Ent Std, Edu Plus / Edu Std https://workspaceupdates.googleblog.com/2022/11/google-drive-trust-rules- generally-available.html
What are trust rules? • ϚʔέςΟϯά νʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ ύʔτφʔ৫ͷಛఆͷϢʔβʔͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ৫ͷଞͷνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺύʔ
τφʔ৫ͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ • ύʔτφʔ৫ͷଞͷνʔϜ͕৫ͷͲͷϢʔβʔͱ ϑΝΠϧΛڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺࡒνʔϜ͓ ΑͼΤάθΫςΟϒ νʔϜͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ৫ͷଞͷ
νʔϜͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ൣғɿϙϦγʔͷద༻ൣғ (৫ or / and
άϧʔϓ - আ֎Մ) • τϦΨʔɿڞ༗ or / and ड৴ • ݅ɿڞ༗ or ड৴͢Δ૬ख (৫ or / and άϧʔϓ - আ֎ෆՄ) • ૢ࡞ɿڐՄ or ڋ൱ https://support.google.com/a/answer/10621317
ͳΔ΄ͲΘ͔ΒΜ
In short, it looks like this • ڞ༗ͱड৴͕Ұகͨ͠૬खͷΈ ڞ༗͕Ͱ͖Δ •
֎෦ϢʔβʔҰக͠ͳͯ͘ Α͍ • ڋ൱͕ڧ͍ͷͰڐՄΛ͍͔ʹ Έ߹ΘͤΔ͔͕ΧΪ • Ϣʔεέʔε͕ෳࡶͩͱ…
ເ͕͕Δʂ ͙͢ʹࢼ͍ͨ͠ʂ
It's easy to get started, but... • ৴པϧʔϧΛ༗ޮԽ͢Δͱɺطଘͷςφϯτ֎෦ڞ༗ઃఆ͕ແޮͱͳΓɺ σϑΥϧτͷ৴པϧʔϧ͕࡞͞ΕΔ
• ݱࡏͷςφϯτ֎෦ڞ༗ઃఆΛؑΈͨϧʔϧ͕࡞͞ΕΔͷͰɺ ৴པϧʔϧΛ༗ޮԽ͚ͨͩ͠ͰӨڹൃੜ͠ͳ͍ • ࡞ͨ͠৴པϧʔϧ͕༗ޮʹ࡞༻͍ͯ͠Δ͔ɺτϥΠΞϯυΤϥʔͰͷ֬ೝͱͳΔ ݕূڥΛ༻ҙͯ͠࡞ΓࠐΉͷ͕͓קΊ • ৴པϧʔϧΛແޮԽ͢ΔͱɺΓΔͷͰۓٸ࣌҆৺ (?)
It is a step-by-step process • ৫άϧʔϓؒͷ ڞ༗Մ൱ؔΛཧ •
ڞ༗Մ൱ؔΛجʹઃఆʹམ ͱ͠ࠐΉ • γφϦΦΛ࡞ͬͯಈ࡞֬ೝ • Ϣʔεέʔε͕ෳࡶͩͱ…
ͳΜ͔ͦ͠͏…
Concept of Trust Rules • ৴པϧʔϧɺΨʔυϨʔϧͱͯ͠͏ • ϢʔβʔମݧมΘΒͳ͍ɻ ແअؾʹڞ༗ͯ͠Β͔ͬͯ·Θͳ͍ɻ
• ৫ઃܭతʹڐՄ͠ͳ͍ൣғͷڞ༗Λ͙͜ͱ͕Ͱ͖Δ • Ͱ͖Δ͚ͩγϯϓϧʹߏ͢Δͷ͕ྑͦ͞͏
Use cases that may be addictive • ظޏ༻ऀ༻Ϣʔβʔʹର͢Δެ։ൣғ౷੍ • ϝʔϧࣾγεςϜͷར༻ͷͨΊʹGWSΞΧϯτΛൃߦ͍ͯ͠Δ
• νϟοτʹࢀՃ͢ΔͷͰURLʹ৮ΕΔػձ͋Δ͕ɺ ڞ༗υϥΠϒͰڐՄͨ͠σʔλҎ֎ͷࣾσʔλʹ৮Εͤͨ͘͞ͳ͍ • ϚΠυϥΠϒ͍͍͕ͬͯɺ֎෦ͱڞ༗ͤͨ͘͞ͳ͍
Use cases that may be addictive • ֎෦ڞ༗ΛϗϫΠτϦετʢ·ͨېࢭʣϙϦγʔపఈ • ڞ༗ͱड৴ΛಛఆυϝΠϯͷΈʹݶΔ͜ͱͰɺ
ैདྷͷൈ͚݀ʢड৴ͨ͠ڞ༗ίϯςϯπͷ্ॻ͖ʣΛ࠹͙ • ֎෦ڞ༗Google Driveར༻͠ͳ͍͕ɺۀऀͷݟੵΓडྖͳ Ͳྫ֎తʹಛఆ෦ɾάϧʔϓͷΈGoogle DriveΛ༻͍ͨ֎෦ ͱͷڞ༗ (ड৴) ΛڐՄ͢Δ
Use cases that may not work • ࡒνʔϜΤάθΫςΟϒνʔϜͱ͚ͩڞ༗͢Δ • ಛఆνʔϜؒͱ͚ͩڞ༗Ͱ͖Ε͍͍ɻͳΜͯ͋Δʁ
• ڞ༗υϥΠϒͷϑΥϧμߏͱݖݶઃఆΛ ͜·Ίʹϝϯςφϯε͓ͯ͠Γɺۀ༰ͷఆ͕ٛ໌֬Ͱɺ ͦΕલఏͰۀઃܭ͞Ε͍ͯΔ…ͳͲϝλཁૉ͕ඞཁͦ͏
Anti-patterns • ͍͖ͳΓڋ൱ϙϦγʔΛશࣾల։ (ڐՄϙϦγʔͷల։࿙Ε)ͯ͠ɺ طଘͷ֎෦͔Βڞ༗͞Εͨίϯςϯπ͕ݟ͑ͳ͘ͳΔ • ͜ͷϑΝΠϧ͚ͩྫ֎ʹͯ͠΄͍͠ • ڞ༗ɾड৴ͷରͱͳΔ৫άϧʔϓʹআ֎݅Λ͚͍ͭͨ
• ϙϦγʔͷద༻ൣғɺআ֎݅ΛઃఆͰ͖Δ
To make it easier to do • ·ͣɺࣾڞ௨తͳڐՄϙϦγʔΛ༻ҙͯ͠શମʹద༻ • ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓআ֎͢Δ
• ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓ͚ͷڐՄϙϦγʔΛద༻ • ڋ൱ϙϦγʔɺࡉ͔͍άϧʔϓ৫ʹରͯ͠ݕ౼ • جຊతʹɺڐՄ͠ͳ͚Ε͍͍ͷͰɺઈରېࢭͷέʔεͷΈར༻
ಛੑΛཧղ͢Εɺ ͔Ώ͍ͱ͜Ζʹख͕ಧ͖ͦ͏
conclusion • ศར͚ͩͲେࡶͩͬͨڞ༗ͷʮҰൠతͳΞΫηεʯʹΨʔυ Ϩʔϧ͕Ͱ͖ͨ • ઃܭ8ׂ (৫ɾάϧʔϓͷ୨Է͕͠)ɺ ݕূڥͰೖ೦ʹςετ1.5ׂ •
Google Driveͷڞ༗υϥΠϒͷӡ༻ํ๏ɾϝϯςφϯεํʹ Αͬͯɺ͍ํ͕มΘ͖ͬͯͦ͏
Α͍ Google Drive LifeΛʂ
Thank you !