Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
信頼ルールはGoogle Drive共有の孫の手になるか?
Search
fnifni
September 15, 2023
Technology
0
250
信頼ルールはGoogle Drive共有の孫の手になるか?
BTCON2023の登壇資料です
fnifni
September 15, 2023
Tweet
Share
More Decks by fnifni
See All by fnifni
生成AIのガバナンスの全体像と現実解
fnifni
2
260
生成AIのガバナンスとこれから
fnifni
0
120
AWS re:Inforce 2024 に コミュニティから登壇してきた話
fnifni
0
33
COM224: How organizations are actually applying AWS security best practices
fnifni
0
44
BsidesTokyo2024_AWSセキュリティの ベストプラクティスに関する 利用実態調査のレポートの紹介
fnifni
0
35
re:Inforce2024-recap_英語力ゴミカスでもフル英語登壇を乗り切る成功メソッド
fnifni
0
110
ゼロトラスト導入支援ってどんなことやってるの?
fnifni
0
58
ログの話
fnifni
0
57
re:Inforce 2021 ReCap
fnifni
0
190
Other Decks in Technology
See All in Technology
飲食店予約台帳を支えるインタラクティブ UI 設計と実装
siropaca
7
1.6k
30分でわかる『アジャイルデータモデリング』
hanon52_
9
2.5k
第13回 Data-Centric AI勉強会, 画像認識におけるData-centric AI
ksaito_osx
0
370
地方拠点で エンジニアリングマネージャーってできるの? 〜地方という制約を楽しむオーナーシップとコミュニティ作り〜
1coin
1
220
Swiftの “private” を テストする / Testing Swift "private"
yutailang0119
0
120
ビジネスモデリング道場 目的と背景
masuda220
PRO
9
410
データの品質が低いと何が困るのか
kzykmyzw
6
1.1k
Developers Summit 2025 浅野卓也(13-B-7 LegalOn Technologies)
legalontechnologies
PRO
0
500
偶然 × 行動で人生の可能性を広げよう / Serendipity × Action: Discover Your Possibilities
ar_tama
1
990
オブザーバビリティの観点でみるAWS / AWS from observability perspective
ymotongpoo
8
1.3k
モノレポ開発のエラー、誰が見る?Datadog で実現する適切なトリアージとエスカレーション
biwashi
6
790
運用しているアプリケーションのDBのリプレイスをやってみた
miura55
1
490
Featured
See All Featured
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
panda_program
99
18k
Measuring & Analyzing Core Web Vitals
bluesmoon
6
240
Put a Button on it: Removing Barriers to Going Fast.
kastner
60
3.7k
Designing on Purpose - Digital PM Summit 2013
jponch
117
7.1k
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
stephaniewalter
280
13k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
44
7k
YesSQL, Process and Tooling at Scale
rocio
171
14k
Intergalactic Javascript Robots from Outer Space
tanoku
270
27k
Building a Scalable Design System with Sketch
lauravandoore
460
33k
Testing 201, or: Great Expectations
jmmastey
42
7.2k
Six Lessons from altMBA
skipperchong
27
3.6k
The Power of CSS Pseudo Elements
geoffreycrofte
75
5.5k
Transcript
Will the trust rule be the granddaddy of Google Drive
sharing? Considering the Pain of Google Drive Sharing … At Business Technology Conference Japan 2023 2023.01.21 / Lecture by Hirokazu
৴པϧʔϧ Google Driveڞ༗ͷଙͷखʹͳΔ͔ʁ Google Drive ڞ༗ͷ௧ΈΛߟ͑Δ … At Business
Technology Conference Japan 2023 2023.01.21 / ͻΖ͔ͣ
Who am I !? Hirokazu Yoshida @ CloudNative Inc. Job
: Security Engineer Community : Security-JAWS Recent Interests : Data Governance ɹɹɹɹɹɹɹɹPrivacy
Attention !! • τϐοΫͷੑ্࣭ɺGoogle DriveͷҰൠతͳ༷ެ։ใϨ ϕϧͷϕετϓϥΫςΟεʹ৮Ε·͕͢ɺࣄࡉ͔ͳղઆτ ϦοΩʔͳར༻ํ๏ʹݴٴ͠·ͤΜɻ • ϢʔεέʔεΛྫࣔ͠·͕͢ɺࣗ͝Ͱ࣮ࢪ͢Δࡍɺ
Google WorkspaceGoogle DriveͷϥΠηϯεنΛࣗ͝ Ͱ֬ೝ͔ͯ͠Βߦ͍ͬͯͩ͘͞ɻ
Google Driveͬͯ·͔͢ʁ
ײతͰ͍͍͢Ͱ͢ΑͶʔ
Types of Google Drive • ڞ༗υϥΠϒ • ϚΠυϥΠϒ
Types of Google Drive • ڞ༗υϥΠϒ • ෦ϓϩδΣΫτɾΠϕϯτɺ֎෦ڞ༗ઌͳͲͷ༻్͝ͱʹڞ༗υϥΠϒΛ࡞ͬͯཧ • γϯϓϧͳཧݖݶ
ཧऀɺίϯςϯπཧऀɺߘऀɺӾཡऀʢίϝϯτՄʣɺӾཡऀ • ϑΝΠϧϑΥϧμͷΦʔφʔɺνʔϜʹͳΔ • ΰϛശ30Ͱશআ or ཧऀ͕खಈͰશআʢ෮ݩɺߘऀҎ্Ͱ࣮ࢪՄೳʣ
Types of Google Drive • ϚΠυϥΠϒ • ݸਓతͳϑΝΠϧඇެ։ϑΝΠϧ(1on1ϝϞɺ৬ೳධՁͳͲϓϥΠόγʔ͕ؾ ʹͳΔͷ)Λ֨ೲ •
ϑΝΠϧϑΥϧμͷΦʔφʔɺ࡞ͨ͠ϢʔβʔʹͳΔ • Ϣʔβʔ͕͍ͳ͘ͳΔͱɺίϯςϯπফ͑Δ • ΰϛശ30Ͱશআʢ෮ݩϑΝΠϧͷΦʔφʔͰ࣮ࢪՄೳʣ
ϑΥϧμฤΞΫηεݖઃఆͬͯ Ͳ͏ͬͯ·͢ʁ
Best Practice (shared drive) • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ • ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻
• ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
͓ؾ͖͍͍ͮͨͩͨͰ͋Ζ͏͔…
Best Practice (shared drive) : reprint • ڞಉฤूΈΜͳͰࢀর͢ΔͷΛ֨ೲ͢Δ • ޡআ͕৺ͳΒɺߘऀҎԼʹݶఆ͢Δ
• ϝϯόʔΛաʹՃ͗͢͠ͳ͍Α͏ͭͭ͠ɺGoogleάϧʔϓΛར༻ • ίϯςϯπͷڞ༗Λ࣋ͬͯߦ͏ • ϑΥϧμʹϑΥϧμ͕͋Δ߹ɺΞΫηεݖΛཹҙ͠ɺ ΞΫηεݖཧ͕͘͠ͳͬͨΒϑΥϧμߏΛ࠶ฤ͢Δ • ໋໊نଇʢࣾɾࣾ֎ɺΞʔΧΠϒɾਐߦதɺҬ໊ͳͲͷ಄จࣈʣΛ͚ͭΔ
Best Practice (my drive) : reprint • ࡞ͨ͠υϥϑτΛɺߘऀҎ্ͷݖݶΛ༗͢Δڞ༗ϑΥϧμ ʹҠಈ͢Δ https://support.google.com/a/users/answer/7212025?hl=ja
A Glimpse of Google Drive's Philosophy in Best Practices •
Google Driveʹ֨ೲͨ͠ίϯςϯπͷڞ༗ΞΫηεݖཧ ɺར༻ऀͷࡋྔʹҕͶΒΕ͍ͯΔ • ϑΥϧμߏར༻ঢ়گʹԠͯ͡ɺར༻ऀ͕ࣗൃతʹݟ͢ ͷͱ͍ͯ͠Δ • ϚΠυϥΠϒͷίϯςϯπͷڞ༗ํ๏ར༻ऀͷࡋྔ
ͭ·Γ ίϯςϯπΞΫηεݖͷཧ ར༻ऀͷϦςϥγʔʹֻ͔͍ͬͯΔ
ཧऀଆͰؤுͬͯ ϑΥϧμߏ࡞Ε͍͍Μ͡Όͳ͍ʁ
🤔
A common scene on site (1) • ͜ͷϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺ૬खνʔϜʹϑΥϧμͷΞΫη εݖ͕ͳ͍͠ɺϑΥϧμͷΞΫηεݖཧͷݖݶͳ͍ •
͍·ɺ͜ͷϑΝΠϧ͚ͩݟͤΒΕΕ͍͍ • Կਓ͔͍Δ͚ͲɺෳνʔϜʹؔऀ͕͍Δ͠ɺ͍͍ͪͪಛ ఆϢʔβʔΛࢦఆ͢Δͷɺ࿙Ε͕͋Γͦ͏Ͱμϧ͍ɻ • ͜ͷϑΝΠϧͷͨΊʹϑΥϧμ࡞ਃͱ͔ͬͱμϧ͍ɻ
A common scene on site (1) • ͍͠͠ɺʮ͍·ɺ͑Δ͜ͱʯΛ༏ઌ͍ͨ͠ • ͦ͏ͩɺڞ༗ͷʮҰൠతͳΞΫηεʯΛ͍͍͑Μ͡ΌΜʂ
• ϦϯΫΛνϟοτϧʔϜʹషͬͯͱ…
A common scene on site (1) • νϟοτϧʔϜͷެ։ൣғ ʹσʔλͷެ։ൣғ •
ޙ͔ΒνϟοτϧʔϜʹ ࢀՃͨ͠ਓݟΒΕΔ • ͦ͜·Ͱߟ͑ͯ·͢ʁ
A common scene on site (2) • ֎෦ͱେ͖͍ϑΝΠϧΛڞ༗͍͚ͨ͠Ͳɺਃखଓ͖͕ࡶͰɺ ϝʔϧ͑ͳ͍ •
͍͠͠ɺʮ͍·ɺΓ͍ͨʯ • ֎෦͔ΒͷটΛड͚ͯͦ͜ʹஔ͜͏ • ςφϯτઃఆͰ֎෦ڞ༗Λېࢭ͍ͯ͠Δ߹ɺΞοϓϩʔ υෆՄͰ͋Δ͕ɺطଘϑΝΠϧͷฤू্ॻ͖อଘՄೳ
A common scene on site (2) • ଞࣾςφϯτɺݸਓͷ gmail.comͷ߹͋Δ •
CASBͰࣗࣾςφϯτ ͷΞοϓϩʔυͱࣝผ • টΛड͚Δ͜ͱࣗମࢭ ΊΒΕͣɺه͞Εͳ͍
A common scene on site (Summary) • Google Driveࣗମɺར༻ऀͷϦςϥγʔʹґଘ͢Δઃܭࢥ •
ެ։ൣғΞΫηεݖʹ͍ͭͯɺ࢛࣌தߟ͍͑ͯΔਓͳΜͯ ͍·͢ʁ • ςφϯτઃఆϑΥϧμઃܭɺӡ༻ϧʔϧΛఆΊͯɺ ศརػೳʹΑͬͯɺൈ͚݀తʹར༻Ͱ͖Δ
Google Drive ਓྨʹૣ͗ͨ͢ͷ͔…
ͦΜͳࡴെͱͨ͠εϨʹ ৴པϧʔϧ͕ʂ
What are trust rules? • ৴པϧʔϧʹΑΓɺཧऀ෦͓Αͼ֎෦ͷڞ༗Λ੍ݶ͢Δ ϙϦγʔΛద༻Ͱ͖·͢ɻ • ৫୯Ґάϧʔϓ୯ҐͰϧʔϧΛઃఆͰ͖ΔͨΊɺͯ͢ͷ Ϣʔβʔʹରͯ͠แׅతͳϙϦγʔΛద༻͢ΔΑΓɺΑΓ͖
Ίࡉ͔͍Ξϓϩʔν͕ՄೳʹͳΓ·͢ɻ • Google Workspace Ent Plus / Ent Std, Edu Plus / Edu Std https://workspaceupdates.googleblog.com/2022/11/google-drive-trust-rules- generally-available.html
What are trust rules? • ϚʔέςΟϯά νʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ ύʔτφʔ৫ͷಛఆͷϢʔβʔͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ৫ͷଞͷνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺύʔ
τφʔ৫ͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ • ύʔτφʔ৫ͷଞͷνʔϜ͕৫ͷͲͷϢʔβʔͱ ϑΝΠϧΛڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺࡒνʔϜ͓ ΑͼΤάθΫςΟϒ νʔϜͱڞ༗͢Δ͜ͱΛڐՄ͢Δɻ • ࡒνʔϜ͕Φʔφʔͱͳ͍ͬͯΔϑΝΠϧΛɺ৫ͷଞͷ
νʔϜͱڞ༗Ͱ͖ͳ͍Α͏ʹϒϩοΫ͢Δɻ https://support.google.com/a/answer/10621317
What are trust rules? • ൣғɿϙϦγʔͷద༻ൣғ (৫ or / and
άϧʔϓ - আ֎Մ) • τϦΨʔɿڞ༗ or / and ड৴ • ݅ɿڞ༗ or ड৴͢Δ૬ख (৫ or / and άϧʔϓ - আ֎ෆՄ) • ૢ࡞ɿڐՄ or ڋ൱ https://support.google.com/a/answer/10621317
ͳΔ΄ͲΘ͔ΒΜ
In short, it looks like this • ڞ༗ͱड৴͕Ұகͨ͠૬खͷΈ ڞ༗͕Ͱ͖Δ •
֎෦ϢʔβʔҰக͠ͳͯ͘ Α͍ • ڋ൱͕ڧ͍ͷͰڐՄΛ͍͔ʹ Έ߹ΘͤΔ͔͕ΧΪ • Ϣʔεέʔε͕ෳࡶͩͱ…
ເ͕͕Δʂ ͙͢ʹࢼ͍ͨ͠ʂ
It's easy to get started, but... • ৴པϧʔϧΛ༗ޮԽ͢Δͱɺطଘͷςφϯτ֎෦ڞ༗ઃఆ͕ແޮͱͳΓɺ σϑΥϧτͷ৴པϧʔϧ͕࡞͞ΕΔ
• ݱࡏͷςφϯτ֎෦ڞ༗ઃఆΛؑΈͨϧʔϧ͕࡞͞ΕΔͷͰɺ ৴པϧʔϧΛ༗ޮԽ͚ͨͩ͠ͰӨڹൃੜ͠ͳ͍ • ࡞ͨ͠৴པϧʔϧ͕༗ޮʹ࡞༻͍ͯ͠Δ͔ɺτϥΠΞϯυΤϥʔͰͷ֬ೝͱͳΔ ݕূڥΛ༻ҙͯ͠࡞ΓࠐΉͷ͕͓קΊ • ৴པϧʔϧΛແޮԽ͢ΔͱɺΓΔͷͰۓٸ࣌҆৺ (?)
It is a step-by-step process • ৫άϧʔϓؒͷ ڞ༗Մ൱ؔΛཧ •
ڞ༗Մ൱ؔΛجʹઃఆʹམ ͱ͠ࠐΉ • γφϦΦΛ࡞ͬͯಈ࡞֬ೝ • Ϣʔεέʔε͕ෳࡶͩͱ…
ͳΜ͔ͦ͠͏…
Concept of Trust Rules • ৴པϧʔϧɺΨʔυϨʔϧͱͯ͠͏ • ϢʔβʔମݧมΘΒͳ͍ɻ ແअؾʹڞ༗ͯ͠Β͔ͬͯ·Θͳ͍ɻ
• ৫ઃܭతʹڐՄ͠ͳ͍ൣғͷڞ༗Λ͙͜ͱ͕Ͱ͖Δ • Ͱ͖Δ͚ͩγϯϓϧʹߏ͢Δͷ͕ྑͦ͞͏
Use cases that may be addictive • ظޏ༻ऀ༻Ϣʔβʔʹର͢Δެ։ൣғ౷੍ • ϝʔϧࣾγεςϜͷར༻ͷͨΊʹGWSΞΧϯτΛൃߦ͍ͯ͠Δ
• νϟοτʹࢀՃ͢ΔͷͰURLʹ৮ΕΔػձ͋Δ͕ɺ ڞ༗υϥΠϒͰڐՄͨ͠σʔλҎ֎ͷࣾσʔλʹ৮Εͤͨ͘͞ͳ͍ • ϚΠυϥΠϒ͍͍͕ͬͯɺ֎෦ͱڞ༗ͤͨ͘͞ͳ͍
Use cases that may be addictive • ֎෦ڞ༗ΛϗϫΠτϦετʢ·ͨېࢭʣϙϦγʔపఈ • ڞ༗ͱड৴ΛಛఆυϝΠϯͷΈʹݶΔ͜ͱͰɺ
ैདྷͷൈ͚݀ʢड৴ͨ͠ڞ༗ίϯςϯπͷ্ॻ͖ʣΛ࠹͙ • ֎෦ڞ༗Google Driveར༻͠ͳ͍͕ɺۀऀͷݟੵΓडྖͳ Ͳྫ֎తʹಛఆ෦ɾάϧʔϓͷΈGoogle DriveΛ༻͍ͨ֎෦ ͱͷڞ༗ (ड৴) ΛڐՄ͢Δ
Use cases that may not work • ࡒνʔϜΤάθΫςΟϒνʔϜͱ͚ͩڞ༗͢Δ • ಛఆνʔϜؒͱ͚ͩڞ༗Ͱ͖Ε͍͍ɻͳΜͯ͋Δʁ
• ڞ༗υϥΠϒͷϑΥϧμߏͱݖݶઃఆΛ ͜·Ίʹϝϯςφϯε͓ͯ͠Γɺۀ༰ͷఆ͕ٛ໌֬Ͱɺ ͦΕલఏͰۀઃܭ͞Ε͍ͯΔ…ͳͲϝλཁૉ͕ඞཁͦ͏
Anti-patterns • ͍͖ͳΓڋ൱ϙϦγʔΛશࣾల։ (ڐՄϙϦγʔͷల։࿙Ε)ͯ͠ɺ طଘͷ֎෦͔Βڞ༗͞Εͨίϯςϯπ͕ݟ͑ͳ͘ͳΔ • ͜ͷϑΝΠϧ͚ͩྫ֎ʹͯ͠΄͍͠ • ڞ༗ɾड৴ͷରͱͳΔ৫άϧʔϓʹআ֎݅Λ͚͍ͭͨ
• ϙϦγʔͷద༻ൣғɺআ֎݅ΛઃఆͰ͖Δ
To make it easier to do • ·ͣɺࣾڞ௨తͳڐՄϙϦγʔΛ༻ҙͯ͠શମʹద༻ • ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓআ֎͢Δ
• ݸผͷ੍ޚΛ͍ͨ͠৫άϧʔϓ͚ͷڐՄϙϦγʔΛద༻ • ڋ൱ϙϦγʔɺࡉ͔͍άϧʔϓ৫ʹରͯ͠ݕ౼ • جຊతʹɺڐՄ͠ͳ͚Ε͍͍ͷͰɺઈରېࢭͷέʔεͷΈར༻
ಛੑΛཧղ͢Εɺ ͔Ώ͍ͱ͜Ζʹख͕ಧ͖ͦ͏
conclusion • ศར͚ͩͲେࡶͩͬͨڞ༗ͷʮҰൠతͳΞΫηεʯʹΨʔυ Ϩʔϧ͕Ͱ͖ͨ • ઃܭ8ׂ (৫ɾάϧʔϓͷ୨Է͕͠)ɺ ݕূڥͰೖ೦ʹςετ1.5ׂ •
Google Driveͷڞ༗υϥΠϒͷӡ༻ํ๏ɾϝϯςφϯεํʹ Αͬͯɺ͍ํ͕มΘ͖ͬͯͦ͏
Α͍ Google Drive LifeΛʂ
Thank you !