Author Archives: anuj
How to test IAM permissions in GCP
How to Test Iam Permissions in GCP - for the current user From cloud shell curl -X POST \ -H "Authorization: Bearer "$(gcloud auth application-default print-access-token) \ -H "Content-Type: application/json;…
Arrays in BigQuery
Arrays in BigQuery Create an Array create table as WITH a as ( select ('first','second', 'third') as sequence_num ) select from a Create a dataset CREATE SCHEMA OPTIONS ( default_kms_key_name = 'KMS_KEY_NAME', default_partition_expiration_days = PARTITION_EXPIRATION, default_table_expiration_days = TABLE_EXPIRATION, description = 'test_billing_queries', labels = , location = 'us-central1', max_time_travel_hours = HOURS, storage_billing_model = STORAGE_BILLING_MODEL);…
Google Cloud Identity Users versus workspace identity users
Do I need a workspace account to use Google's Cloud Identity? It is not required to be a customer of Google Workspace (formerly known as G Suite) to be able to use…
State of Cloud Security Report
State of Cloud Security Report
Protect Bastion Hosts AWS and GCP
Why secure bastion hosts? Everyone who sets up a bastion host, does so in a public or DMZ subnet. Their reasoning is that it needs to be accessible from anywhere…
Private Service Connect versus Peered VPCs
Overview - What is Private Service Connect? How does it differ from Private Google Access? Private Google Access ( on GCP) The idea is exactly the same as the AWS…
Azure CLI – working with subscriptions
List current logged in (in the browser) accounts azure account list Switch Subscriptions az account set --subscription <name or id>
How do you make a GCP bucket public?
Make a Storage Bucket Public The simplest way is to assign the AllUsers IAM role to the bucket. This makes it accessible for All users, regardless of their source. What…
VPC Service Controls – As Firewall Rules
Are like firewalls - Firewall rules allow/block based on IP addresses - VPC service controls allow/block based on a project perimeter For to Ensure that cloud storage buckets can be…
Compute Engine Restrict Access – restrict service accounts in GCP
Two relevant roles to assign to IAM user - Compute Instance Admin and Service Account User. , Note the prefixes on these two. The instanceAdmin is related to the COMPUTE…