gcloud iam roles describe
How do you quickly determine the permissions inside a given role – whether a predefined role or a custom role? gcloud iam roles describe rolename –projectname = myproject
Archive
Author: anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist.
Initial Consultation
Private Service Connect versus Peered VPCs
Overview – What is Private Service Connect? How does it differ from Private Google Access? Private Google Access ( on GCP) The idea is exactly the same as…
Azure CLI – working with subscriptions
List current logged in (in the browser) accounts azure account list Switch Subscriptions az account set –subscription <name or id>
How do you make a GCP bucket public?
Make a Storage Bucket Public The simplest way is to assign the AllUsers IAM role to the bucket. This makes it accessible for All users, regardless of their…
VPC Service Controls – As Firewall Rules
Are like firewalls – Firewall rules allow/block based on IP addresses – VPC service controls allow/block based on a project perimeter For e.g. to Ensure that cloud storage…
Compute Engine Restrict Access – restrict service accounts in GCP
Two relevant roles to assign to IAM user – Compute Instance Admin and Service Account User. roles/compute.instanceAdmin.v1, roles/iam.serviceAccountUser Note the prefixes on these two. The instanceAdmin is related to…
GCP Service Accounts – Additional Use Cases
Service accounts are extremely useful in GCP – in calling service APIs – both via custom or default Service Accounts. (Also read Service Accounts in GCP Overview and…
Credential types – in GCP and otherwise
What is the difference between API Keys, OAuth Credentials and Service Accounts (in GCP)? This post will shed some light. While GCP specific, this also applies in general.…
GCS Lifecycle Rules – Lifecycle Conditions
E.g. All versions that are not LIVE (and 30 days old) to be deleted. All other versions to be moved to COLDLINE (after 365 day) {“lifecycle”: { “rule”:…
Folders and Billing in GCP
Folders in GCP are not billable entities – Projects and Org level billing is all that can be enforced.