Author Archives: anuj - Page 12
Service Accounts in GCP – Notes from Production Environments
Need Help with your GCP Project? Contact a certified professional GoogleCloudArchitect today. Why Google Service Accounts? Storing credentials in apps is cumbersome (and insecure). A Service account solves this problem…
REST APIs versus ENI Interfaces
This content is password protected. To view it please enter your password below: Password:
What is workload identity in GKE?
GKE access control consists of two separate identity pieces - Cloud Identity (Cloud IAM) and Native Kubernetes IAM (Kube Identity) Each of these (Cloud IAM and Kube RBAC) - have…
Quick Recipe for hosting PCI sensitive data apps on Google Cloud
Hosting a PCI compliant app on GCP is straightforward. Create a separate project for all the PCI Data. The actual web tier should reside in a different project from the…
Data Analytics across Companies – Analytics Hub from GCP
Its a challenging problem to link and combine the analytics platforms from more than one company. Enter Analytics Hub from GCP Analytics Hub will provide the ability for organizations to…
Accessing Google APIs – clarifying Authentication and Authorization for Web and Mobile Apps
Mobile Apps can use either OAuth (described below) or Google Sign-in for Android or iOS. Web Apps and Desktop Apps should try and use OAuth as described in this post. Mobile Application Authorization…
Importing Organization from admin.google to cloud console
You have two routes to getting a google identity that can be used for GCP- ordinary Google Workspace accounts and Cloud Identity accounts. Google Workspace Accounts Sign in to your Google Admin…
stackdriver alerts – Alerting on resource non compliance in GCP
Stackdriver alerts Cloud Monitoring (aka Stackdriver) makes it possible to create custom metrics. This 'metric' doesn't just have to be something like CPU, RAM and other well known metrics. It…
Intrusion Prevention Features in Firewalls – General
1. traffic flow inspection to stop exploits using signature-based detection. 2. Block known bad URLs and monitor fully qualified domain names
Certificate Authority as a Service and VPC Service Controls GCP
Certificate Authority as a Service CAs as a service are part of GCP's offerings now. Certificate Authority as a Service, like all GCP networking services, are tied to a VPC…