Author Archives: anuj - Page 13
Quick Recipe for hosting PCI sensitive data apps on Google Cloud
Hosting a PCI compliant app on GCP is straightforward. Create a separate project for all the PCI Data. The actual web tier should reside in a different project from the…
Data Analytics across Companies – Analytics Hub from GCP
Its a challenging problem to link and combine the analytics platforms from more than one company. Enter Analytics Hub from GCP Analytics Hub will provide the ability for organizations to…
Accessing Google APIs – clarifying Authentication and Authorization for Web and Mobile Apps
Mobile Apps can use either OAuth (described below) or Google Sign-in for Android or iOS. Web Apps and Desktop Apps should try and use OAuth as described in this post. Mobile Application Authorization…
Importing Organization from admin.google to cloud console
You have two routes to getting a google identity that can be used for GCP- ordinary Google Workspace accounts and Cloud Identity accounts. Google Workspace Accounts Sign in to your Google Admin…
stackdriver alerts – Alerting on resource non compliance in GCP
Stackdriver alerts Cloud Monitoring (aka Stackdriver) makes it possible to create custom metrics. This 'metric' doesn't just have to be something like CPU, RAM and other well known metrics. It…
Intrusion Prevention Features in Firewalls – General
1. traffic flow inspection to stop exploits using signature-based detection. 2. Block known bad URLs and monitor fully qualified domain names
Certificate Authority as a Service and VPC Service Controls GCP
Certificate Authority as a Service CAs as a service are part of GCP's offerings now. Certificate Authority as a Service, like all GCP networking services, are tied to a VPC…
Prisma versus Native CSPM Alerting on GCP and AWS
Native Vulnerability and Misconfiguration Monitoring Tools run for a longer period of time - and capture account level events that may not be captured by Prisma and external CSPM tools.…
AWS SSO Groups and Root Users
Discourage use of local accounts and encourage SSO Groups. With SSO Groups, access can be granted either across multiple accounts or to individual accounts, using Permission Sets. SSO Groups and…
No Ingress EC2 Instances, Public IPs on EC2s
AWS allows for a no-ingress EC2 instance, that can only be accessed via Systems Manager. This is the recommended best practice. Also read - Identity Aware Proxy on GCP for…