Author Archives: anuj - Page 13
What is workload identity in GKE?
GKE access control consists of two separate identity pieces - Cloud Identity (Cloud IAM) and Native Kubernetes IAM (Kube Identity) Each of these (Cloud IAM and Kube RBAC) - have…
Quick Recipe for hosting PCI sensitive data apps on Google Cloud
Hosting a PCI compliant app on GCP is straightforward. Create a separate project for all the PCI Data. The actual web tier should reside in a different project from the…
Data Analytics across Companies – Analytics Hub from GCP
Its a challenging problem to link and combine the analytics platforms from more than one company. Enter Analytics Hub from GCP Analytics Hub will provide the ability for organizations to…
Accessing Google APIs – clarifying Authentication and Authorization for Web and Mobile Apps
Mobile Apps can use either OAuth (described below) or Google Sign-in for Android or iOS. Web Apps and Desktop Apps should try and use OAuth as described in this post. Mobile Application Authorization…
Importing Organization from admin.google to cloud console
You have two routes to getting a google identity that can be used for GCP- ordinary Google Workspace accounts and Cloud Identity accounts. Google Workspace Accounts Sign in to your Google Admin…
stackdriver alerts – Alerting on resource non compliance in GCP
Stackdriver alerts Cloud Monitoring (aka Stackdriver) makes it possible to create custom metrics. This 'metric' doesn't just have to be something like CPU, RAM and other well known metrics. It…
Intrusion Prevention Features in Firewalls – General
1. traffic flow inspection to stop exploits using signature-based detection. 2. Block known bad URLs and monitor fully qualified domain names
Certificate Authority as a Service and VPC Service Controls GCP
Certificate Authority as a Service CAs as a service are part of GCP's offerings now. Certificate Authority as a Service, like all GCP networking services, are tied to a VPC…
Prisma versus Native CSPM Alerting on GCP and AWS
Native Vulnerability and Misconfiguration Monitoring Tools run for a longer period of time - and capture account level events that may not be captured by Prisma and external CSPM tools.…
AWS SSO Groups and Root Users
Discourage use of local accounts and encourage SSO Groups. With SSO Groups, access can be granted either across multiple accounts or to individual accounts, using Permission Sets. SSO Groups and…