Google Cloud Armor
Additional WebSite Protection using Google’s Cloud Armor Load Balancers in front of your web app are common in most IaaS or PaaS cloud deployments. However, load balancers by…
Archive
Author: anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist.
Initial Consultation
Google Workspace Groups and Google cloud console groups
Google Cloud IAM does allow you to handle groups of users – and assign roles to entire groups. However, these groups are NOT created within the cloud console.…
Logs in GCP World
These are quick notes about the types of logs and what they record on the GCP platform. Network Specific Logs VPC Flow Logs, Firewall Logs -> These should…
When multiple direct routes exist
Say we have an ec2 instance within a private subnet on AWS (or GCP). Let us also say that there are two potential ways for it to access…
get iam policy – your gcloud friend
Anytime someone asks you – Can you show me all the administrators for this GCP org? Can you show me who are the project owners for these projects?…
Site to Site VPN – Alert on Connection Dropped
To create an alarm for Site-to-Site VPN connection state Open the CloudWatch console at https://console.aws.amazon.com/cloudwatch/. In the navigation pane, choose Alarms, Create alarm. Choose Select metric. Choose VPN, then choose VPN Connection Metrics. Select…
Migrate existing Project into an existing GCP Org
Projects in Organizations versus Billing Accounts Moving a Billing account from one org to another is different from moving a project. You may even want to CHANGE the…
Admin.google groups and Organizational Google Workspace Domains
Use case – Only allow users from specific domains into GCP Organization Policy : Allow only allowed Domains into GCP As a GCP Admin, this is a policy…
Azure equivalents of GCP Resources
GCP Service Account –> Azure Managed Identity GCP Project –> Azure Resource group GCP VPC FW Rules –> Azure NSGs