GKE Access Control and Google’s Container Registry
Also read Roles and Permissions in GCP Access control for GKE Clusters Cloud IAM works at a project level to grant access to the GKE Clusters within a…
Archive
Author: anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist.
Initial Consultation
Fun and Relatively Undiscovered Sci Fi Reads
2005 – Year’s Best Sci-Fi 10 – Edited by David G. Hartwell and Kathryn Cramer The Turing Option – Mandala – David F. Bischoff Cat Karina — Michael…
Understanding the GCP Organization Resource
What is it that is Hierarchal – IAM or resources? People talk about hierarchical IAM in GCP. In reality, it is the resource hierarchy that is hierarchical. IAM…
Transit Gateway equivalent in GCP?
Is there a direct parallel to aws’ transit vpc in gcp? Network Connectivity Center – Recently, Google launched something called the Network Connectivity Center. Consisting of a central…
Azure Private Link and Private Endpoints
In GCP. VPC Endpoints and Private Google Access are closely related as described here. In Azure as well, Private Link and Private Endpoints are part of the same…
Private VM in GCP
Also read – Private Subnets in GCP and Azure Private Links versus Private Endpoints Overview The default setting for a VM instance is to have an ephemeral external IP…
A Reusable Hub Spoke Network Design on Azure
Hub-and-Spoke Cloud Architecture: 4 Security Principles Also See Routes in Azure (A poor man’s DMZ) and Firewalls (NSGs) in Azure and Azure Security Baseline Also see – Using…
Azure Hub Spoke VNET Spin Up – Using Azure Building Blocks
Overview If you have worked with Terraform Sentinel IaC policies, Azure Building Blocks are similar. While not as powerful as Sentinel policies, these building blocks can ensure several…
Top Governance Tasks for a New Azure Subscription
Also see – Subscription approaches in Azure Network Design Comes First Apart from a hub spoke network design to protect your resources at a network level (with associated…
Routes in Azure – A poor man’s DMZ
Apart from firewall rules, routes are the key networking component that need to be configured for your subnets/VNET. To build a poor man’s DMZ, one could simply have…