Dedicated versus Partner Interconnect Options on GCP
Also read – 3rd party VPNs with Cloud VPN Overview Depending on your encryption needs, colo agreements and dedicated versus Shared requirement, GCP Interconnect offers a few options…
Archive
Author: anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist.
Initial Consultation
Three useful Admin roles in GCP IAM
Due to the hierarchical nature of resources in GCP (projects are at a lower level – they are always LEAVES , never branches), there are many types of…
Azure Firewall versus NSGs
Also read A Reusable Hub Spoke Network Design on Azure NSGs at instance level and at Subnet Level NSG rules can become difficult to manage in larger VNETs…
gcloud behind a corporate proxy
If you are using gcloud from behind a corporate firewall/proxy, you may encounter an SSL validation error. To disable SSL validation for google-cloud-sdk $ gcloud config set auth/disable_ssl_validation…
Incident Response in AWS
Also read Incident Response in GCP What constitutes an incident in AWS? A compromised account is an incident – as is a compromised VM. Each of these merits…
Azure Firewall versus NSGs
NSGs are layer 3 and layer 4 rules – that are also true ALLOW DENY rules, just like in any firewall appliance Azure Firewall – is Layer 3,…
Incident Response in GCP
Also read KMS specific alerting and response in GCP as an example to understand how alerts are set in GCP. What exactly constitutes an incident? In GCP, Cloud…
Agent Based Metrics
See also Custom Metrics and Log Metrics in GCP and Error Reporting in GCP What are Agent Based Metrics? These are metrics reported by the stackdriver agent installed…
Hub Spoke VPC versus Shared VPC in GCP
See also Shared VPCs – for Production and Non Production and A Reusable Hub Spoke Model in GCP. Why NOT use a Shared VPC as a HUB VPC…
At Rest Encryption GCP
Also read In Transit encryption GCP Cloud Storage? At rest encryption. Google Managed Keys (Native Google or CMEKs) or BYOK (CSEKs) Cloud SQL? Row Level Encryption What if…