Single Pub Sub Topic for Multiple Projects
Single Pub Sub Topic for Multiple Projects? To create a sink that publishes to a Cloud Pub/Sub topic in a different project (you would need to grant Project…
Archive
Author: anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist.
Initial Consultation
Filter what Logs you want to Export in GCP
Configure filters for your cloud log sink On the console, open the export sink for which you wish to create a filter. Click on the export filter and…
GCP BigQuery and CIS Compliance (CIS Compliance benchmarks)
Certain CIS benchmarks are applicable to BigQuery. Leaving a dataset as PUBLIC (IAM policy allowing ANYONE to access a dataset) is the allUsers -> Represents anyone of the…
Packet Filtering Options versus Packet Monitoring Options
All public clouds will provide a packet monitoring option in the way of flow logs (VPC Flow Logs) However, packet monitoring is not the same as packet filtering.…
IAM + VPC Service Controls: A Fast GCP Defense-in-Depth Security Patter
IAM + VPC Service Controls: A Fast GCP Defense-in-Depth Security Pattern Also read: Identity-Aware Proxy in GCP Overview Google Cloud security should never depend on a single control.…
F5 Big IP on GCP – Part 2 – Some Advanced Scenarios
HA versus LB Configuration of F5 F5 can be set up on GCP using a High Availability ( HA ) Configuration as well as a Load Balancing Configuration…
Endpoint Protection in GCP
Cloud Armor is the first line of defense for GCP Cloud Endpoint Security
Logging in GCP – A Quick Overview
Also Read Types of GCP Logs Logging, Monitoring, Debugging, Tracing are all part of Stackdriver (aka Operations Suite) Project level Logging by default. Multi Level Project View or…