Best Practices around GCP Service Accounts
There is no excerpt because this is a protected post.
Archive
Author: anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist.
Initial Consultation
S3 data protection best practices
Notes from the Field Apart from standard AWS recommendations around s3 data protection, these are some tips from hands on engagements around S3 data backups (from data centers)…
Protecting Data in S3 Buckets
Broadly, you can protect these via IAM Policies and via Encryption Default Encryption The objects are encrypted using server-side encryption with either Amazon S3-managed keys (SSE-S3) or customer…
GCP Foundation via Terraform
Google has put out a few examples of cloud foundational components – integrated into a single terraform solution that is called from a bootstrap module. Need an…
Backup and Recovery AWS, Azure or GCP
Backup and recovery conversations often get derailed. While everyone understands RTO and RPO, it is hard to apply these metrics in a granular fashion. To that end, it…
ADFS and SSO Federated Users in AWS
(Also see – Functional Roles and AWS managed policies) Permissions Set and SSO Groups SSO Groups are created within AWS IAM (they come directly from the IdP). The…
AWS Managed Policies for work functions
Keep in mind that anything with ‘Admin’ in it allows creation of other users as well as attaching / detaching policies to users. Anything with ‘user’ in it,…
Custom IAM Roles in GCP
Also read – Roles, IAM in GCP and AWS Managed Policies for On Premises Work Functions and Base Roles for Developers in GCP Can Anyone Create Custom Roles?…
AWS Custom Groups and (Managed) Policies Needed
This is meant to be a quick recap of some recommended custom AWS Groups and the included Managed Policies. A Network Admin Group AWS managed policy name: NetworkAdministrator A…