Author Archives: anuj - Page 38
GCP Encrypted Traffic – How to Monitor
By default all traffic in GCP is encrypted. How does one capture traffic in logs ( VPC Flow logs) if it is all encrypted? GCP stores (logs) a copy of…
AWS Simple Notification Service on GCP
Also read, Custom Metrics on GCP Google Cloud Monitoring Basics Logging on GCP and Service Accounts in GCP Overview - AWS SNS like Functionality on GCP? GCP's PubSub will…
Unsafe Practices on GCP and recommendations
(Also read, AWS Security Audits ) Google Cloud is leading the way in terms of several PaaS offerings. GCP's App Engine, GKE and BigQuery are among the leaders in the…
Google Cloud Monitoring using a Storage Bucket as an Example
Monitoring refers to Operational Metrics, as opposed to traditional logging, which refers to audit trails. In AWS, the logging (CloudTrail) is a separate service from the Monitoring (CloudWatch, Cloudwatch Events…
S3 Request Metrics, Cloudwatch Alarms
Overview It is useful to get notifications (dashboard alarms and email notifications) when S3 uploads fail (request metric). Or when your bucket exceeds a certain size (Storage metric). The S3…
Policies on AWS vs GCP
Also read Programmatic Identities on Google Cloud vs AWS Policies in AWS A policy definition by itself, contains very little in AWS. It contains what type of resources (NOT the…
Azure Security Architect – Security Guardrails
What are some azure specific guardrails that need to be in place for a safe landing? Before you migrate even a single workload, you may want to address some of…
GKE Topologies
Scenario 1 - For an upcoming Google Kubernetes Engine (GKE) cluster, the current cluster size is expected to host 10 nodes, with 20 Pods per node and 150 services. Because…
Programmatic Identities – AWS and GCP Compared
Where is the Calling Application? Before we get to the details about programmatic identities in GCP vs. AWS, it is good to first ask the question - where will my…
OAuth Overview in GCP – OAuth Consent Screen and OAuth Client ID
also read OAuth basics Human users (of an app) vs. the App itself as a user It is important to distinguish human users (app user logins) versus the app itself.…