Author: anuj
SCPs in AWS – A quick intro
SCP is just like any other policy in AWS with couple of important distinctions. The two relevant attributes are action and resource. For an SCP, the resource can…
GCP Encrypted Traffic – How to Monitor
By default all traffic in GCP is encrypted. How does one capture traffic in logs (e.g. VPC Flow logs) if it is all encrypted? GCP stores (logs) a…
AWS Simple Notification Service on GCP
Also read, Custom Metrics on GCP Google Cloud Monitoring Basics Logging on GCP and Service Accounts in GCP Overview – AWS SNS like Functionality on GCP? GCP’s…
Unsafe Practices on GCP and recommendations
(Also read, AWS Security Audits ) Google Cloud is leading the way in terms of several PaaS offerings. GCP’s App Engine, GKE and BigQuery are among the leaders…
Google Cloud Monitoring using a Storage Bucket as an Example
Monitoring refers to Operational Metrics, as opposed to traditional logging, which refers to audit trails. In AWS, the logging (CloudTrail) is a separate service from the Monitoring (CloudWatch,…
S3 Request Metrics, Cloudwatch Alarms
Overview It is useful to get notifications (dashboard alarms and email notifications) when S3 uploads fail (request metric). Or when your bucket exceeds a certain size (Storage metric).…
Policies on AWS vs GCP
Also read Programmatic Identities on Google Cloud vs AWS Policies in AWS A policy definition by itself, contains very little in AWS. It contains what type of resources…
Azure Security Architect – Security Guardrails
What are some azure specific guardrails that need to be in place for a safe landing? Before you migrate even a single workload, you may want to address…
GKE Topologies
Scenario 1 – For an upcoming Google Kubernetes Engine (GKE) cluster, the current cluster size is expected to host 10 nodes, with 20 Pods per node and 150…