Author Archives: anuj - Page 40
GCP Applying Policies to Groups of Users
(Also read this post on using groups and policies in GCP). A group, in GCP, is no different from any other identity. In practice, it looks like an email address.…
Using Groups and Policies to Implement Granular Resource Access in GCP
Adding individual members to each role is painful. Cloud IAM Groups are used to apply policies (who accesses what) to an entire groups of users (see this post to understand what…
Types of Identity in GCP
An identity in GCP can be any one of the following. The most commonly used identities for HUMAN users are the first two - Google Accounts ( your gmail account)…
GCP and FIPS, NIST Compliance
Everywhere that this article refers to FIPs, simply replace with NIST - and the same logic applies. GCP uses something called Boring SSL. Boring SSL was submitted to NIST and checked…
3 Broad Categories of Logs in GCP
If you are coming from AWS or Azure, GCP's logging can be a little confusing. Only because of these two radical features Everything is logged and viewed through the same…
Advanced Log Entries in GCP Cloud Log
Cloud IAM Log Queries Logs Viewer will filter based on RESOURCES. These can be either NAMED resources (existing resource a role) OR categories of resources ( VM) A Role is…
Standard Network Tier vs. Premium Network Tier GCP
When would you need to upsize to the Premium Tier in GCP? Basically, if your backend is multi region (and you need services like a global, https load balancer), you…
Build your own NAT Instance on GCP (or AWS)
One of the advantages of Software Defined Networking is the sheer flexibility - one doesn't have to bring hardware routers, bridges, construct inter network connections. Want a NAT Gateway? That's…
Cloud Armor and other WAF Options on GCP
Edge Security Use Case Sample Use Case - Allow only external traffic proxied through the global external Application Load Balancer (with an associated security policy) to reach the backend instances.…
Cloud Functions – Getting Started with C# and GCP Cloud Functions
Hello World on your local machine On a .NET Core terminal, install the cloud functions template packages, using: dotnet new -i Next, create a directory for your project, and use dotnet…