Using Groups and Policies to Implement Granular Resource Access in GCP
Adding individual members to each role is painful. Cloud IAM Groups are used to apply policies (who accesses what) to an entire groups of users (see this post to…
Archive
Author: anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist.
Initial Consultation
Types of Identity in GCP
An identity in GCP can be any one of the following. The most commonly used identities for HUMAN users are the first two – Google Accounts (e.g. your…
GCP and FIPS, NIST Compliance
Everywhere that this article refers to FIPs, simply replace with NIST – and the same logic applies. GCP uses something called Boring SSL. Boring SSL was submitted to NIST…
3 Broad Categories of Logs in GCP
If you are coming from AWS or Azure, GCP’s logging can be a little confusing. Only because of these two radical features Everything is logged and viewed through…
Advanced Log Entries in GCP Cloud Log
Cloud IAM Log Queries Logs Viewer will filter based on RESOURCES. These can be either NAMED resources (existing resource e.g. a role) OR categories of resources (e.g. VM)…
Standard Network Tier vs. Premium Network Tier GCP
When would you need to upsize to the Premium Tier in GCP? Basically, if your backend is multi region (and you need services like a global, https load…
Build your own NAT Instance on GCP (or AWS)
One of the advantages of Software Defined Networking is the sheer flexibility – one doesn’t have to bring hardware routers, bridges, gateways…to construct inter network connections. Want a…
Cloud Armor and other WAF Options on GCP
Edge Security Use Case Sample Use Case – Allow only external traffic proxied through the global external Application Load Balancer (with an associated security policy) to reach the…
Cloud Functions – Getting Started with C# and GCP Cloud Functions
Hello World on your local machine On a .NET Core terminal, install the cloud functions template packages, using: dotnet new -i Google.Cloud.Functions.Templates::1.0.0-beta01 Next, create a directory for your…
BigIP Access Policy Manager vs. Azure B2C
Azure B2C is Identity as a Service – I wrote about Azure B2C in detail here. The idea of using a single cloud service for all authentication related…