Author Archives: anuj - Page 8
Granting shared vpc admin access
In order to grant a user the 'Shared VPC Admin' (compute shared vpc admin) role, you will need to be an organizational owner or org IAM admin yourself.
GCP IAM troubleshooting and IAM best practices
IAM Access Analyzer Only works for allows, not denys GCP Recommender - also includes IAM recs Export to bigquery some recommendations are around IAM. Unused IAM roles unused IAM roles…
Cost Optimization from billing export, Recommendations export – Sample BigQuery Queries
This content is password protected. To view it please enter your password below: Password:
Application default credentials – humans versus service accounts
What is your ADC? (More appropriately, WHERE is your ADC)? Where you store your JSON file (containing the service account credentials) is your Default Location - aka ADC by Google.…
etags and JSON policy changes
This content is password protected. To view it please enter your password below: Password:
How to test IAM permissions in GCP
How to Test Iam Permissions in GCP - for the current user From cloud shell curl -X POST \ -H "Authorization: Bearer "$(gcloud auth application-default print-access-token) \ -H "Content-Type: application/json;…
Arrays in BigQuery
Arrays in BigQuery Create an Array create table as WITH a as ( select ('first','second', 'third') as sequence_num ) select from a Create a dataset CREATE SCHEMA OPTIONS ( default_kms_key_name = 'KMS_KEY_NAME', default_partition_expiration_days = PARTITION_EXPIRATION, default_table_expiration_days = TABLE_EXPIRATION, description = 'test_billing_queries', labels = , location = 'us-central1', max_time_travel_hours = HOURS, storage_billing_model = STORAGE_BILLING_MODEL);…
Google Cloud Identity Users versus workspace identity users
Do I need a workspace account to use Google's Cloud Identity? It is not required to be a customer of Google Workspace (formerly known as G Suite) to be able to use…
State of Cloud Security Report
State of Cloud Security Report
gcloud iam roles describe
How do you quickly determine the permissions inside a given role - whether a predefined role or a custom role? gcloud iam roles describe rolename --projectname = myproject