GCP project id versus project name versus project number
Project ID and Project Number Both the project ID and the project number are unique identifiers for a project – globally unique. However, the project-id is meant to…
Archive
Author: anuj
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist.
Initial Consultation
Granting shared vpc admin access
In order to grant a user the ‘Shared VPC Admin’ (compute shared vpc admin) role, you will need to be an organizational owner or org IAM admin yourself.…
GCP IAM troubleshooting and IAM best practices
IAM Access Analyzer Only works for allows, not denys GCP Recommender – also includes IAM recs Export to bigquery some recommendations are around IAM. Unused IAM roles unused…
Cost Optimization from billing export, Recommendations export – Sample BigQuery Queries
There is no excerpt because this is a protected post.
Application default credentials – humans versus service accounts
What is your ADC? (More appropriately, WHERE is your ADC)? Where you store your JSON file (containing the service account credentials) is your Default Location – aka ADC…
How to test IAM permissions in GCP
How to Test Iam Permissions in GCP – for the current user From cloud shell curl -X POST \ -H “Authorization: Bearer “$(gcloud auth application-default print-access-token) \ -H…
Arrays in BigQuery
Arrays in BigQuery Create an Array create table test_dataset_av.test_dataset_av as WITH a as ( select (‘first’,’second’, ‘third’) as sequence_num ) select a.sequence_num from a Create a dataset CREATE SCHEMA my-sandbox.test_dataset_av OPTIONS ( default_kms_key_name = ‘KMS_KEY_NAME’, default_partition_expiration_days = PARTITION_EXPIRATION, default_table_expiration_days = TABLE_EXPIRATION, description = ‘test_billing_queries’,…
Google Cloud Identity Users versus workspace identity users
Do I need a workspace account to use Google’s Cloud Identity? It is not required to be a customer of Google Workspace (formerly known as G Suite) to be able…