Firewall rules based on Network tags – GCP
Overview Network tags as logical labels that you can apply to VMs. The tags are defined independently, but referenced during the creation of a firewall rule. Use Case…
Insights
Blog
Default Service Accounts versus Custom Service Accounts – GCP
What are default service accounts? Default Service Accounts are used by GCP – and are not modifiable. In fact, you would not see them listed in the IAM–>Service…
Private IP Data Transfer vs. Public IP
Cloud Interconnect (and VPN) – used to connect Private IPs Direct Peering – Exists outside of Google Cloud – uses Public IPs to connect. Use case Transfer LARGE…
Disk Level Backups of Criticial Instances – GCP
Use Case – Critical VM Instance with data and software on root disk. Need to be able to recreate instances from this backup, to be used across other…
NoOps (No Operations) Spectrum on GCP
From least operations to the most required operations – this is a chart of the various compute services on GCP Cloud Functions (LEAST) –> App Engine Standard –>…
Using CMEKs in GCP
If you use a CMEK, the CMEK is used to encrypt the Object Data, Object’s checksum and MD5 hash, but not the object name. The object name is…
Active Directory on GCP
This post is about hosting your AD on GCP. It is not about syncing gSuite and AD users. Typically, in Cloud IAM, you would bring over your gSuite…
Service Accounts in GCP – Notes from Production Environments
Need Help with your GCP Project? Contact a certified professional GoogleCloudArchitect today. Why Google Service Accounts? Storing credentials in apps is cumbersome (and insecure). A Service account solves…
What is workload identity in GKE?
GKE access control consists of two separate identity pieces – Cloud Identity (Cloud IAM) and Native Kubernetes IAM (Kube Identity) Each of these (Cloud IAM and Kube RBAC)…