Quick Recipe for hosting PCI sensitive data apps on Google Cloud
Hosting a PCI compliant app on GCP is straightforward. Create a separate project for all the PCI Data. The actual web tier should reside in a different project…
Insights
Blog
Data Analytics across Companies – Analytics Hub from GCP
Its a challenging problem to link and combine the analytics platforms from more than one company. Enter Analytics Hub from GCP Analytics Hub will provide the ability for…
Accessing Google APIs – clarifying Authentication and Authorization for Web and Mobile Apps
Mobile Apps can use either OAuth 2.0 (described below) or Google Sign-in for Android or iOS. Web Apps and Desktop Apps should try and use OAuth 2.0 as described in this…
Importing Organization from admin.google to cloud console
You have two routes to getting a google identity that can be used for GCP- ordinary Google Workspace accounts and Cloud Identity accounts. Google Workspace Accounts Sign in to…
stackdriver alerts – Alerting on resource non compliance in GCP
Stackdriver alerts Cloud Monitoring (aka Stackdriver) makes it possible to create custom metrics. This ‘metric’ doesn’t just have to be something like CPU, RAM and other well known…
Intrusion Prevention Features in Firewalls – General
1. traffic flow inspection to stop exploits using signature-based detection. 2. Block known bad URLs and monitor fully qualified domain names
Certificate Authority as a Service and VPC Service Controls GCP
Google Cloud Private CA and VPC Service Controls Certificate Authority Service and VPC Service Controls in Google Cloud Overview Google Cloud Certificate Authority Service provides a managed private…
Prisma versus Native CSPM Alerting on GCP and AWS
Native Vulnerability and Misconfiguration Monitoring Tools run for a longer period of time – and capture account level events that may not be captured by Prisma and external…
AWS SSO Groups and Root Users
Discourage use of local accounts and encourage SSO Groups. With SSO Groups, access can be granted either across multiple accounts or to individual accounts, using Permission Sets. SSO…
No Ingress EC2 Instances, Public IPs on EC2s
AWS allows for a no-ingress EC2 instance, that can only be accessed via Systems Manager. This is the recommended best practice. Also read – Identity Aware Proxy on…