Logs in GCP World
These are quick notes about the types of logs and what they record on the GCP platform. Network Specific Logs VPC Flow Logs, Firewall Logs -> These should…
Insights
Blog
When multiple direct routes exist
Say we have an ec2 instance within a private subnet on AWS (or GCP). Let us also say that there are two potential ways for it to access…
get iam policy – your gcloud friend
Anytime someone asks you – Can you show me all the administrators for this GCP org? Can you show me who are the project owners for these projects?…
Site to Site VPN – Alert on Connection Dropped
To create an alarm for Site-to-Site VPN connection state Open the CloudWatch console at https://console.aws.amazon.com/cloudwatch/. In the navigation pane, choose Alarms, Create alarm. Choose Select metric. Choose VPN, then choose VPN Connection Metrics. Select…
Migrate existing Project into an existing GCP Org
Projects in Organizations versus Billing Accounts Moving a Billing account from one org to another is different from moving a project. You may even want to CHANGE the…
Admin.google groups and Organizational Google Workspace Domains
Use case – Only allow users from specific domains into GCP Organization Policy : Allow only allowed Domains into GCP As a GCP Admin, this is a policy…
Azure equivalents of GCP Resources
GCP Service Account –> Azure Managed Identity GCP Project –> Azure Resource group GCP VPC FW Rules –> Azure NSGs
Palo Alto CSPM (Prisma) on GCP, AWS, Azure – demo links
There is no excerpt because this is a protected post.
Cloudwatch Metrics, Log Group Metrics and Dashboards in AWS
When you start creating a new dashboard in Cloudwatch, you will be prompted to add a widget. The widget can contain pre-built metrics (e.g. CPU Utilization, VPN datain,…