East to West Traffic Filtering using Palo Alto on GCP
Set up a 1 on 1 appointment with Anuj to assist with your cloud journey. First, you will need to decide whether egress, ingress or BOTH types of…
Insights
Blog
NACLs on AWS and Equivalent Firewall Rules on GCP
Also read AWS NACLs versus Security Groups and Service Accounts as an intelligent firewall option on GCP. The default NACLs on an AWS VPC allow ALL traffic (both…
Workload Identity versus Service Accounts in GCP
Also read – Using a service account across multiple projects Per Application Service Account As an application developer, you could generate individual IAM service accounts for each application,…
Using a service account across multiple projects
There is no excerpt because this is a protected post.
Blocking off Public Access to Azure Storage Blobs
See also – A Reusable Hub spoke design on azure. A Reusable Hub Spoke design on GCP. Step 1 – Set up a private endpoint for azure storage…
Shared VPC Best Practices, SAP Hana Example
Also see – granting the shared vpc admin role in gcp Overview – why a shared vpc isn’t meant for shared prod and non-prod environments I wrote earlier…
Premium Tier Security Command Center GCP
Security Health Analytics should be your first stop for auditing the security posture of your GCP environment. In addition to several built in detectors, there are a handful…
2 minute security audit solution for AWS
There is no excerpt because this is a protected post.
GKE Access Control and Google’s Container Registry
Also read Roles and Permissions in GCP Access control for GKE Clusters Cloud IAM works at a project level to grant access to the GKE Clusters within a…
Fun and Relatively Undiscovered Sci Fi Reads
2005 – Year’s Best Sci-Fi 10 – Edited by David G. Hartwell and Kathryn Cramer The Turing Option – Mandala – David F. Bischoff Cat Karina — Michael…