Understanding the GCP Organization Resource
What is it that is Hierarchal – IAM or resources? People talk about hierarchical IAM in GCP. In reality, it is the resource hierarchy that is hierarchical. IAM…
Insights
Blog
Transit Gateway equivalent in GCP?
Is there a direct parallel to aws’ transit vpc in gcp? Network Connectivity Center – Recently, Google launched something called the Network Connectivity Center. Consisting of a central…
Azure Private Link and Private Endpoints
In GCP. VPC Endpoints and Private Google Access are closely related as described here. In Azure as well, Private Link and Private Endpoints are part of the same…
Private VM in GCP
Also read – Private Subnets in GCP and Azure Private Links versus Private Endpoints Overview The default setting for a VM instance is to have an ephemeral external IP…
A Reusable Hub Spoke Network Design on Azure
Hub-and-Spoke Cloud Architecture: 4 Security Principles Also See Routes in Azure (A poor man’s DMZ) and Firewalls (NSGs) in Azure and Azure Security Baseline Also see – Using…
Azure Hub Spoke VNET Spin Up – Using Azure Building Blocks
Overview If you have worked with Terraform Sentinel IaC policies, Azure Building Blocks are similar. While not as powerful as Sentinel policies, these building blocks can ensure several…
Top Governance Tasks for a New Azure Subscription
Also see – Subscription approaches in Azure Network Design Comes First Apart from a hub spoke network design to protect your resources at a network level (with associated…
Routes in Azure – A poor man’s DMZ
Apart from firewall rules, routes are the key networking component that need to be configured for your subnets/VNET. To build a poor man’s DMZ, one could simply have…
Azure AD Connect – Getting Corporate Identities in Azure AD
See also Top Governance Practices on Azure Subscriptions What is AAD Connect?Azure AD Connect is a service that syncs identities between your corporate AD and your cloud AD…
Azure Subscription Strategies
See also Top Governance Practices on Azure Subscriptions Subscription Layout Considerations Workload separation strategy As an organization adds new workloads to the cloud, different ownership of subscriptions or…