Firebase Cloud Messaging
Cross Platform Messaging Service – Free of Cost. For sending push notifications to devices
Insights
Blog
GCP logs JSON Extract – Load into BigQuery
Use JSON Extract – JSON_EXTRACT protopayload_auditlog.metadataJsontableDataRead SELECT REGEXP_EXTRACT(protopayload_auditlog.resourceName, ‘^projects/[^/]+/datasets/([^/]+)/tables’) AS datasetRef, COUNTIF(JSON_EXTRACT(protopayload_auditlog.metadataJson, “$.tableDataRead”) IS NOT NULL) AS dataReadEvents, FROM myproject.cloudaudit_googleapis_com_data_access_2019* WHERE JSON_EXTRACT(protopayload_auditlog.metadataJson, “$.tableDataRead”) IS NOT NULL GROUP BY…
Cloud Custodian – for Multi Cloud Open Source Asset Governance
Cloud Custodian is an open source suite of software for asset governance (cloud assets that is). Cloud Asset Governance Some of the more useful features include actions via…
GKE Security and Cloud Armor
What about GKE Backends? Google Cloud Armor with Google Kubernetes Engine (GKE) Ingress Use Case – Your application is running on GKE Cluster and it is exposed via…
OAuth Tokens from GCP Service Accounts?
Delegated API Access You can use your Service accounts to call public Google APIs. This is called Delegated API Access. How does it work? Essentially, your service account…
HL7 Messages and DataFlow Streaming Healthcare API
Just a quick note – from the field. There’s two things to watch out for – Is the payload TEXT (JSON is also TEXT) or BINARY (preferred). The…
Restricting what your API Key can call in GCP (and otherwise)
Consuming GCP APIs from a client There’s TWO ways you can consume an API from a client a. API Keys -Least SEcure way – since the KEY is…
Sample GKE constraints for common use cases
Sample GKE constraints for common use cases The following sections provide the syntax of some custom constraints that you might find useful: Description Constraint syntax Do not disable…
Check when a GKE Cluster was created
Apply this filter to the logs (under operations from the cluster management screen). Default audit logs go back 180 days. resource.type=”gke_cluster” protoPayload.authorizationInfo.permission=”container.clusters.create” resource.labels.cluster_name=”your-cluster-name” Default audit logs go…
Editor Role in GCP – Beware of Service Account Privileges
While only an OWNER can create service accounts, an EDITOR too can manipulate existing service accounts. If a project contains service accounts , the Editor roles grant permission…