Native GCP Firewall and Firewall Rules
Firewalls in GCP vs AWS AWS SGs are only ALLOW rules. For DENY, you need to go to NACLs GCP full blown FW rules -allow and deny, just…
Insights
Blog
Egress Costs that come into play with a Transit VPC
Egress charges incur TWICE when traffic goes through a TRANSIT VPC (Regardless of AWS or GCP). This is true on both AWS and GCP. Adding additional filtering…
Patching versus Reloading Images
Today’s Public Cloud Hosting introduces a slight twist on the data center ‘patching’ paradigm. Instead of patching an OS, one typically reloads the base image (AMI in AWS,…
KMS Keys in a Single Project or Multiple Projects?
Also read KMS – Auditing Key Activity and KMS – Monitoring and Alerting Storing all KMS Keys in a single project has some advantages. One can tightly place…
KMS Auditing Key Activity
Which KMS Activities are not LOGGED by default? (Also read KMS Monitoring and Alerting ) IMonitoring administrative activities vs. data access activities: All administrative KMS activities are logged by…
GCP KMS Monitoring and Alerting
KMS Monitoring Example Use the gcloud logging metrics create command to create a counter metric that will monitor any occurrence of the scheduled destruction of a key version.…
GCP PubSub Streaming to BigQuery
Applications are divided into two types – publishers (e.g. Twitter) and Subscribers (e.g. browser) (Also read, Single Pub Sub Topic for Multiple Projects) A Subscriber has a Main…
Network Admin versus Security Admin in GCP
These can be defined at any level , but the Organization level is the most common. In addition to these network admins, there are also shared VPC admins…
Single Pub Sub Topic for Multiple Projects
Single Pub Sub Topic for Multiple Projects? To create a sink that publishes to a Cloud Pub/Sub topic in a different project (you would need to grant Project…
Filter what Logs you want to Export in GCP
Configure filters for your cloud log sink On the console, open the export sink for which you wish to create a filter. Click on the export filter and…