GCP and FIPS, NIST Compliance
Everywhere that this article refers to FIPs, simply replace with NIST – and the same logic applies. GCP uses something called Boring SSL. Boring SSL was submitted to NIST…
Insights
Blog
3 Broad Categories of Logs in GCP
If you are coming from AWS or Azure, GCP’s logging can be a little confusing. Only because of these two radical features Everything is logged and viewed through…
Advanced Log Entries in GCP Cloud Log
Cloud IAM Log Queries Logs Viewer will filter based on RESOURCES. These can be either NAMED resources (existing resource e.g. a role) OR categories of resources (e.g. VM)…
Standard Network Tier vs. Premium Network Tier GCP
When would you need to upsize to the Premium Tier in GCP? Basically, if your backend is multi region (and you need services like a global, https load…
Build your own NAT Instance on GCP (or AWS)
One of the advantages of Software Defined Networking is the sheer flexibility – one doesn’t have to bring hardware routers, bridges, gateways…to construct inter network connections. Want a…
Cloud Armor and other WAF Options on GCP
Edge Security Use Case Sample Use Case – Allow only external traffic proxied through the global external Application Load Balancer (with an associated security policy) to reach the…
Cloud Functions – Getting Started with C# and GCP Cloud Functions
Hello World on your local machine On a .NET Core terminal, install the cloud functions template packages, using: dotnet new -i Google.Cloud.Functions.Templates::1.0.0-beta01 Next, create a directory for your…
BigIP Access Policy Manager vs. Azure B2C
Azure B2C is Identity as a Service – I wrote about Azure B2C in detail here. The idea of using a single cloud service for all authentication related…
Admin vs. User roles in GCP
Read these posts first An overview of Roles in GCP and how to quickly view assigned roles Custom Roles in GCP Developer Roles in GCP Separate Security and…
Viewing output from startup scripts GCP Compute Engine
Read this post to understand the different ways to pass in a startup script to compute engine (using terraform) To view metadata attributed set on the instance (e.g.…