GCP IAM troubleshooting and IAM best practices
IAM Access Analyzer Only works for allows, not denys GCP Recommender – also includes IAM recs Export to bigquery some recommendations are around IAM. Unused IAM roles unused…
Insights
Blog
Cost Optimization from billing export, Recommendations export – Sample BigQuery Queries
There is no excerpt because this is a protected post.
Application default credentials – humans versus service accounts
What is your ADC? (More appropriately, WHERE is your ADC)? Where you store your JSON file (containing the service account credentials) is your Default Location – aka ADC…
How to test IAM permissions in GCP
How to Test Iam Permissions in GCP – for the current user From cloud shell curl -X POST \ -H “Authorization: Bearer “$(gcloud auth application-default print-access-token) \ -H…
Arrays in BigQuery
Arrays in BigQuery Create an Array create table test_dataset_av.test_dataset_av as WITH a as ( select (‘first’,’second’, ‘third’) as sequence_num ) select a.sequence_num from a Create a dataset CREATE SCHEMA my-sandbox.test_dataset_av OPTIONS ( default_kms_key_name = ‘KMS_KEY_NAME’, default_partition_expiration_days = PARTITION_EXPIRATION, default_table_expiration_days = TABLE_EXPIRATION, description = ‘test_billing_queries’,…
Google Cloud Identity Users versus workspace identity users
Do I need a workspace account to use Google’s Cloud Identity? It is not required to be a customer of Google Workspace (formerly known as G Suite) to be able…
gcloud iam roles describe
How do you quickly determine the permissions inside a given role – whether a predefined role or a custom role? gcloud iam roles describe rolename –projectname = myproject
Private Service Connect versus Peered VPCs
Overview – What is Private Service Connect? How does it differ from Private Google Access? Private Google Access ( on GCP) The idea is exactly the same as…