Moving Projects and Billing Accounts under an Organization
It is common to end up with projects that are NOT under a specific org. Same for the billing for those projects. In order to move them under…
Archive
Category: GCP IAM
Identity and Access Management ( IAM ) on Google Cloud Platform
IAP – Notes from the field
IAP can be used to protect web resources (layer 7) as well as TCP resources (layer 4) Layer 4 Use Case VMs are being managed using SSH and…
Changing Client IPs? Use this solution in GCP
There is no excerpt because this is a protected post.
Adding Scopes for OAuth 2.0 Credentials
There is no excerpt because this is a protected post.
Hashicorp Vault for GCP Service Accounts
Hashicorp Vault has two cool products that work alongside Vault. A Vault Agent that can talk to the Vault. And a secrets engine. Google Cloud Vault secrets engine…
Google Workspace and Google Cloud admins
Organizational Ownership An organization is an entity that exists outside of the cloud context as well (for e.g. – when you set up a workspace account). The very…
Google Workspace Groups and Google cloud console groups
Google Cloud IAM does allow you to handle groups of users – and assign roles to entire groups. However, these groups are NOT created within the cloud console.…
get iam policy – your gcloud friend
Anytime someone asks you – Can you show me all the administrators for this GCP org? Can you show me who are the project owners for these projects?…
Understanding the GCP Organization Resource
What is it that is Hierarchal – IAM or resources? People talk about hierarchical IAM in GCP. In reality, it is the resource hierarchy that is hierarchical. IAM…