Useful organization level roles in GCP
There is no excerpt because this is a protected post.
Archive
Category: GCP IAM
Identity and Access Management ( IAM ) on Google Cloud Platform
Compute Engine and App Engine – Identity Aware Proxy (IAP)
Also read – IAP equivalent on Azure? and Service Controls and IAM – a 2 minute Security Solution on GCP IAP is a combination of Identity (Access Management)…
Work Functions mapped to GCP Roles
GCP has over a few thousand built in (predefined) roles for a variety of activities. (Also Read AWS Work functions mapped to policies in AWS) Organizational Level Work…
gCloud projects, gCloud compute, gCloud IAM
These are some useful gCloud commands that I like to keep separate (gCloud compute, gCloud projects, gCloud IAM) – Also read Best Practices around GCP Service Accounts gCloud…
3 Step Recipe for Creating and Interacting with Resources on GCP
There is no excerpt because this is a protected post.
Protecting Service Account Keys in GCP
There is no excerpt because this is a protected post.
Three useful Admin roles in GCP IAM
Due to the hierarchical nature of resources in GCP (projects are at a lower level – they are always LEAVES , never branches), there are many types of…
Special Identities in GCP
There are two special identies in cloud IAM. These are used for a variety of services that have special needs around auth-N AllUsers and AllAuthenticatedUsers Cloud Storage (ACLs…
Best Practices around Service Accounts
Also read – Service Accounts in GCP and a 2 minute Security Solution for GCP Environments Service Accounts as an alternative to embedding app credentials Service accounts are…
Cloud IAP (Identity Aware Proxy)
Also Read Protecting Bastion Hosts on AWS and GCP Cloud IAP – Notes from the field Cloud IAP Overview Cloud IAP allows user identities to be verified over…