Granting access to resources in GCP at the Organization Level
Organizations – Do you always get an Org? No. As part of your account setup, you can set up an account with just a simple gmail / google…
Archive
Category: GCP IAM
Identity and Access Management ( IAM ) on Google Cloud Platform
Network Admin versus Security Admin in GCP
These can be defined at any level , but the Organization level is the most common. In addition to these network admins, there are also shared VPC admins…
Google Workspaces vs GSuite
Remember that you get a month of free workspace (including a valid email) before you commit. Easy to try adding new org units and enabling credentials apis GSuite…
Single GCP Project or Multiple Small GCP Projects?
There is no excerpt because this is a protected post.
Limiting GCP’s blast radius using Projects
When discussing the Project Boundary in GCP, Think Application hosting. Think of a project as the container of all App Resources. A single App – A Single Project. …
Service Project Admin in GCP
Service Project Admins have control over resources defined in the service projects. They typically have the Instance Admin role in the corresponding service projects. They may have additional…
Resource Level Policies versus IAM policies in GCP
In AWS, to control access to a specific resource, there are resource based policies. In GCP, there isn’t a direct analog of resource based policies, but existing policy…
GCP Custom Role for Developers
Also read – Security Admin Role in GCP Developer Roles can be subdivided into two broad categories – Team Leads and Developers (Team Leads are Supersets of Developers)…
Security Readers and Security Admins in GCP
Also read – Built in Security related Managed Policies in AWS and GCP GCP has over a few thousand built in (predefined) roles for a variety of activities.…