Category: Google Cloud Platform
Certified GCP Architect, offering Advanced GCP Infrastructure, Google Cloud Identity and Access Management, Security Guardrails, Data Compliance and DevOps for GCP
GCP Encrypted Traffic – How to Monitor
By default all traffic in GCP is encrypted. How does one capture traffic in logs (e.g. VPC Flow logs) if it is all encrypted? GCP stores (logs) a…
AWS Simple Notification Service on GCP
Also read, Custom Metrics on GCP Google Cloud Monitoring Basics Logging on GCP and Service Accounts in GCP Overview – AWS SNS like Functionality on GCP? GCP’s…
Unsafe Practices on GCP and recommendations
(Also read, AWS Security Audits ) Google Cloud is leading the way in terms of several PaaS offerings. GCP’s App Engine, GKE and BigQuery are among the leaders…
Google Cloud Monitoring using a Storage Bucket as an Example
Monitoring refers to Operational Metrics, as opposed to traditional logging, which refers to audit trails. In AWS, the logging (CloudTrail) is a separate service from the Monitoring (CloudWatch,…
Policies on AWS vs GCP
Also read Programmatic Identities on Google Cloud vs AWS Policies in AWS A policy definition by itself, contains very little in AWS. It contains what type of resources…
Programmatic Identities – AWS and GCP Compared
Where is the Calling Application? Before we get to the details about programmatic identities in GCP vs. AWS, it is good to first ask the question – where…
OAuth for Accessing GCP Resources
Also read – OAuth Overview – and OAuth Consent Screen. Also, remember that OAuth is for Authorization (to protected resources) and not so much for plain authentication. Authentication…
Multi VPC Architecture GCP
This post discusses a few real world scenarios for organizations moving to Google Cloud. The idea is to understand how multiple VPC architectures in GCP, especially those leveraging…
Shared VPC Networks in GCP – Basics
Sharing Subnets, Sharing Administration of Subnets and Instances within The key idea behind shared networking is to allow shared administration of resources – especially subnetworks and instances within…