Certified GCP Architect, offering Advanced GCP Infrastructure, Google Cloud Identity and Access Management, Security Guardrails, Data Compliance and DevOps for GCP
Extending your data center to GCP? Answer these questions first Do you need application level encryption? If application-level encryption is needed, then partner interconnect or direct interconnect should…
Also read, Base Roles required for development teams in GCP When it comes to service accounts, there are a few granular options available in GCP IAM. Service Account…
Also read – Shared VPCs Best Practices Shared VPCs – What gets shared out? When a host project is enabled, you have two options for sharing networks: You…
Also read up on More than one shared VPC – to handle Production and Non Production Environments Shared VPC in a Hybrid Setup The key idea behind Shared…
Private Google Access vs. Private Service Connect: A GCP Q&A Google Cloud provides several ways to access services privately, and the similar terminology can make the choices confusing.…
Cloud NAT and Google Private access Google Cloud automatically enables Private Google Access for a subnet IP address range when you configure a Cloud NAT gateway to apply…
Data Catalog (which uses Cloud Spanner under the hood), provides a centralized place where organizations can find, curate and describe their data assets. Data Catalog is a fully…
MEMBER_TYPE is the type of the member you are removing from the policy. For example, user. represents both Google accounts and Google groups. Two special member types are: allAuthenticatedUsers and allUsers MEMBER_NAME is the name…
(Also read this post on using groups and policies in GCP). A group, in GCP, is no different from any other identity. In practice, it looks like an…
Adding individual members to each role is painful. Cloud IAM Groups are used to apply policies (who accesses what) to an entire groups of users (see this post to…