Archives for Google Cloud Platform - Page 16
3 Broad Categories of Logs in GCP
If you are coming from AWS or Azure, GCP's logging can be a little confusing. Only because of these two radical features Everything is logged and viewed through the same…
Advanced Log Entries in GCP Cloud Log
Cloud IAM Log Queries Logs Viewer will filter based on RESOURCES. These can be either NAMED resources (existing resource a role) OR categories of resources ( VM) A Role is…
Standard Network Tier vs. Premium Network Tier GCP
When would you need to upsize to the Premium Tier in GCP? Basically, if your backend is multi region (and you need services like a global, https load balancer), you…
Build your own NAT Instance on GCP (or AWS)
One of the advantages of Software Defined Networking is the sheer flexibility - one doesn't have to bring hardware routers, bridges, construct inter network connections. Want a NAT Gateway? That's…
Cloud Armor and other WAF Options on GCP
Edge Security Use Case Sample Use Case - Allow only external traffic proxied through the global external Application Load Balancer (with an associated security policy) to reach the backend instances.…
BigIP Access Policy Manager vs. Azure B2C
Azure B2C is Identity as a Service - I wrote about Azure B2C in detail here. The idea of using a single cloud service for all authentication related workflows, for…
Viewing output from startup scripts GCP Compute Engine
Read this post to understand the different ways to pass in a startup script to compute engine (using terraform) To view metadata attributed set on the instance ( foo=bar) View…
F5 BigIP configuration Shell Script
It took me forever to get this figured it saves someone time. Some Tips : The default OS is tmos on an F5 VM. The shell is different; to switch…
Custom scripts on Compute Instance launch
Option 1 - use the metadata_startup_script file attribute Though simple, the downside of this technique is that the instance is deleted and recreated whenever the script is changed (as opposed…
Policy Troubleshooter on GCP
Ever tried to create a GCP resource and encounter issues such as missing permissions? Essentially, the 'default application credentials' that your code (or that your IAM user) is using, is…