Types of Identity in GCP
An identity in GCP can be any one of the following. The most commonly used identities for HUMAN users are the first two – Google Accounts (e.g. your…
Archive
Category: Google Cloud Platform
Certified GCP Architect, offering Advanced GCP Infrastructure, Google Cloud Identity and Access Management, Security Guardrails, Data Compliance and DevOps for GCP
3 Broad Categories of Logs in GCP
If you are coming from AWS or Azure, GCP’s logging can be a little confusing. Only because of these two radical features Everything is logged and viewed through…
Advanced Log Entries in GCP Cloud Log
Cloud IAM Log Queries Logs Viewer will filter based on RESOURCES. These can be either NAMED resources (existing resource e.g. a role) OR categories of resources (e.g. VM)…
Standard Network Tier vs. Premium Network Tier GCP
When would you need to upsize to the Premium Tier in GCP? Basically, if your backend is multi region (and you need services like a global, https load…
Build your own NAT Instance on GCP (or AWS)
One of the advantages of Software Defined Networking is the sheer flexibility – one doesn’t have to bring hardware routers, bridges, gateways…to construct inter network connections. Want a…
Cloud Armor and other WAF Options on GCP
Edge Security Use Case Sample Use Case – Allow only external traffic proxied through the global external Application Load Balancer (with an associated security policy) to reach the…
BigIP Access Policy Manager vs. Azure B2C
Azure B2C is Identity as a Service – I wrote about Azure B2C in detail here. The idea of using a single cloud service for all authentication related…
Viewing output from startup scripts GCP Compute Engine
Read this post to understand the different ways to pass in a startup script to compute engine (using terraform) To view metadata attributed set on the instance (e.g.…
F5 BigIP configuration Shell Script
It took me forever to get this figured out…hope it saves someone time. Some Tips : The default OS is tmos on an F5 VM. The shell is…
Custom scripts on Compute Instance launch
Option 1 – use the metadata_startup_script file attribute Though simple, the downside of this technique is that the instance is deleted and recreated whenever the script is changed…