Policy Troubleshooter on GCP
Ever tried to create a GCP resource and encounter issues such as missing permissions? Essentially, the ‘default application credentials’ that your code (or that your IAM user) is…

Certified GCP Architect, offering Advanced GCP Infrastructure, Google Cloud Identity and Access Management, Security Guardrails, Data Compliance and DevOps for GCP
Ever tried to create a GCP resource and encounter issues such as missing permissions? Essentially, the ‘default application credentials’ that your code (or that your IAM user) is…
Firewall rules are defined at the VPC level (so ignore all the default firewall rules as they only apply to the default VPC). For your custom VPC, to…
Some questions you will face when you decided to use Google’s Compute Engine for your VM Instances, include: How will admins access the Compute Instance ? (There are…
Custom Appliances are often made available through public marketplace images. To search for an instance from Compute Engine -> Images – you may not find the marketplace images…
Also read , Terraform and GCP Roles Introduction – Granting access to Resources in GCP In GCP, it is important to distinguish between ‘Container Resources’ and ‘Individual Resources’.…
There’s always a separation of concerns within an organization. The operational team is typically separate from the development team, as is the security team. How does one (in…
How do I see who logged in and when? (Also see, Monitoring in GCP ) Logs Viewer is one stop shop for viewing all log activity on GCP. …
Delete a Project without Deleting Resources This is possible, since a project is a virtual (billing) boundary around your resources. To Delete All Resources within a Project https://github.com/doitintl/safescrub
Before we get to custom roles, let us talk about why we need custom roles in GCP (Also read, Service accounts and bindings in GCP). The first use…