Synchronizing Users versus Federating Users in GCP
From your Corporate AD, you have two options to bring your users into GCP Federation = Use Cloud Identity to accomplish this Synchronization = Use GCP Cloud Directory…
Archive
Category: Google Cloud Platform
Certified GCP Architect, offering Advanced GCP Infrastructure, Google Cloud Identity and Access Management, Security Guardrails, Data Compliance and DevOps for GCP
Organizations in GCP versus Organizations in AWS
What are organizations in GCP used for? Organizations in GCP are used to group resources – not to federate identities (e.g. AWS Control Tower). You can connect VPCs…
Centralized Logging in GCP – Log Analytics Buckets
Logs – Platform Logs, Application Logs and Networking Logs Platform Logs – are three types of auditable activities: Data Access, Admin Activity, and System Event activity. And thus,…
VM Instance Level Metrics in GCP
Active Metric Categories Firewall Metrics – Remember that FW rules are applied at the instance level in GCP. So Ingress Bytes and Egress Bytes are part of these…
Windows Server VMs on GCP Compute Engine
Quick tips for creating and installing a windows server VM on GCP The creation of the instance is straightforward – pick the instance name, the boot disk, any…
Sandbox Environments on Google Cloud
also read – AWS isolated sandbox environments More importantly, how do you control user access to these sandboxes? And what if your sandbox needed applications (say your own…
Grouping multiple service accounts
What if I need to group multiple service accounts (for example – if I need to attach the same role to all the SAs)? You cannot create an…
GCP Service Accounts – Limiting Scope
Are there org level constraints around creating custom roles? No. Are there org level constraints around granting Cross Account access to service accounts? Yes. There is a constraint…
Sharing GCP resources with users without gSuite accounts
There is no excerpt because this is a protected post.
Creating a publicly accessible VM in GCP
Step 1 – Create a new VM – While Creating the VM Allow HTTP and HTTPs firewall rule (if you plan to host a web app on there)…