GCP project id versus project name versus project number
Project ID and Project Number Both the project ID and the project number are unique identifiers for a project – globally unique. However, the project-id is meant to…
Archive
Category: Google Cloud Platform
Certified GCP Architect, offering Advanced GCP Infrastructure, Google Cloud Identity and Access Management, Security Guardrails, Data Compliance and DevOps for GCP
Granting shared vpc admin access
In order to grant a user the ‘Shared VPC Admin’ (compute shared vpc admin) role, you will need to be an organizational owner or org IAM admin yourself.…
Application default credentials – humans versus service accounts
What is your ADC? (More appropriately, WHERE is your ADC)? Where you store your JSON file (containing the service account credentials) is your Default Location – aka ADC…
How to test IAM permissions in GCP
How to Test Iam Permissions in GCP – for the current user From cloud shell curl -X POST \ -H “Authorization: Bearer “$(gcloud auth application-default print-access-token) \ -H…
gcloud iam roles describe
How do you quickly determine the permissions inside a given role – whether a predefined role or a custom role? gcloud iam roles describe rolename –projectname = myproject
Compute Engine Restrict Access – restrict service accounts in GCP
Two relevant roles to assign to IAM user – Compute Instance Admin and Service Account User. roles/compute.instanceAdmin.v1, roles/iam.serviceAccountUser Note the prefixes on these two. The instanceAdmin is related to…
Folders and Billing in GCP
Folders in GCP are not billable entities – Projects and Org level billing is all that can be enforced.
Container Resizing in GKE
To add additional nodes to a GKE cluster, one does not have to go down to the managed instance group level. The addition of a new node can…
External backends for Cloud CDN
Cloud CDN can work with both cloud storage and optionally external storage services (e.g. on premises, or other public clouds). External Backends are called custom origins. The endpoints…
Custom Service Account versus Default Service Accounts
Custom Service Account versus Default Service Accounts in GCP Both are programmatic service accounts. In both, you select the list of APIs that the account can access. However,…