Disk Level Backups of Criticial Instances – GCP
Use Case – Critical VM Instance with data and software on root disk. Need to be able to recreate instances from this backup, to be used across other…
Archive
Category: Google Cloud Platform
Certified GCP Architect, offering Advanced GCP Infrastructure, Google Cloud Identity and Access Management, Security Guardrails, Data Compliance and DevOps for GCP
NoOps (No Operations) Spectrum on GCP
From least operations to the most required operations – this is a chart of the various compute services on GCP Cloud Functions (LEAST) –> App Engine Standard –>…
Active Directory on GCP
This post is about hosting your AD on GCP. It is not about syncing gSuite and AD users. Typically, in Cloud IAM, you would bring over your gSuite…
Service Accounts in GCP – Notes from Production Environments
Need Help with your GCP Project? Contact a certified professional GoogleCloudArchitect today. Why Google Service Accounts? Storing credentials in apps is cumbersome (and insecure). A Service account solves…
What is workload identity in GKE?
GKE access control consists of two separate identity pieces – Cloud Identity (Cloud IAM) and Native Kubernetes IAM (Kube Identity) Each of these (Cloud IAM and Kube RBAC)…
Importing Organization from admin.google to cloud console
You have two routes to getting a google identity that can be used for GCP- ordinary Google Workspace accounts and Cloud Identity accounts. Google Workspace Accounts Sign in to…
stackdriver alerts – Alerting on resource non compliance in GCP
Stackdriver alerts Cloud Monitoring (aka Stackdriver) makes it possible to create custom metrics. This ‘metric’ doesn’t just have to be something like CPU, RAM and other well known…
Prisma versus Native CSPM Alerting on GCP and AWS
Native Vulnerability and Misconfiguration Monitoring Tools run for a longer period of time – and capture account level events that may not be captured by Prisma and external…
Moving Projects and Billing Accounts under an Organization
It is common to end up with projects that are NOT under a specific org. Same for the billing for those projects. In order to move them under…
IAP – Notes from the field
IAP can be used to protect web resources (layer 7) as well as TCP resources (layer 4) Layer 4 Use Case VMs are being managed using SSH and…