VPC Logs in GCP (or AWS) and IP Addresses
There is no excerpt because this is a protected post.

Certified GCP Architect, offering Advanced GCP Infrastructure, Google Cloud Identity and Access Management, Security Guardrails, Data Compliance and DevOps for GCP
There is no excerpt because this is a protected post.
What is Envelope Encryption? Cloud KMS generates a key called the KEK (key encrypting key). This key DOES NOT encrypt your payload data. It just encrypts the key…
Also read Logging in GCP Cloud Monitoring collects metrics, events, and metadata from Google Cloud and applications hosted on GCP. GCP provides several built in metrics What about…
Do you need MFA on your IAM User accounts? What about Service Accounts or IAM users used for CLI access only? It depends on what the user account…
Also read NACLS on AWS and GCP Equivalents The Problem Statement Configuring and managing IP-based firewall rules is a complex and manual process that can lead to unauthorized…
Why use a CMK on AWS ( a CMEK on GCP) at all, when the Cloud Provider managed keys will perform the same task? That’s a question a…
Set up a 1 on 1 appointment with Anuj to assist with your cloud journey. First, you will need to decide whether egress, ingress or BOTH types of…
Also see – granting the shared vpc admin role in gcp Overview – why a shared vpc isn’t meant for shared prod and non-prod environments I wrote earlier…
Security Health Analytics should be your first stop for auditing the security posture of your GCP environment. In addition to several built in detectors, there are a handful…
What is it that is Hierarchal – IAM or resources? People talk about hierarchical IAM in GCP. In reality, it is the resource hierarchy that is hierarchical. IAM…