Dry Run Mode for VPC Service Controls
Setup dry run mode for VPC Service Controls Step 1 – Define your VPC Service Controls, and implement in dry run mode Step 2 – Monitor GCP logs…
Archive
Category: Google Cloud Security
Hashicorp Vault for GCP Service Accounts
Hashicorp Vault has two cool products that work alongside Vault. A Vault Agent that can talk to the Vault. And a secrets engine. Google Cloud Vault secrets engine…
Google Cloud Armor
Additional WebSite Protection using Google’s Cloud Armor Load Balancers in front of your web app are common in most IaaS or PaaS cloud deployments. However, load balancers by…
Why Service Accounts are a superior way to do Firewalls in GCP
Also read NACLS on AWS and GCP Equivalents The Problem Statement Configuring and managing IP-based firewall rules is a complex and manual process that can lead to unauthorized…
East to West Traffic Filtering using Palo Alto on GCP
Set up a 1 on 1 appointment with Anuj to assist with your cloud journey. First, you will need to decide whether egress, ingress or BOTH types of…
Shared VPC Best Practices, SAP Hana Example
Also see – granting the shared vpc admin role in gcp Overview – why a shared vpc isn’t meant for shared prod and non-prod environments I wrote earlier…
Premium Tier Security Command Center GCP
Security Health Analytics should be your first stop for auditing the security posture of your GCP environment. In addition to several built in detectors, there are a handful…
Useful Organization Policies in GCP
Also read VPC Service Controls Combined with security command center, org SCPs can provide just about any security guardrail around Projects, Folders, Organizations and Resources within Projects. Service…
Roles required for installing and managing SSL certificates on GCP
Also read – A 3 step recipe for creating and managing GCP Resources and a Security Admin Role in GCP What do I need to install SSL Certificates…