Category: Google Cloud Security
Packet Filtering Options versus Packet Monitoring Options
All public clouds will provide a packet monitoring option in the way of flow logs (VPC Flow Logs) However, packet monitoring is not the same as packet filtering.…
IAM + VPC Service Controls: A Fast GCP Defense-in-Depth Security Patter
IAM + VPC Service Controls: A Fast GCP Defense-in-Depth Security Pattern Also read: Identity-Aware Proxy in GCP Overview Google Cloud security should never depend on a single control.…
Endpoint Protection in GCP
Cloud Armor is the first line of defense for GCP Cloud Endpoint Security
Default Firewall Rules in GCP
Also read – Best practices for GCP Firewall Rules and Firewall Policies in GCP For a VM that lives in the default VPC, there are a few default…
GCP Encrypted Traffic – How to Monitor
By default all traffic in GCP is encrypted. How does one capture traffic in logs (e.g. VPC Flow logs) if it is all encrypted? GCP stores (logs) a…
Unsafe Practices on GCP and recommendations
(Also read, AWS Security Audits ) Google Cloud is leading the way in terms of several PaaS offerings. GCP’s App Engine, GKE and BigQuery are among the leaders…