BigQuery Optimizations
Secure Google Cloud Billing Analytics with BigQuery and Looker Studio Cloud billing data deserves the same care as other sensitive enterprise data. It can reveal infrastructure usage, negotiated…
Archive
Category: Uncategorized
Firebase Cloud Messaging
Cross Platform Messaging Service – Free of Cost. For sending push notifications to devices
Cloud Custodian – for Multi Cloud Open Source Asset Governance
Cloud Custodian is an open source suite of software for asset governance (cloud assets that is). Cloud Asset Governance Some of the more useful features include actions via…
GKE Security and Cloud Armor
What about GKE Backends? Google Cloud Armor with Google Kubernetes Engine (GKE) Ingress Use Case – Your application is running on GKE Cluster and it is exposed via…
OAuth Tokens from GCP Service Accounts?
Delegated API Access You can use your Service accounts to call public Google APIs. This is called Delegated API Access. How does it work? Essentially, your service account…
Service accounts- at Org, Folder Levels – and at Resource Levels
High level service accounts (Folders, projects and Org level) should be few SAs. No keys allowed. The AD groups (containing human users) should be defined for these with…
Firewall rules and GCP Cloud Storage
Firewall rules only apply at a VPC Network Level. They have nothing to do with preventing traffic to and from cloud storage. To do that, you have to…
DDos Prevention on GCP Hosted Applications
Use an SSL based Load Balancer This restricts you to either the HTTPs Global Load Balancer or SSL Proxy Use a Cloud CDN Cloud CDNs send requests all…
Private Google access
Private Google access allows your instances to reach Google APIs and services using an internal IP address rather than a public IP address. … You can enable Private Google access on a subnet…
Customer supplied keys and cloud storage
There is often a data compliance requirement – to use your own corporate provided encryption keys. If you want to user your own supplied encryption keys, you HAVE…