Using a service account across multiple projects
There is no excerpt because this is a protected post.
Archive
Category: Uncategorized
2 minute security audit solution for AWS
There is no excerpt because this is a protected post.
Understanding the GCP Organization Resource
What is it that is Hierarchal – IAM or resources? People talk about hierarchical IAM in GCP. In reality, it is the resource hierarchy that is hierarchical. IAM…
Private VM in GCP
Also read – Private Subnets in GCP and Azure Private Links versus Private Endpoints Overview The default setting for a VM instance is to have an ephemeral external IP…
Top Governance Tasks for a New Azure Subscription
Also see – Subscription approaches in Azure Network Design Comes First Apart from a hub spoke network design to protect your resources at a network level (with associated…
IAM Bindings on Service Accounts
Also read Best Practices around GCP Service Accounts gcloud <resourceType> add-iam-policy-binding <resourceName> –member=<accountToGrantOnTheResource> –role=<roleToGrantOnTheResource> gCloud IAM gcloud iam service-accounts add-iam-policy-binding \ [email protected] \ –member=’serviceAccount:[email protected]’ \ –role=’roles/editor’ gCloud projects…
Cloud Storage – Providing Read Write Access to External (Partner) Users
There is no excerpt because this is a protected post.
Protecting Data in S3 Buckets
Broadly, you can protect these via IAM Policies and via Encryption Default Encryption The objects are encrypted using server-side encryption with either Amazon S3-managed keys (SSE-S3) or customer…
SCPs in AWS – A quick intro
SCP is just like any other policy in AWS with couple of important distinctions. The two relevant attributes are action and resource. For an SCP, the resource can…
OAuth Overview in GCP – OAuth Consent Screen and OAuth Client ID
also read OAuth basics Human users (of an app) vs. the App itself as a user It is important to distinguish human users (app user logins) versus the…