Archives for Google Cloud - Page 3
Roles and Policies in Google Cloud, and comparisons to AWS Roles and Policies
2 main differences beetween aws and gcp role / policy A GCP role gives a SINGLE permission to an IAM user. The permission is on a GCP resource. A GCP…
Google Cloud IAM and Identity
In GCP, the IAM menu is not the same as the Identity menu (Identity and Org menu item). IAM is around who accesses what. Roles are a key part of…
Security Audits of AWS Accounts – Roles, Policies and equivalents on GCP and Azure
What should be audited? And why FullAdmin is a terrible idea. (Also read, KMS based data encryption on AWS and Google Cloud) CloudTrail logs, CloudWatch log groups, GuardDuty logs, Inspector logs,…
Cloud KMS and AWS KMS – Encrypting data using native cloud services on Google cloud and AWS
A note on terminology - Cloud KMS refers to Google's KMS offering. It will never be used for AWS. AWS KMS is known as AWS KMS. CMK (Customer managed key)…
GCP backups – Some ways to transfer on premises data to Google Cloud
Three common ways to get data up onto a storage bucket in Google Cloud include: Using the Console (Storage Browser) Using gsUtil Using storage transfer service (needs agent installed locally)…
Routing and NATing on Google Cloud – allowing internet access from a private subnet on GCP
Step 1 - Create an instance in a public subnet (to be later used as a NAT Instance) gcloud compute instances create nat-gateway --network my-network --can-ip-forward \ --zone us-central1-a \…
Adding a new user to an existing Project on GCP
Basically, you cannot just add to an existing project in GCP. You need either a google account (gmail) or a GSuite account to start adding members to a project. The…
Big Data Services on GCP
BigQuery - Scalable, managed enterprise data warehouse for analytics. Cloud Dataflow - Managed service based on Apache Beam for stream and batch data processing. Cloud Dataproc - Big data platform for running Apache Hadoop and Apache Spark jobs. Cloud Composer - Managed workflow…
AWS to GCP Migrate
Pre Requisites on AWS - Windows VMs Velostrata uses AWS IAM groups and instance roles to define and enable these permissions. At minimum, we recommend the following setup: An IAM…
3 Types of Credentials
API Key – for websites that need to consume Google APIs ( PageInsights) Service Account Key – Server to Server, App Level Authentication using robot (automated )accounts