Archives for Google Cloud
GCP security audit – some considerations
Security Audits are a top requirement for any public cloud migration - pre-migration and post migration effort. Anuj Varma offers an in-depth cloud security audit, covering all the pillars of…
Applications and Service Accounts
Service Accounts in GCP Service accounts are ubiquitous in GCP - there are built in SAs (for most major services) and those that you can create yourself (using gcloud, the…
Impersonate Service Account in GCP
Grant a user (an on premises user) ONLY IMPERSONATION privileges gcloud iam service-accounts add-iam-policy-binding \ --member user: \ --role It’s possible to impersonate a Service Account from within your Terraform…
Send an email from your App Engine Instance
Use your gSuite email to do this. Here is simple python code that you can use on your app engine instance # Function to send email def trigger_email(msg): # Change these to your email details email_user = email_password = "blahbhal" smtp_server = ''…
Projects in GCP – 3 tier applications on Google Cloud
Also visit for in-depth GCP posts. Also Read - A Reusable Hub Spoke Network Design on GCP and Service Projects - VPCs or not As a Google Cloud Architect, your…
GCP – Example of IAM access on Project Level Resources
Also read - Projects in GCP Example of IAM in a project (compute engine instances) Select your user from IAM — and assign the following two roles (At the very least, you…
The GCP Project Boundary, Trust Boundary and the Principle of Least Privilege
Projects are holders of resources, akin to Accounts in AWS. While AWS accounts are MUCH more than simple resource containers, this is still the best way to visualize the correspondence…
Add a VPN Tunnel to a VPN Connection on GCP
Overview A VPN Connection is an abstraction (in Google Cloud Platform terms) - while a VPN Tunnel is the implementation. A connection can have one or more tunnels. There are…
Gov Cloud Regions in GCP?
While there isn't a separate GOV region (like in AWS or azure), GCP does offer the ability to run Fedramp compliant workloads in several regions (5 for HIGH fedramp classified…
Sandbox environments in google cloud
Tools to help with Sandbox Environments A manual process to build sandboxes is always an option. There are a couple of popular one is Buddy (some highlights below). This post will…