Book Image

Building Google Cloud Platform Solutions

By : Ted Hunter, Steven Porter, Legorie Rajan PS
Book Image

Building Google Cloud Platform Solutions

By: Ted Hunter, Steven Porter, Legorie Rajan PS

Overview of this book

GCP is a cloud computing platform with a wide range of products and services that enable you to build and deploy cloud-hosted applications. This Learning Path will guide you in using GCP and designing, deploying, and managing applications on Google Cloud. You will get started by learning how to use App Engine to access Google's scalable hosting and build software that runs on this framework. With the help of Google Compute Engine, you’ll be able to host your workload on virtual machine instances. The later chapters will help you to explore ways to implement authentication and security, Cloud APIs, and command-line and deployment management. As you hone your skills, you’ll understand how to integrate your new applications with various data solutions on GCP, including Cloud SQL, Bigtable, and Cloud Storage. Following this, the book will teach you how to streamline your workflow with tools, including Source Repositories, Container Builder, and Stackdriver. You'll also understand how to deploy and debug services with IntelliJ, implement continuous delivery pipelines, and configure robust monitoring and alerts for your production systems. By the end of this Learning Path, you'll be well versed with GCP’s development tools and be able to develop, deploy, and manage highly scalable and reliable applications. This Learning Path includes content from the following Packt products: • Google Cloud Platform for Developers Ted Hunter and Steven Porter • Google Cloud Platform Cookbook by Legorie Rajan PS
Table of Contents (29 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

Securing financial data using Cloud KMS


Cloud KMS is GCP's key management service, which generates, rotates, and destroys AES256 encryption keys. Coupled with IAM and Cloud Audit Logging, we can provide granular access at a key level and monitor their usage. We can use the KMS feature via API calls and client libraries for different languages. In this recipe, we'll use KMS to encrypt a small piece of sensitive data using Google's command-line tools. This will show us the ease of use of Cloud KMS and the absence of any overhead of managing keys or encryption libraries.

Getting ready

The following are the initial setup verification steps, which are required before the recipe can be executed:

  1. Create or select a GCP project.
  2. Enable billing and enable the default APIs (some APIs like BigQuery, storage, monitoring, and a few others are enabled automatically).
  3. Enable the KMS API for the project you have selected:
 gcloud services enable cloudkms.googleapis.com

How to do it...

This recipe will be of two...