Book Image

The Definitive Guide to Modernizing Applications on Google Cloud

By : Steve (Satish) Sangapu, Dheeraj Panyam, Jason Marston
Book Image

The Definitive Guide to Modernizing Applications on Google Cloud

By: Steve (Satish) Sangapu, Dheeraj Panyam, Jason Marston

Overview of this book

Legacy applications, which comprise 75–80% of all enterprise applications, often end up being stuck in data centers. Modernizing these applications to make them cloud-native enables them to scale in a cloud environment without taking months or years to start seeing the benefits. This book will help software developers and solutions architects to modernize their applications on Google Cloud and transform them into cloud-native applications. This book helps you to build on your existing knowledge of enterprise application development and takes you on a journey through the six Rs: rehosting, replatforming, rearchitecting, repurchasing, retiring, and retaining. You'll learn how to modernize a legacy enterprise application on Google Cloud and build on existing assets and skills effectively. Taking an iterative and incremental approach to modernization, the book introduces the main services in Google Cloud in an easy-to-understand way that can be applied immediately to an application. By the end of this Google Cloud book, you'll have learned how to modernize a legacy enterprise application by exploring various interim architectures and tooling to develop a cloud-native microservices-based application.
Table of Contents (26 chapters)
1
Section 1: Cloud-Native Application Development and App Modernization in Google Cloud
5
Section 2: Selecting the Right Google Cloud Services
10
Section 3: Rehosting and Replatforming the Application
17
Section 4: Refactoring the Application on Cloud-Native/PaaS and Serverless in Google Cloud

Cloud Identity

Cloud Identity is Google Cloud's main service for identity management. It is an IDaaS solution that gives developers a unified platform to manage all of their members (users and groups). These users can even be your team members' personal Gmail accounts, which you can use to grant them access. This would not be possible without Cloud Identity.

In essence, it is an authentication tool that verifies the identities of users – it does not assign them the roles. It only checks if they are eligible for access and that authorization is still done by the IAM policy, as shown in the following diagram:

Figure 7.6 – Visualization of authentication and authorization within Cloud IAM

Cloud Identity is also, in a way, cross-platform as it allows you to use identities between Google Cloud and other cloud vendors that have their own identity services: AWS and Azure. However, this isn't something we will be discussing as we will...