Book Image

Google Cloud Platform Cookbook

By : Legorie Rajan PS
Book Image

Google Cloud Platform Cookbook

By: Legorie Rajan PS

Overview of this book

Google Cloud Platform is a cloud computing platform that offers products and services to host applications using state-of-the art infrastructure and technology. You can build and host applications and websites, store data, and analyze data on Google's scalable infrastructure. This book follows a recipe-based approach, giving you hands-on experience to make the most of Google Cloud services. This book starts with practical recipes that explain how to utilize Google Cloud's common services. Then, you'll see how to make full use of Google Cloud components such as networking, security, management, and developer tools. Next, we'll deep dive into implementing core Google Cloud services into your organization, with practical recipes on App Engine, Compute Engine, Cloud Functions, virtual networks, and Cloud Storage. Later, we'll provide recipes on implementing authentication and security, Cloud APIs, command-line management, deployment management, and the Cloud SDK. Finally, we'll cover administration and troubleshooting tasks on applications with Compute services and we'll show how to monitor your organization's efficiency with best practices. By the end of this book, you'll have an overall understanding and hands-on implementation of Google Cloud services in your organization with ease.
Table of Contents (14 chapters)
Title Page
Dedication
Packt Upsell
Contributors
Preface
Index

Creating IAM custom roles


A group of permissions that can be assigned to a user, group, or a service account is called a role. In GCP, permissions for user resources cannot be directly assigned to users; they will have to grant those permissions to a role and attach the role to the user. There are three broad classifications of roles: primitive roles, predefined roles, and custom roles.

Primitive roles are viewer, editor, and owner roles, which have a broad usage and can be assigned at the project level. The predefined roles come into play when we need more fine-grained permissions. A user can be assigned to be an editor of a service, viewer of a service, a viewer plus editor of only one action, and so on. Multiple predefined roles can be assigned to a user. When the existing primitive roles do not suffice the business needs of an organization, GCP offers to create custom roles for us. With custom roles, we can go to the highest level of granularity provided by IAM. We can pick and choose...