Book Image

Architecting Google Cloud Solutions

By : Victor Dantas
Book Image

Architecting Google Cloud Solutions

By: Victor Dantas

Overview of this book

Google has been one of the top players in the public cloud domain thanks to its agility and performance capabilities. This book will help you design, develop, and manage robust, secure, and dynamic solutions to successfully meet your business needs. You'll learn how to plan and design network, compute, storage, and big data systems that incorporate security and compliance from the ground up. The chapters will cover simple to complex use cases for devising solutions to business problems, before focusing on how to leverage Google Cloud's Platform-as-a-Service (PaaS) and Software-as-a-Service (SaaS) capabilities for designing modern no-operations platforms. Throughout this book, you'll discover how to design for scalability, resiliency, and high availability. Later, you'll find out how to use Google Cloud to design modern applications using microservices architecture, automation, and Infrastructure-as-Code (IaC) practices. The concluding chapters then demonstrate how to apply machine learning and artificial intelligence (AI) to derive insights from your data. Finally, you will discover best practices for operating and monitoring your cloud solutions, as well as performing troubleshooting and quality assurance. By the end of this Google Cloud book, you'll be able to design robust enterprise-grade solutions using Google Cloud Platform.
Table of Contents (17 chapters)
1
Section 1: Introduction to Google Cloud
4
Section 2: Designing Great Solutions in Google Cloud
10
Section 3: Designing for the Modern Enterprise

Securing identities and access to resources

In Chapter 2, Mastering the Basics of Google Cloud, we discussed IAM in Google Cloud and the principle of least privilege. You learned that identity is the new perimeter, and that it is crucial to protect users' identities first and foremost before thinking of protecting your infrastructure resources. You also learned the resource hierarchy on GCP and how that affects access management. The concepts we laid out in that chapter are fundamental and need to be grasped as a prerequisite for understanding how to secure identities. Therefore, if you haven't done so, I encourage you to read through the Understanding identity and access management (IAM) section of Chapter 2, Mastering the Basics of Google Cloud, before continuing.

In this section, you will learn about Cloud Identity and how to approach authentication and authorization on GCP.

Cloud Identity

Cloud Identity is an Identity as a Service (IDaaS) solution used for centrally...