Book Image

Professional Cloud Architect Google Cloud Certification Guide - Second Edition

By : Konrad Cłapa, Brian Gerrard
5 (1)
Book Image

Professional Cloud Architect Google Cloud Certification Guide - Second Edition

5 (1)
By: Konrad Cłapa, Brian Gerrard

Overview of this book

Google Cloud Platform (GCP) is one of the industry leaders thanks to its array of services that can be leveraged by organizations to bring the best out of their infrastructure. This book is a comprehensive guide for learning methods to effectively utilize GCP services and help you become acquainted with the topics required to pass Google's Professional Cloud Architect certification exam. Following the Professional Cloud Architect's official exam syllabus, you'll first be introduced to the GCP. The book then covers the core services that GCP offers, such as computing and storage, and takes you through effective methods of scaling and automating your cloud infrastructure. As you progress through the chapters, you'll get to grips with containers and services and discover best practices related to the design and process. This revised second edition features new topics such as Cloud Run, Anthos, Data Fusion, Composer, and Data Catalog. By the end of this book, you'll have gained the knowledge required to take and pass the Google Cloud Certification – Professional Cloud Architect exam and become an expert in GCP services.
Table of Contents (25 chapters)
1
Section 1: Introduction to GCP
5
Section 2: Manage, Design, and Plan a Cloud Solution Architecture
14
Chapter 12: Exploring Storage and Database Options in GCP – Part 2
17
Section 3: Secure, Manage and Monitor a Google Cloud Solution
21
Section 4: Exam Focus

IAM

Access to Google Cloud Functions is secured with IAM. Let's have a look at a list of predefined roles, along with a short description of each:

  • Cloud Function Admin: Has the right to create, update, and delete functions. Can set IAM policies and view source code.
  • Cloud Functions Developer: Has the right to create, update, and delete functions, as well as view source code. Cannot set IAM policies.
  • Cloud Functions Viewer: Has the right to view functions. Cannot get IAM policies, nor view the source code.
  • Cloud Function Invoker: Has the right to invoke an HTTP function using its public URL.

Note that for the Cloud Functions Developer role to work, you must also assign the user the IAM Service Account User role on the Cloud Functions runtime service account.