Book Image

Professional Cloud Architect Google Cloud Certification Guide - Second Edition

By : Konrad Cłapa, Brian Gerrard
5 (1)
Book Image

Professional Cloud Architect Google Cloud Certification Guide - Second Edition

5 (1)
By: Konrad Cłapa, Brian Gerrard

Overview of this book

Google Cloud Platform (GCP) is one of the industry leaders thanks to its array of services that can be leveraged by organizations to bring the best out of their infrastructure. This book is a comprehensive guide for learning methods to effectively utilize GCP services and help you become acquainted with the topics required to pass Google's Professional Cloud Architect certification exam. Following the Professional Cloud Architect's official exam syllabus, you'll first be introduced to the GCP. The book then covers the core services that GCP offers, such as computing and storage, and takes you through effective methods of scaling and automating your cloud infrastructure. As you progress through the chapters, you'll get to grips with containers and services and discover best practices related to the design and process. This revised second edition features new topics such as Cloud Run, Anthos, Data Fusion, Composer, and Data Catalog. By the end of this book, you'll have gained the knowledge required to take and pass the Google Cloud Certification – Professional Cloud Architect exam and become an expert in GCP services.
Table of Contents (25 chapters)
1
Section 1: Introduction to GCP
5
Section 2: Manage, Design, and Plan a Cloud Solution Architecture
14
Chapter 12: Exploring Storage and Database Options in GCP – Part 2
17
Section 3: Secure, Manage and Monitor a Google Cloud Solution
21
Section 4: Exam Focus

Firewall rules and load balancers

We already covered networking in Chapter 10, Networking Options in GCP, but we would like to recap what is important from a security standpoint.

If Compute Engine instances don't need to communicate with each other, then we should host them on different Virtual Private Cloud (VPC) networks. Additionally, if we have an application made up of servers on different network tiers, then each server should be on a different subnet. Let's take a traditional web app and database application as an example. We want to segment each tier on a different subnet.

Firewall rules are the obvious choice for securing a network. As you now know, a VPC lets you isolate your network to allow for segmentation between computing resources. Firewall rules let you control the flow of inbound and outbound traffic by allowing or denying the traffic based on direction, source or destination, protocol, and priority. The following screenshot shows the creation of a...