Book Image

Professional Cloud Architect – Google Cloud Certification Guide

By : Konrad Cłapa, Brian Gerrard
Book Image

Professional Cloud Architect – Google Cloud Certification Guide

By: Konrad Cłapa, Brian Gerrard

Overview of this book

Google Cloud Platform (GCP) is one of the leading cloud service suites and offers solutions for storage, analytics, big data, machine learning, and application development. It features an array of services that can help organizations to get the best out of their infrastructure. This comprehensive guide covers a variety of topics specific to Google's Professional Cloud Architect official exam syllabus and guides you in using the right methods for effective use of GCP services. You'll start by exploring GCP, understanding the benefits of becoming a certified architect, and learning how to register for the exam. You'll then delve into the core services that GCP offers such as computing, storage, and security. As you advance, this GCP book will help you get up to speed with methods to scale and automate your cloud infrastructure and delve into containers and services. In the concluding chapters, you'll discover security best practices and even gain insights into designing applications with GCP services and monitoring your infrastructure as a GCP architect. By the end of this book, you will be well versed in all the topics required to pass Google's Professional Cloud Architect exam and use GCP services effectively.
Table of Contents (26 chapters)
Free Chapter
1
Section 1: Introduction to GCP
5
Section 2: Managing, Designing, and Planning a Cloud Solution Architecture
15
Section 3: Designing for Security and Compliance
17
Section 4: Managing Implementation
19
Section 5: Ensuring Solution and Operations Reliability
21
Section 6: Exam Focus

Firewall rules

A firewall is either a hardware or software device that filters network traffic that's passing through it. This filtering can be done based on many conditions, such as source, target IPs, protocol, or ports. It allows you to secure your network from unwanted access.

The firewall rules allow you to control traffic flow to and from VM-based instances. Firewall rules work independent of the VM operating system and are always enforced if put in an enabled state. VPC acts as a distributed firewall that leverages micro-segmentation. This means that the firewall rules are enforced per virtual machine, even if the machines reside in the same network. The firewall rules are constructed of the following components:

  • Ingress (inbound) firewall rules:
    • Priority 0: 65545 with a default value of 1000
    • Action: allow or deny
    • Enforcement: enabled or disabled
    • Target (destination...