Book Image

Building Google Cloud Platform Solutions

By : Ted Hunter, Steven Porter, Legorie Rajan PS
Book Image

Building Google Cloud Platform Solutions

By: Ted Hunter, Steven Porter, Legorie Rajan PS

Overview of this book

GCP is a cloud computing platform with a wide range of products and services that enable you to build and deploy cloud-hosted applications. This Learning Path will guide you in using GCP and designing, deploying, and managing applications on Google Cloud. You will get started by learning how to use App Engine to access Google's scalable hosting and build software that runs on this framework. With the help of Google Compute Engine, you’ll be able to host your workload on virtual machine instances. The later chapters will help you to explore ways to implement authentication and security, Cloud APIs, and command-line and deployment management. As you hone your skills, you’ll understand how to integrate your new applications with various data solutions on GCP, including Cloud SQL, Bigtable, and Cloud Storage. Following this, the book will teach you how to streamline your workflow with tools, including Source Repositories, Container Builder, and Stackdriver. You'll also understand how to deploy and debug services with IntelliJ, implement continuous delivery pipelines, and configure robust monitoring and alerts for your production systems. By the end of this Learning Path, you'll be well versed with GCP’s development tools and be able to develop, deploy, and manage highly scalable and reliable applications. This Learning Path includes content from the following Packt products: • Google Cloud Platform for Developers Ted Hunter and Steven Porter • Google Cloud Platform Cookbook by Legorie Rajan PS
Table of Contents (29 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

IAM and service accounts


As with all other products and services in the Google Cloud catalog, IAM is a major component of Google's security model. For Compute Engine, this manifests in two primary manners—IAM policies for administrative operations on Compute Engine resources and IAM policies for actions that a given Compute Engine instance may take.

Administrative operations

Compute Engine IAM roles can be grouped into three broad categories—instance resource management, network management, and security management. Compared to other services in the GCP catalog, there are very many IAM roles, designed to fit a large number of potential human roles within an organization. Some of these roles are currently in beta.

General roles

As we've seen in previous chapters, primitive roles may be used to grant general permissions at the project or organization level. These primitive roles apply to Compute Engine resources in the same manner as other resources. Project and organization owners and editors...