Book Image

Building Google Cloud Platform Solutions

By : Ted Hunter, Steven Porter, Legorie Rajan PS
Book Image

Building Google Cloud Platform Solutions

By: Ted Hunter, Steven Porter, Legorie Rajan PS

Overview of this book

GCP is a cloud computing platform with a wide range of products and services that enable you to build and deploy cloud-hosted applications. This Learning Path will guide you in using GCP and designing, deploying, and managing applications on Google Cloud. You will get started by learning how to use App Engine to access Google's scalable hosting and build software that runs on this framework. With the help of Google Compute Engine, you’ll be able to host your workload on virtual machine instances. The later chapters will help you to explore ways to implement authentication and security, Cloud APIs, and command-line and deployment management. As you hone your skills, you’ll understand how to integrate your new applications with various data solutions on GCP, including Cloud SQL, Bigtable, and Cloud Storage. Following this, the book will teach you how to streamline your workflow with tools, including Source Repositories, Container Builder, and Stackdriver. You'll also understand how to deploy and debug services with IntelliJ, implement continuous delivery pipelines, and configure robust monitoring and alerts for your production systems. By the end of this Learning Path, you'll be well versed with GCP’s development tools and be able to develop, deploy, and manage highly scalable and reliable applications. This Learning Path includes content from the following Packt products: • Google Cloud Platform for Developers Ted Hunter and Steven Porter • Google Cloud Platform Cookbook by Legorie Rajan PS
Table of Contents (29 chapters)
Title Page
Copyright and Credits
About Packt
Contributors
Preface
Index

Cloud SQL IAM and users


Cloud SQL employs two forms of access control: traditional GCP IAM policies and native database user controls. With the exception of Cloud SQL Client, IAM policies apply to all Cloud SQL operations within a given project, and are largely focused on administrative tasks on the instances themselves. Database users offer a more fine-grained level of control over database access, such as which tables a client can read and modify.

IAM policies

Other than the primitive IAM roles that apply to all project resources (owner, editor, viewer), Cloud SQL supports four IAM roles:

  • roles/cloudsql.admin: Full control, except the ability to connect as a client
  • roles/cloudsql.editor: Ability to perform operational tasks on an instance
  • roles/cloudsql.viewer: Read-only access to all resources
  • roles/cloudsql.client: Ability to connect to an instance via the Cloud SQL Proxy

Database users

Cloud SQL offers a simple managed interface for controlling database users in a given Cloud SQL instance....