🟨 In #GCP you can use #IAP to secure your applications and services. A while ago I have uploaded a video that shows you how to use #Python to start and stop #Google Compute Engine VMs.
In this video I will take this further and build on the results of the previous one. I will now show you how you can #secure that scenario and only allow the authorized people or services call your #Cloud Function.
For me the topics of #serverless offerings and services are always interesting and I'm going to invest more time in the future to build more scenarios, test stuff, and experiment with the services and integrate them with each other.
🔴 In this video I will be covering the following:
- The building blocks of this scenario
- The prerequisites and considerations that you will need to be aware of
- Why you need a GCP organization and Cloud Identity account?
- How to create a project and enable the billing on it in GCP?
- How to create a service account and create a JSON key file in GCP?
- How to create a new App Engine Service in GCP?
- Getting the code and script files, and an overview for them
- How to deploy apps to App Engine in GCP?
- How to enable IAP (Identity Aware Proxy) for App Engine in GCP?
- How to secure App Engine apps using IAP in GCP?
--------------------------------------
--------------------------------------
🔴🔴 Please don’t forget to like the video and subscribe as well! 🔴🔴
--------------------------------------
--------------------------------------
Video timeline/chapters:
00:00 - Introduction
01:46 - Required GCP services and products
03:49 - Prerequisites and high level plan
07:27 - Configuring the GCP organization
08:58 - How to enable App Engine API in GCP?
09:57 - How to enable Identity-Aware Proxy (IAP) API in GCP?
10:30 - How to setup the consent screen for OAuth in GCP?
12:39 - How to create a service account and create a JSON key file in GCP?
15:56 - How to configure the Cloud Functions in GCP to accept authenticated requests only?
16:50 - GCP best practice is to grant permissions to groups instead of individual users
18:08 - How to deploy a Python application to Google App Engine in GCP?
18:30 - The Python script repository and overview
21:43 - How to create an App Engine application in GCP?
23:36 - How to deploy a Python application to App Engine in GCP?
25:58 - How to enable IAP on App Engine in GCP?
28:00 - How to allow users and groups in Identity-Aware Proxy (IAP) in GCP?
30:29 - Further enhancements and options
32:22 - Closing
--------------------------------------
--------------------------------------
✅ Links mentioned in the video:
- Google Cloud security best practices center: cloud.google.com/security/bes...
- Best practices for enterprise organizations: cloud.google.com/docs/enterpr...
- GCP Automation | Use Google Cloud Functions and Python to start and stop VMs | Compute Engine: • GCP Automation | Use G...
- gcloud | How to setup and configure gcloud command line tool and basic commands | gcloud tutorial: • gcloud | How to setup ...
- Cloud Identity | Create a GCP Organization to Manage Your Resources | Google Cloud Foundations | GCP: • Cloud Identity | Creat...
- gcloud app deploy | How to deploy and publish applications to Google App Engine | GCP Tutorials: • gcloud app deploy | Ho...
- GitHub code repository: github.com/salehram/gcp-appen...
--------------------------------------
--------------------------------------
📣✅ Other useful links:
- Follow me on Twitter: / salehram87
- Connect with me on LinkedIn: / salehram
- Check my website and blog: www.salehram.com
- Check out my Google Workspace Admin Course on Udemy and get it with a discounted price: www.salehram.com/gws-admin-tr...
--------------------------------------
--------------------------------------
📣✅ Interesting channels to follow and subscribe:
- Google Workspace - / googleworkspace
- Google Cloud Tech - / googlecloudplatform
- Google Cloud - / @googlecloud
- Learn GCP with Mahesh - / learngcpwithmahesh
- Saperis - Hands-on tutorials for Google Workspace apps - / saperis
Негізгі бет GCP | How to secure Cloud Functions using IAP and App Engine
Пікірлер: 2