Security in Google Cloud
Description
This training course gives you a broad study of security controls and techniques
in Google Cloud. Through recorded lectures, demonstrations, and hands-on labs,
you’ll explore and deploy the components of a secure Google Cloud solution,
including Cloud Identity, Resource Manager, Identity and Access Management (IAM),
Virtual Private Cloud firewalls, Cloud Load Balancing, Direct Peering, Carrier Peering,
Cloud Interconnect, and VPC Service Controls.
Intended audience
• Cloud information security analysts, architects, and engineers
• Information security/cybersecurity specialists
• Cloud infrastructure architects
Topics
Foundations of Google Cloud Security
• Google Cloud’s Approach to Security
• The Shared Security Responsibility Model
• Threats Mitigated by Google and Google Cloud
• Access Transparency
Cloud Identity
• Cloud Identity
• Google Cloud Directory Sync
• Google Authentication Versus SAML-based SSO
• Authentication Best Practices
Identity and Access Management (IAM)
• Resource Manager
• IAM Roles
• IAM Policies
• IAM Recommender
• IAM Troubleshooter
• IAM Audit Logs
• IAM Best Practices
Configuring Virtual Private Cloud for Isolation and Security
•VPC Firewalls
• Load Balancing and SSL Policies
• Interconnect and Peering Policies
• Best Practices for VPC Networks
•VPC Flow Logs
Securing Compute Engine: Techniques and Best Practices
• Service Accounts, IAM Roles and API Scopes
• Managing VM Logins
• Organization Policy Controls
• Compute Engine Best Practices
• Encrypting Disks with CSEK
Securing Cloud Data: Techniques and Best Practices
• Cloud Storage IAM permissions and ACLs
• Auditing Cloud Data
• Signed URLs and Policy Documents
• Encrypting with CMEK and CSEK
• Cloud HSM
• BigQuery IAM Roles and Authorized Views
• Storage Best Practices
Application Security: Techniques and Best Practices
• Types of Application Security Vulnerabilities
• Web Security Scanner
• Threat: Identity and Oauth Phishing
• Identity-Aware Proxy
• Secret Manager
Securing Google Kubernetes Engine: Techniques and Best Practices
• Introduction to Kubernetes/GKE
• Authentication and Authorization
• Hardening Your Clusters
• Securing Your Workloads
• Monitoring and Logging
Protecting against Distributed Denial of Service Attacks (DDoS)
• How DDoS Attacks Work
• Google Cloud Mitigations
• Types of Complementary Partner Products
Content-Related Vulnerabilities: Techniques and Best Practices
• Threat Ransomware
• Ransomware Mitigations
• Threats: Data Misuse, Privacy Violations, Sensitive Content
• Content-Related Mitigations
Monitoring, Logging, Auditing, and Scanning
• Cloud Audit Logs
• Deploying and Using Forseti
האם אתה בטוח שאתה רוצה לסגור את הטופס ולאבד את כל השינויים?
