Data Protection: Compute Engine Disk Snapshots ☁ GCP 🟢 Beginner Compute Engine Persistent Disk Snapshot Scenario You have a standalone Compute Engine instance running legacy software that stores data directly on its boot disk. You need to create a point-in-time…
Caching: Memorystore (Redis) and Legacy Serverless Connectors ☁ GCP 🔥 Intermediate Memorystore Redis Cloud Functions Serverless VPC Access Scenario Your serverless API is experiencing high latency querying BigQuery. You want to introduce a caching layer. You will deploy GCP’s managed…
Data Exfiltration Prevention: VPC Service Controls ☁ GCP 🔥 Advanced VPC-SC Security Perimeter Zero Trust Scenario Your organization handles highly sensitive PII data in Cloud Storage and BigQuery. You are worried that a malicious insider with `roles` could simply download…
Advanced IAM: Custom Roles and IAM Conditions ☁ GCP 🔥 Intermediate IAM Custom Roles Conditions Security Scenario The predefined `roles` role grants too much power. You want a “Bucket Manager” role that can create and delete buckets, but cannot read…
Asynchronous Execution: Cloud Tasks and Cloud Run ☁ GCP 🔥 Intermediate Cloud Tasks Cloud Run Push Queue OIDC Token Scenario Your serverless API application lets users generate reports. Report generation takes 3 minutes. If you run this synchronously, the user’s…
Secure Auth: Workload Identity Federation (Keyless APIs) ☁ GCP 🔥 Intermediate Workload Identity Security IAM GitHub Actions Scenario Your GitHub Actions CI/CD pipeline needs to deploy files to Google Cloud Storage. Previously, you would generate a JSON Service Account Key…
Data Engineering: Pub/Sub to BigQuery Streaming Pipeline ☁ GCP 🔥 Intermediate Pub/Sub BigQuery Dataflow Data Pipeline Scenario Your IoT devices publish thousands of telemetry events to a Pub/Sub topic per second. You need to stream these events directly into a…
Secrets: Google Secret Manager ☁ GCP 🟢 Beginner Secret Manager Sensitive Data IAM Scenario Your application needs to securely connect to a 3rd-party API using a token. Hardcoding credentials in code or storing them raw in Terraform state isn’t secure.…
Compute Engine: Deploying a VM with Firewall Rules ☁ GCP 🟢 Beginner Compute Engine Firewall Network Tags Scenario You are deploying a simple Nginx web server on Google Cloud Platform. You need to provision a Compute Engine virtual machine (VM)…
Terraform Core: Advanced Input Variables and Custom Validation ☁ GCP 🟢 Beginner Terraform Core HCL Variables Validation Scenario You are writing a Terraform configuration that will be used by other developers. They need to supply an environment name and an…
Like the content ? Get notified when I post something new. I promise not to spam your Email.
