Category Terraform-GCP-Labs

Cloud Storage: Versioned Buckets and Lifecycle Rules ☁ GCP 🟢 Beginner Cloud Storage Versioning Lifecycle Scenario Your data science team needs a place to store training datasets. They require a bucket that prevents accidental deletion of files (by keeping previous…

Hybrid Connectivity: High Availability (HA) VPN with BGP ☁ GCP 🔥 Intermediate HA VPN Cloud Router BGP Hybrid Cloud Scenario Your GCP VPC needs to establish an encrypted, highly resilient Site-to-Site tunnel to an On-Premises data center (or another cloud…

DevSecOps: Security Command Center Auto-Remediation ☁ GCP 🔥 Intermediate SCC Security Pub/Sub Cloud Functions Scenario Your organization uses Security Command Center (SCC) to detect misconfigurations. You want to implement Auto-Remediation. When a developer accidentally makes a Cloud Storage bucket public,…

Network Topology: VPC Network Peering ☁ GCP 🔥 Intermediate VPC Peering Networking Decentralized Scenario Your decentralized organization has two separate VPC networks (“Frontend” and “Backend”) living in completely independent administrative planes. They must communicate securely using internal IP addresses without…

Multi-Project Security: Cross-Project IAM and Storage ☁ GCP 🔥 Intermediate IAM Cloud Storage Cross-Project Scenario An application running in your “App Project” needs to securely read analytics data stored in a Cloud Storage bucket located in your completely separate “Data…

Terraform State: Cloud Storage Remote Backend and Workspaces ☁ GCP 🟢 Beginner Terraform Backend Remote State Workspaces Scenario So far, your `terraform.tfstate` file has lived locally on your laptop. If your hard drive crashes, you lose track of the infrastructure.…

Serverless: Deploying Cloud Functions (2nd Gen) ☁ GCP 🟢 Beginner Cloud Functions Cloud Storage Serverless Scenario You want to deploy a simple serverless “Hello World” API endpoint without managing any infrastructure. In Google Cloud, Cloud Functions (2nd Gen) is the…

Cloud SQL: Provisioning a PostgreSQL Managed Database ☁ GCP 🟢 Beginner Cloud SQL PostgreSQL Random Provider Scenario Your application needs a relational database. Instead of managing VMs and database software manually, you will use Cloud SQL, Google’s fully managed relational…

Identity and Access Management: Service Accounts & Bindings ☁ GCP 🟢 Beginner IAM Service Account IAM Binding Scenario In Google Cloud, applications and resources authenticate using Service Accounts rather than human user credentials. You need to create a service account…

VPC Networks: Custom Mode and Subnets ☁ GCP 🟢 Beginner VPC Subnets Private Google Access Scenario GCP default networks automatically create subnets in every single region across the globe. For greater control and security, you should use custom mode VPC…