Activity Intro: Modeling Secure Google Cloud Services
1. Activity Intro: Modeling Secure Google Cloud Services
In this design activity, you draw a diagram that depicts your case study’s security requirements. Let me show you an example of what to draw. This diagram illustrates a custom VPC network with two subnets in the US. Maybe us-central1 is our primary region and us-east1 is our backup region. The firewall rules allow HTTPS ingress from the internal and SSH from known sources. Otherwise, all other incoming traffic is disabled by the implied deny all ingress firewall rule that every VPC network has. Because we're allowing HTTPS from anywhere, it's useful to configure Google Cloud Armor on a global external Application Load Balancer to block any denied IP addresses at the edge of Google Cloud's network. This is a simple design, but a great starting point because it allows us to grow our backends without changing our security design. Refer to Activity 12 in your workbook to create a similar diagram for your case study.2. Let's practice!
Create Your Free Account
or
By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.