Activity Review: Modeling Secure Google Cloud Services
1. Activity Review: Modeling Secure Google Cloud Services
In this activity, you were asked to draw a diagram depicting the security requirements for your case study. Here's the diagram that I drew for our online travel portal, ClickTravel. This is a similar design to what I showed you earlier. First, I configured Google Cloud Armor on a global external Application Load Balancer to block any denied IP addresses. My custom VPC network has subnets in us-central1 for my American customers, and a backup subnet in us-east1, and a subnet in europe-west2 for my European customers. My firewall rules only allow SSH from known sources, and although I allow HTTPS from anywhere, I can always deny IP addresses with Google Cloud Armor at the edge of Google Cloud's network. I also configured Cloud VPN tunnels to securely communicate with my on-premises network for my Reporting service. Now, while my load balancer needs a public IP address, I can secure my backend services by creating them without external IP addresses. In order for those instances to communicate with the Google Cloud database services, I enable Private Google Access. This enables the Inventory, Orders, and Analytic services’ traffic to remain private, while reducing my networking costs.2. Let's practice!
Create Your Free Account
or
By continuing, you accept our Terms of Use, our Privacy Policy and that your data is stored in the USA.