This course equips participants to protect web apps from common vulnerabilities and securely manage app credentials. The curriculum mirrors the 6-Layer AI Stack and Google Cloud Minimum Viable Security Platform mandates to help you secure existing environments.

Course introduction

Protect the front door

Manage vulnerabilities

Manage app credentials

Gather threat intelligence

gsp879-cloud-armor-preconfigured-waf-rules

Cloud Armor Preconfigured WAF Rules

Course summary

Quiz: Security Best Practices in Google Cloud: Applications — Question 1

Quiz: Security Best Practices in Google Cloud: Applications — Question 2

Quiz: Security Best Practices in Google Cloud: Applications — Question 3

Quiz: Security Best Practices in Google Cloud: Applications — Question 4

Securing applications in Google Cloud

<h2>Defend Applications in Google Cloud</h2>Applications are often the first thing attackers target. This intermediate course shows you how to protect web apps from common vulnerabilities and manage application credentials securely, using an approach aligned with Google Cloud’s current security guidance for AI-era environments.<br><br><h2>Protect the Front Door and Manage Vulnerabilities</h2>You’ll learn how Google Cloud Armor and Web Security Scanner help defend web apps against common exploits, and configure Cloud Armor’s preconfigured web application firewall (WAF) rules in a hands-on lab. You’ll also implement secure customer sign-in with Google Cloud Identity Platform and mandatory multi-factor authentication, and learn how to manage app credentials safely.<br><br><h2>Secure AI-Powered Applications</h2>The course then turns to AI workloads. You’ll apply Google’s Secure AI Framework (SAIF) to govern autonomous agents, protect model integrity, and secure data pipelines, and see how threat intelligence and hardened compute environments strengthen your defenses. By the end, you’ll be able to secure both traditional and AI-powered applications on Google Cloud.

Manage Security in Google Cloud

Secure Google Cloud apps with Cloud Armor, Web Security Scanner, Identity Platform MFA, and Google’s SAIF framework.

Cloud Armor Preconfigured WAF Rules

Security Best Practices in Google Cloud: Applications

Exercise instructions