Skip to reading content

RCRick Collettesecurity · AI · music · people

Home Books

Capper CapDB Operator Tools

EkkoBSD Security AI Futures Canon

About Resume Music Martial Arts Roots I Heart People

Contact

Table of contents

Megalith's Big GCP Book

Table of contents

Front matter

Foreword
Preface
About This Book
How to Use This Book
Who This Book Is For
Who This Book Is Not For
Conventions Used in This Book
The Example Environment
Source Code and Example Repository
Software and Version Policy
A Note About Terraform and OpenTofu
A Note About Security

GCP Foundations

Chapter 1: Google Cloud from a SecDevOps Perspective
Chapter 2: Accounts, Organizations, and Resource Hierarchy

Identity and Access Management

Chapter 3: Identity and Access Management
Chapter 4: Federation and Zero-Trust Identity

Networking and Connectivity

Chapter 5: GCP Networking Fundamentals
Chapter 6: Hybrid and Enterprise Connectivity
Chapter 7: Edge, Load Balancing, and Application Delivery

Compute Platforms

Chapter 8: Compute Engine
Chapter 9: Google Kubernetes Engine
Chapter 10: Cloud Run and Serverless Containers

Storage and Databases

Chapter 11: Cloud Storage
Chapter 12: Relational Databases

Secrets, Keys, and Data Protection

Chapter 13: Secret Manager
Chapter 14: Cloud KMS and Cryptographic Controls
Chapter 15: Sensitive Data Protection

Security Operations, Logging, and Monitoring

Chapter 16: Security Command Center
Chapter 17: Logging and Audit
Chapter 18: Monitoring, Reliability, and Incident Detection

Perimeter and API Security

Chapter 19: Perimeter Security
Chapter 20: VPC Service Controls
Chapter 21: API Security

Software Delivery and Supply Chain

Chapter 22: Source Code and Build Architecture
Chapter 23: Cloud Build
Chapter 24: Artifact Registry
Chapter 25: Secure Deployment

Infrastructure as Code Foundations

Chapter 26: Terraform on GCP
Chapter 27: OpenTofu on GCP
Chapter 28: Ansible on GCP

Compliance and Hardening

Chapter 29: Building for Compliance
Chapter 30: Common Compliance Frameworks
Chapter 31: Organization Hardening
Chapter 32: Workload Hardening
Chapter 33: Common GCP Security Failures

Incident Response and Advanced Topics

Chapter 34: Incident Response in GCP
Chapter 35: Zero-Trust GCP Architecture
Chapter 36: Confidential Computing
Chapter 37: Supply Chain Security

Appendices

Appendix A: Recommended GCP Project Layout
Appendix B: IAM Role Reference
Appendix C: Organization Policy Baseline
Appendix D: Security Checklist
Appendix E: Production Readiness Checklist
Appendix F: Command-Line Reference
Appendix G: Terminology and Acronyms

Back matter

Afterword
Acknowledgments
Complete GCP Production Checklist

Front matter

Megalith's Big GCP Book

A SecDevOps Guide to Google Cloud Platform §

Identity, Networking, Data Protection, Delivery, Terraform, OpenTofu, and Ansible §

Rick Collette

Previous · frontmatterThe Megalith's Big Book Series Next · frontmatterCopyright

Rick Collette

Builder, defender, tinkerer, teacher, and practical human-first technology person.

Site map

Books Projects EkkoBSD Security AI Futures Canon About Contact

Operating principle

Build useful things, explain them plainly, protect people, and leave room for the weird spark.