[{"id":"75103","title":"Welcome to Managing Security in Google Cloud","description":"

Welcome to Managing Security in Google Cloud, the first course of Security in Google Cloud. This course gives you an overview of security controls and techniques on Google Cloud. Through lectures, demonstrations, and hands-on labs, you will explore and deploy the components of a secure Google Cloud solution.

","steps":[{"id":"520641","prompt":null,"isOptional":true,"activities":[{"id":"513471","href":"/paths/76/course_templates/21/video/513471","isLocked":false,"duration":162000,"title":"Welcome to Security in Google Cloud","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520642","prompt":null,"isOptional":true,"activities":[{"id":"513472","href":"/paths/76/course_templates/21/documents/513472","isLocked":false,"duration":1800000,"title":"Welcome and Getting Started Guide!","description":null,"type":"document","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"75104","title":"Foundations of Google Cloud Security","description":"

Securing systems is a hot topic and should be a priority for everyone today - and, as you will see, it is definitely a priority here at Google. In this module we will introduce you to Google Cloud’s approach to security. We will also discuss the shared security responsibility model, which is a collaborative effort between Google and its users. Next, we will outline several threats that are mitigated for you when your systems are run on Google’s infrastructure in Google Cloud. And, finally, we will end with a section on access transparency.

","steps":[{"id":"520643","prompt":null,"isOptional":true,"activities":[{"id":"513473","href":"/paths/76/course_templates/21/video/513473","isLocked":false,"duration":42000,"title":"Module overview","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520644","prompt":null,"isOptional":true,"activities":[{"id":"513474","href":"/paths/76/course_templates/21/video/513474","isLocked":false,"duration":366000,"title":"Google Cloud's approach to security","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520645","prompt":null,"isOptional":true,"activities":[{"id":"513475","href":"/paths/76/course_templates/21/video/513475","isLocked":false,"duration":239000,"title":"VPC network security and monitoring","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520646","prompt":null,"isOptional":true,"activities":[{"id":"513476","href":"/paths/76/course_templates/21/video/513476","isLocked":false,"duration":297000,"title":"The shared security responsibility model","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520647","prompt":null,"isOptional":true,"activities":[{"id":"513477","href":"/paths/76/course_templates/21/video/513477","isLocked":false,"duration":414000,"title":"Threats mitigated by Google and Google Cloud","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520648","prompt":null,"isOptional":true,"activities":[{"id":"513478","href":"/paths/76/course_templates/21/video/513478","isLocked":false,"duration":127000,"title":"Access transparency","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520649","prompt":null,"isOptional":true,"activities":[{"id":"513479","href":"/paths/76/course_templates/21/video/513479","isLocked":false,"duration":36000,"title":"Module review","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520650","prompt":null,"isOptional":false,"activities":[{"id":"513480","href":"/paths/76/course_templates/21/quizzes/513480","isLocked":false,"duration":900000,"title":"Quiz: Foundations of Google Cloud Security","description":null,"type":"quiz","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"75105","title":"Securing Access to Google Cloud","description":"

In this module we will discuss Cloud Identity, a service which makes it easy to manage cloud users, devices, and apps from one console. We will also discuss a few related features to help reduce the operational overhead of managing Google Cloud users, such as the Google Cloud Directory Sync and Single Sign-On. We will end with some authentication best practices.

","steps":[{"id":"520651","prompt":null,"isOptional":true,"activities":[{"id":"513481","href":"/paths/76/course_templates/21/video/513481","isLocked":false,"duration":38000,"title":"Module overview","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520652","prompt":null,"isOptional":true,"activities":[{"id":"513482","href":"/paths/76/course_templates/21/video/513482","isLocked":false,"duration":326000,"title":"Cloud Identity","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520653","prompt":null,"isOptional":true,"activities":[{"id":"513483","href":"/paths/76/course_templates/21/video/513483","isLocked":false,"duration":142000,"title":"Google Cloud Directory Sync","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520654","prompt":null,"isOptional":true,"activities":[{"id":"513484","href":"/paths/76/course_templates/21/video/513484","isLocked":false,"duration":144000,"title":"Managed Microsoft AD","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520655","prompt":null,"isOptional":true,"activities":[{"id":"513485","href":"/paths/76/course_templates/21/video/513485","isLocked":false,"duration":136000,"title":"Google authentication versus SAML-based SSO","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520656","prompt":null,"isOptional":true,"activities":[{"id":"513486","href":"/paths/76/course_templates/21/video/513486","isLocked":false,"duration":89000,"title":"Identity Platform","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520657","prompt":null,"isOptional":true,"activities":[{"id":"513487","href":"/paths/76/course_templates/21/video/513487","isLocked":false,"duration":87000,"title":"Authentication best practices","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520658","prompt":null,"isOptional":true,"activities":[{"id":"513488","href":"/paths/76/course_templates/21/video/513488","isLocked":false,"duration":33000,"title":"Demo Intro: Defining Users with Cloud Identity Console","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520659","prompt":null,"isOptional":true,"activities":[{"id":"513489","href":"/paths/76/course_templates/21/video/513489","isLocked":false,"duration":366000,"title":"Lab Demo: Defining Users with Cloud Identity Console","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520660","prompt":null,"isOptional":true,"activities":[{"id":"513490","href":"/paths/76/course_templates/21/video/513490","isLocked":false,"duration":64000,"title":"Module review","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520661","prompt":null,"isOptional":false,"activities":[{"id":"513491","href":"/paths/76/course_templates/21/quizzes/513491","isLocked":false,"duration":900000,"title":"Quiz: Securing Access to Google Cloud","description":null,"type":"quiz","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"75106","title":"Identity and Access Management (IAM)","description":"

Identity and Access Management (IAM) lets administrators authorize who can take action on specific resources, giving you full control and visibility to manage your cloud resources centrally. More specifically, we will cover; the Resource Manager which enables you to centrally manage projects, folders, and organizations, IAM roles and policies, including custom roles, and IAM best practices, including separation of duties and the principle of least privilege.

","steps":[{"id":"520662","prompt":null,"isOptional":true,"activities":[{"id":"513492","href":"/paths/76/course_templates/21/video/513492","isLocked":false,"duration":69000,"title":"Module overview","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520663","prompt":null,"isOptional":true,"activities":[{"id":"513493","href":"/paths/76/course_templates/21/video/513493","isLocked":false,"duration":209000,"title":"Resource Manager","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520664","prompt":null,"isOptional":true,"activities":[{"id":"513494","href":"/paths/76/course_templates/21/video/513494","isLocked":false,"duration":269000,"title":"IAM roles","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520665","prompt":null,"isOptional":true,"activities":[{"id":"513495","href":"/paths/76/course_templates/21/video/513495","isLocked":false,"duration":279000,"title":"Service accounts","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520666","prompt":null,"isOptional":true,"activities":[{"id":"513496","href":"/paths/76/course_templates/21/video/513496","isLocked":false,"duration":202000,"title":"Workload Identity Federation","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520667","prompt":null,"isOptional":true,"activities":[{"id":"513497","href":"/paths/76/course_templates/21/video/513497","isLocked":false,"duration":448000,"title":"IAM & Organization policies","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520668","prompt":null,"isOptional":true,"activities":[{"id":"513498","href":"/paths/76/course_templates/21/video/513498","isLocked":false,"duration":441000,"title":"Policy Intelligence","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520669","prompt":null,"isOptional":true,"activities":[{"id":"513499","href":"/paths/76/course_templates/21/video/513499","isLocked":false,"duration":204000,"title":"IAM best practices","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520670","prompt":null,"isOptional":true,"activities":[{"id":"513500","href":"/paths/76/course_templates/21/video/513500","isLocked":false,"duration":22000,"title":"Lab Intro: Configuring IAM","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520671","prompt":null,"isOptional":false,"activities":[{"id":"513501","href":"/paths/76/course_templates/21/labs/513501","isLocked":false,"duration":3600000,"title":"Configuring IAM","description":"Configuring IAM, including custom roles and organization policies","type":"lab","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520672","prompt":null,"isOptional":true,"activities":[{"id":"513502","href":"/paths/76/course_templates/21/video/513502","isLocked":false,"duration":64000,"title":"Module review","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520673","prompt":null,"isOptional":false,"activities":[{"id":"513503","href":"/paths/76/course_templates/21/quizzes/513503","isLocked":false,"duration":900000,"title":"Quiz: Identity and Access Management","description":null,"type":"quiz","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"75107","title":"Configuring Virtual Private Cloud for Isolation and Security","description":"

Managed networking on Google Cloud utilizes a Virtual Private Cloud (or VPC). In this module we will discuss VPC related security concepts including: VPC firewalls, load balancing SSL policies, network Interconnect & peering options, VPC network best practices and VPC flow logs. You will also have the opportunity to practice what you’ve learned, by completing the labs exercises “Configuring VPC Firewalls” and “Configuring and Using VPC Flow Logs in Cloud Logging.”

","steps":[{"id":"520674","prompt":null,"isOptional":true,"activities":[{"id":"513504","href":"/paths/76/course_templates/21/video/513504","isLocked":false,"duration":45000,"title":"Module overview","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520675","prompt":null,"isOptional":true,"activities":[{"id":"513505","href":"/paths/76/course_templates/21/video/513505","isLocked":false,"duration":307000,"title":"VPC firewall rules","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520676","prompt":null,"isOptional":true,"activities":[{"id":"513506","href":"/paths/76/course_templates/21/video/513506","isLocked":false,"duration":379000,"title":"VPC firewall defaults","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520677","prompt":null,"isOptional":true,"activities":[{"id":"513507","href":"/paths/76/course_templates/21/video/513507","isLocked":false,"duration":368000,"title":"VPC firewall best practices","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520678","prompt":null,"isOptional":true,"activities":[{"id":"513508","href":"/paths/76/course_templates/21/video/513508","isLocked":false,"duration":23000,"title":"Lab Intro: Configuring VPC Firewalls","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520679","prompt":null,"isOptional":false,"activities":[{"id":"513509","href":"/paths/76/course_templates/21/labs/513509","isLocked":false,"duration":5400000,"title":"Configuring VPC Firewalls","description":"Configuring VPC Firewalls","type":"lab","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520680","prompt":null,"isOptional":true,"activities":[{"id":"513510","href":"/paths/76/course_templates/21/video/513510","isLocked":false,"duration":179000,"title":"Load balancing and SSL policies","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520681","prompt":null,"isOptional":true,"activities":[{"id":"513511","href":"/paths/76/course_templates/21/video/513511","isLocked":false,"duration":204000,"title":"VPC peering","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520682","prompt":null,"isOptional":true,"activities":[{"id":"513512","href":"/paths/76/course_templates/21/video/513512","isLocked":false,"duration":246000,"title":"Connecting to Google Cloud","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520683","prompt":null,"isOptional":true,"activities":[{"id":"513513","href":"/paths/76/course_templates/21/video/513513","isLocked":false,"duration":135000,"title":"Cloud Interconnect","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520684","prompt":null,"isOptional":true,"activities":[{"id":"513514","href":"/paths/76/course_templates/21/video/513514","isLocked":false,"duration":437000,"title":"VPC Service Controls","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520685","prompt":null,"isOptional":true,"activities":[{"id":"513515","href":"/paths/76/course_templates/21/video/513515","isLocked":false,"duration":199000,"title":"Demo - VPC Service Controls","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520686","prompt":null,"isOptional":true,"activities":[{"id":"513516","href":"/paths/76/course_templates/21/video/513516","isLocked":false,"duration":151000,"title":"Private Google API access","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520687","prompt":null,"isOptional":true,"activities":[{"id":"513517","href":"/paths/76/course_templates/21/video/513517","isLocked":false,"duration":196000,"title":"Access Context Manager","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520688","prompt":null,"isOptional":true,"activities":[{"id":"513518","href":"/paths/76/course_templates/21/video/513518","isLocked":false,"duration":100000,"title":"VPC Flow Logs","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520689","prompt":null,"isOptional":true,"activities":[{"id":"513519","href":"/paths/76/course_templates/21/video/513519","isLocked":false,"duration":25000,"title":"Lab Intro: Configuring and Using VPC Flow Logs in Cloud Logging","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520690","prompt":null,"isOptional":false,"activities":[{"id":"513520","href":"/paths/76/course_templates/21/labs/513520","isLocked":false,"duration":5400000,"title":"Configuring and Using VPC Flow Logs in Cloud Logging","description":"Viewing and using VPC flow logs in Cloud Logging","type":"lab","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520691","prompt":null,"isOptional":true,"activities":[{"id":"513521","href":"/paths/76/course_templates/21/video/513521","isLocked":false,"duration":105000,"title":"Cloud IDS","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520692","prompt":null,"isOptional":true,"activities":[{"id":"513522","href":"/paths/76/course_templates/21/video/513522","isLocked":false,"duration":19000,"title":"Lab Intro: Getting Started with Cloud IDS","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520693","prompt":null,"isOptional":false,"activities":[{"id":"513523","href":"/paths/76/course_templates/21/labs/513523","isLocked":false,"duration":4500000,"title":"Getting Started with Cloud IDS","description":"Deploy Cloud IDS (Intrusion Detection System), a next-generation advanced intrusion detection service that provides threat detection for intrusions, malware, spyware and command-and-control attacks, to simulate multiple attacks and view the threat details. ","type":"lab","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520694","prompt":null,"isOptional":true,"activities":[{"id":"513524","href":"/paths/76/course_templates/21/video/513524","isLocked":false,"duration":63000,"title":"Module review","description":null,"type":"video","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false},{"id":"520695","prompt":null,"isOptional":false,"activities":[{"id":"513525","href":"/paths/76/course_templates/21/quizzes/513525","isLocked":false,"duration":900000,"title":"Quiz: Configuring Virtual Private Cloud for Isolation and Security","description":null,"type":"quiz","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"75108","title":"Course Resources","description":"

PDF links to all modules

","steps":[{"id":"520696","prompt":null,"isOptional":true,"activities":[{"id":"513526","href":"/paths/76/course_templates/21/documents/513526","isLocked":false,"duration":1800000,"title":"Managing Security in Google Cloud - Course Resources","description":null,"type":"document","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":false},{"id":"next-steps","title":"Your Next Steps","description":null,"steps":[{"id":"badge-step","prompt":null,"isOptional":true,"activities":[{"id":"badge","href":null,"isLocked":true,"duration":null,"title":"Course Badge","description":null,"type":"badge","isComplete":false,"inProgress":false,"score":null,"disabled":false}],"isComplete":false,"isTestedOut":false,"allActivitiesRequired":false}],"expanded":true}]

Google Cloud Skills Boost

05

Managing Security in Google Cloud