Hands-On Labs in Google Cloud for Security Engineers

Overview

Class Central Tips

Security is an uncompromising feature of Google Cloud services, and Google Cloud has developed specific tools for ensuring safety and identity across your projects. In this course you will get added hands-on practice understanding and securing resources with multiple Google Cloud services including Google Kubernetes Engine (GKE). This course is unlike other courses, in that it consists of one module of background videos, followed by a series of hands-on practice exercises on Google Cloud via Qwiklabs. The practice modules include no videos, lectures, or quizzes - just more practice on real Google Cloud. If you enjoyed this course, you can check out the full quest including a challenge lab that requires a solution to be built with minimal guidance. You will have an opportunity to earn a Google Cloud digital Skill Badge on completion as well! Visit - google.qwiklabs.com and look for ‘Secure Workloads in Google Kubernetes Engine’ and ‘Ensure Access & Identity in Google Cloud’.

Syllabus

Welcome to Security in Google Cloud: Hands-On Practice

In this module, you'll get to know how to interact with the course.

IAM Custom Roles

In this lab, you create custom roles using Cloud Console and gcloud.

VPC Network Peering

In this lab, you set up peering between two VPC networks.

Setting up a Private Kubernetes Cluster

In this lab, you create and configure a private cluster for Kubernetes in Google Cloud. The virtual machines on which the Kubernetes nodes run will not be externally accessible.

How to Use a Network Policy on Google Kubernetes Engine

In this lab, you provision two service accounts to represent user personas and three namespaces: dev, test, and prod. You will test the access controls of the personas in each namespace.

Using Role-based Access Control in Kubernetes Engine

In this lab, you provision two service accounts to represent user personas and three namespaces: dev, test, and prod. You will test the access controls of the personas in each namespace.