Notes / GCP

Google Cloud (GCP)

Running Google Cloud well day to day: a hierarchy and organisation policies that scale, labels that keep costs owned, networks and identities locked down, Compute Engine, backups and monitoring that hold up, and a bill that stays under control. 10 guides and 8 PowerShell scripts.

How Google Cloud is organised

IAM and organisation policies set at one level are inherited by everything beneath it. The project is where resources, APIs and billing live.

  1. OrganizationCloud Identity or Workspace domain
  2. FoldersPolicy and access for groups of projects
  3. ProjectsAPIs, quotas, billing link
  4. VPC networksGlobal networks, regional subnets
  5. ResourcesGrouped by labels