Secure On Premises Bi Tool Bigquery Integration

What the solution is

The Simba JDBC and ODBC drivers for BigQuery allow legacy or custom applications that rely on standard SQL protocols to connect to BigQuery without requiring native API integration. Private Google Access (or Private Service Connect) allows on-premises networks connected via Cloud VPN or Cloud Interconnect to reach Google APIs using internal IP addresses. VPC Service Controls creates a secure perimeter around Google Cloud resources to mitigate data exfiltration risks.

How it meets the requirements

• Integrate without native API support: The JDBC/ODBC drivers act as a bridge, translating standard SQL queries from the custom tool into BigQuery API requests seamlessly.
• No public internet: By configuring Private Google Access for on-premises hosts, API traffic from the on-premises server routes through the private VPN or Interconnect tunnel directly to Google's network, ensuring data never traverses the public internet.
• Protect from data exfiltration: VPC Service Controls enforces a strict security perimeter that blocks any access to BigQuery from outside the authorized hybrid network, satisfying the zero-trust access requirements.

Key advantages

• Seamless integration: Eliminates the need to rewrite custom applications to use REST or gRPC APIs, saving significant development time.
• Enhanced security: Secures data in transit using private, dedicated network paths rather than relying on public endpoints.
• Enterprise-grade protection: Provides robust exfiltration protection for sensitive data warehouses, ensuring data cannot be copied to unauthorized external buckets or projects.

Why this is optimal

This architecture seamlessly integrates legacy BI tools with modern cloud data warehouses while adhering to strict zero-trust and private networking mandates. It leverages purpose-built drivers for application compatibility and native Google Cloud networking security controls to ensure end-to-end protection.