Home Microsoft Exams Google Cloud Exams Pricing

Loading page

Curious about new developments and updates? Follow our social media.

Get a free certification question every week.

Microsoft Exams

AZ-104 Administrator
AZ-204 Developer
AZ-900 Fundamentals
All Microsoft Exams

Google Cloud Exams

Associate Data Practitioner
All Google Cloud Exams

Features

Readiness assessment
Practice tests
Focused practice
Explanations & AI tutor
Study guides & quizzes

Compare

vs Tutorials Dojo
All comparisons

Terms Privacy CookiesAbout Pricing

StudyCerts is an independent service and is not affiliated with, endorsed by, or sponsored by any certification body or cloud provider.

Home
Google Cloud Exams
GCP
Professional Cloud Security Engineer
Topics

Professional Cloud Security Engineer

Secure Google Cloud workloads end to end, from identity and network boundaries to data protection and compliance, and track your readiness for the Professional Cloud Security Engineer exam.

Advanced

Prepare and test your skills

Description
Sample Question
Free Trial
Practice Test

Advanced

Prepare and test your skills

Description
Sample Question
Free Trial
Practice Test

Professional Cloud Security Engineer topics

446 topics, grouped by the exam domain each first appears under.

Configuring access

2-step verificationGoogle Cloud feature
2SV conformance monitoringGoogle Cloud feature
Access Context ManagerGoogle Cloud service
Access Context Manager AdminConcept
Access Context Manager EditorConcept
Access Context Manager ReaderConcept
access levelsConcept
access policiesConcept
access scopesConcept
access tokenConcept
Active DirectoryGoogle Cloud service
Active Directory Federation ServicesGoogle Cloud service
Activity AnalyzerGoogle Cloud feature
Admin Activity audit logsGoogle Cloud feature
allow policyConcept
Application Default CredentialsConcept
assertion consumer serviceConcept
attached service accountConcept
attachment pointConcept
attribute conditionsConcept
attribute mappingConcept
basic rolesConcept
BigQueryGoogle Cloud service
BigQuery Data Transfer ServiceGoogle Cloud service
boolean constraintConcept
boolean rulesGoogle Cloud feature
Chrome Enterprise PremiumGoogle Cloud service
Cloud Audit LogsGoogle Cloud service
Cloud Deploy execution service accountConcept
Cloud IdentityGoogle Cloud service
Cloud Identity accountConcept
Cloud Identity Policy APIGoogle Cloud service
Cloud LoggingGoogle Cloud service
Common Expression LanguageConcept
common unified perimeterConcept
conditional IAM bindingConcept
Configuration ManagerGoogle Cloud feature
configure access to foldersTask
constraintConcept
constraints/iam.allowServiceAccountCredentialLifetimeExtensionGoogle Cloud feature
Context-Aware AccessGoogle Cloud feature
Credential Access BoundariesGoogle Cloud feature
credential configuration fileConcept
custom access levelConcept
custom constraintsGoogle Cloud feature
custom roleConcept
Data Access logsGoogle Cloud feature
default OUConcept
default service accountsConcept
denial conditionConcept
deny policiesGoogle Cloud feature
deny policies per resource limitLimit
deny policyConcept
deny ruleConcept
deny rulesConcept
direct child folders per parent limitLimit
direct resource accessConcept
Directory APIGoogle Cloud service
disable a service account keyTask
Disable Automatic IAM Grants for Default Service AccountsGoogle Cloud feature
domain-wide authorityGoogle Cloud feature
dry-run modeGoogle Cloud feature
Endpoint VerificationGoogle Cloud service
Event Threat DetectionGoogle Cloud feature
Firebase consoleGoogle Cloud service
folderConcept
folder nesting limitLimit
gcloud CLIGoogle Cloud service
Google AccountConcept
Google Admin consoleGoogle Cloud service
Google Cloud consoleGoogle Cloud service
Google Cloud Directory SyncGoogle Cloud service
Google Cloud ObservabilityGoogle Cloud service
Google Cloud service accountsConcept
Google groupConcept
Google GroupsGoogle Cloud service
Google Sign-InGoogle Cloud service
Google WorkspaceGoogle Cloud service
hierarchy subtree stringConcept
IAMGoogle Cloud service
IAM ConditionsGoogle Cloud feature
IAM permissionsConcept
IAM policiesConcept
IAM roleConcept
IAM RolesConcept
IAM Service Account Credentials APIGoogle Cloud service
iam.disableServiceAccountKeyCreationGoogle Cloud feature
iam.serviceAccounts.actAsConcept
IAP TCP forwardingGoogle Cloud feature
Identity and Access ManagementGoogle Cloud service
Identity PlatformGoogle Cloud service
identity providerConcept
Identity-Aware ProxyGoogle Cloud service
ingress and egress rulesGoogle Cloud feature
JSON Web TokenConcept
key rotationTask
list constraintConcept
list rule value and size limitLimit
list rulesGoogle Cloud feature
Move a project into a folderTask
multi-factor authenticationGoogle Cloud feature
NameID claimConcept
OAuth 2.0Concept
OAuth application integrationGoogle Cloud feature
OpenID ConnectConcept
OpenID Connect (OIDC) ID tokensConcept
organizationConcept
Organization AdministratorConcept
organization policiesConcept
organization policyGoogle Cloud feature
organization policy constraintsConcept
Organization Policy ServiceGoogle Cloud service
organization resourceConcept
OS LoginGoogle Cloud feature
parent-only permissionsConcept
permanent IDConcept
Policy AnalyzerGoogle Cloud feature
Policy Analyzer for Organization PolicyGoogle Cloud feature
Policy Denied audit logsGoogle Cloud feature
policy inheritanceConcept
Policy IntelligenceGoogle Cloud service
Policy SimulatorGoogle Cloud service
Policy Simulator for Organization PolicyGoogle Cloud feature
post-SSO verificationGoogle Cloud feature
predefined roleConcept
principalConcept
Privileged Access ManagerGoogle Cloud service
projectConcept
projectsConcept
relying party trustConcept
resource hierarchyConcept
Resource ManagerGoogle Cloud service
roleConcept
role bindingConcept
role recommendationsGoogle Cloud feature
SAMLGoogle Cloud feature
SAML 2.0Concept
SAML profileConcept
Secret ManagerGoogle Cloud service
Security Assertion Markup LanguageConcept
Security Command CenterGoogle Cloud service
Security Token ServiceGoogle Cloud service
Self-signed JSON Web TokensConcept
service accountConcept
Service Account Credentials APIGoogle Cloud service
service account impersonationConcept
service account insightsGoogle Cloud feature
service account keyConcept
service account keysConcept
service account keys per service account limitLimit
Service Account OpenID Connect Identity Token Creator roleConcept
Service Account Token CreatorConcept
Service Account Token Creator roleConcept
Service Account UserConcept
service accountsConcept
service agentConcept
service perimeterGoogle Cloud feature
short-lived credentialsConcept
single sign-onConcept
super admin accountsConcept
super-admin user accountConcept
tagsGoogle Cloud feature
Titan security keysGoogle Cloud feature
Use a domain-specific issuerGoogle Cloud feature
user-managed service accountConcept
VPC Service ControlsGoogle Cloud service
Workforce Identity FederationGoogle Cloud feature
workforce identity poolConcept
workforce identity pool providerConcept
Workforce identity poolsGoogle Cloud feature
workforce pools user projectConcept
workload identity federationGoogle Cloud feature
Workload Identity Federation for GKEGoogle Cloud feature
workload identity poolGoogle Cloud feature
workload identity pool providerConcept
Workload Identity User roleConcept

Securing communications and establishing boundary protection

access levelGoogle Cloud feature
access policyConcept
alias IP rangesGoogle Cloud feature
API keyConcept
ApigeeGoogle Cloud service
Application layer inspectionGoogle Cloud feature
backend security policyGoogle Cloud feature
BGP peerConcept
Certificate Authority ServiceGoogle Cloud service
Certificate ManagerGoogle Cloud service
certificate mapGoogle Cloud feature
classic Application Load BalancerGoogle Cloud service
Cloud Armor security policiesGoogle Cloud feature
Cloud DNSGoogle Cloud service
Cloud InterconnectGoogle Cloud service
Cloud Load BalancingGoogle Cloud service
Cloud MonitoringGoogle Cloud service
Cloud NATGoogle Cloud service
Cloud NAT gatewayGoogle Cloud feature
Cloud Next Generation FirewallGoogle Cloud service
Cloud NGFWGoogle Cloud service
Cloud RouterGoogle Cloud service
Cloud Service MeshGoogle Cloud service
Cloud StorageGoogle Cloud service
Cloud Storage V2Google Cloud feature
Cloud VPNGoogle Cloud service
Compute Network Admin roleConcept
consensus modeGoogle Cloud feature
Cross-Cloud InterconnectGoogle Cloud feature
custom mode VPC networkConcept
Dedicated InterconnectGoogle Cloud service
DNS peeringGoogle Cloud feature
DNS server policyGoogle Cloud feature
dynamic port allocationGoogle Cloud feature
dynamic routing modeGoogle Cloud feature
edge security policyGoogle Cloud feature
egress gatewayGoogle Cloud feature
enforced modeGoogle Cloud feature
Export custom routesTask
feedGoogle Cloud feature
FeedsGoogle Cloud feature
firewall endpointGoogle Cloud feature
firewall policiesGoogle Cloud feature
firewall policyGoogle Cloud feature
firewall policy rulesGoogle Cloud feature
firewall policy rules loggingGoogle Cloud feature
firewall rulesGoogle Cloud feature
floor settingsGoogle Cloud feature
gated egressConcept
GKEGoogle Cloud service
Global accessGoogle Cloud feature
global external Application Load BalancerGoogle Cloud service
Google Cloud ArmorGoogle Cloud service
Google SecOpsGoogle Cloud service
Google Security OperationsGoogle Cloud service
Google-managed certificatesGoogle Cloud feature
HA VPNGoogle Cloud service
hierarchical firewall policiesGoogle Cloud feature
hierarchical security policiesGoogle Cloud feature
host projectConcept
IAM deny policiesGoogle Cloud feature
independent modeGoogle Cloud feature
Layer 7 inspectionGoogle Cloud feature
Log RouterGoogle Cloud feature
Logs ExplorerGoogle Cloud feature
MACsecGoogle Cloud feature
Model ArmorGoogle Cloud service
Model Armor floor settingsGoogle Cloud feature
Model Context ProtocolConcept
Network AnalyzerGoogle Cloud feature
Network Connectivity CenterGoogle Cloud service
NetworkPoliciesGoogle Cloud feature
Order Cross-Cloud Interconnect connectionsTask
Partner InterconnectGoogle Cloud service
policy-based routesConcept
Private Google AccessGoogle Cloud feature
Private Service ConnectGoogle Cloud service
Private Service Connect endpointConcept
Private Service Connect endpointsGoogle Cloud feature
Private Service Connect for Google APIsGoogle Cloud feature
project default egress NAT configurationGoogle Cloud feature
proxy-only subnetConcept
Public NATGoogle Cloud feature
reCAPTCHAGoogle Cloud service
regional network firewall policyGoogle Cloud feature
restricted VIPGoogle Cloud feature
RoutesConcept
Secure Web ProxyGoogle Cloud service
service perimetersConcept
service projectConcept
service-level security policiesGoogle Cloud feature
Shared VPCGoogle Cloud feature
SIEMGoogle Cloud feature
static port allocationGoogle Cloud feature
subnetConcept
TLS inspectionGoogle Cloud feature
TLS inspection policyConcept
UDMConcept
URL filteringGoogle Cloud feature
URL filtering logsGoogle Cloud feature
Virtual Private CloudGoogle Cloud service
VLAN attachmentConcept
VPC Accessible servicesGoogle Cloud feature
VPC firewall rulesGoogle Cloud feature
VPC Flow LogsGoogle Cloud feature
VPC networkGoogle Cloud service
VPC Network PeeringGoogle Cloud feature
VPC-native mode networkingGoogle Cloud feature

Ensuring data protection

Artifact AnalysisGoogle Cloud service
Artifact RegistryGoogle Cloud service
automatic rotation of Cloud SQL secretsGoogle Cloud feature
BigQuery MLGoogle Cloud service
Binary AuthorizationGoogle Cloud service
Bucket LockGoogle Cloud feature
Cloud BuildGoogle Cloud service
Cloud Data Loss PreventionGoogle Cloud service
Cloud Data Loss Prevention APIGoogle Cloud service
Cloud EKMGoogle Cloud service
Cloud EKM through a VPCGoogle Cloud feature
Cloud EKM through the internetGoogle Cloud feature
Cloud External Key ManagerGoogle Cloud service
Cloud HSMGoogle Cloud service
Cloud Key Management ServiceGoogle Cloud service
Cloud KMSGoogle Cloud service
Cloud KMS AutokeyGoogle Cloud feature
Cloud KMS keyConcept
Cloud SQLGoogle Cloud service
Cloud SQL DB credentialsConcept
cloud-platform OAuth scopeConcept
CMEKGoogle Cloud feature
Compute EngineGoogle Cloud service
Compute Engine metadata serverGoogle Cloud feature
Confidential ComputingGoogle Cloud feature
Confidential GKE NodesGoogle Cloud feature
Confidential SpaceGoogle Cloud service
Confidential VMGoogle Cloud feature
coordinated external keysConcept
CryptoKeyConcept
customer-managed encryption keysConcept
customer-supplied encryption keysGoogle Cloud feature
Data CatalogGoogle Cloud service
data encryption keyConcept
data lineageGoogle Cloud feature
data residencyConcept
destroying a key versionTask
deterministic encryptionConcept
discovery serviceGoogle Cloud feature
EKM connectionGoogle Cloud feature
Encryption at restConcept
envelope encryptionConcept
External key managerGoogle Cloud feature
Fine-Grained Reader roleConcept
format-preserving encryptionConcept
Gemini Enterprise Agent PlatformGoogle Cloud service
infoTypeConcept
inspection jobGoogle Cloud feature
inspection serviceGoogle Cloud feature
inspection templateConcept
instance metadataConcept
job triggersGoogle Cloud feature
justification reason codesConcept
keyConcept
Key Access JustificationsGoogle Cloud service
Key Access TransparencyGoogle Cloud feature
Key Encryption KeyConcept
Key versionConcept
KeyRingConcept
Knowledge CatalogGoogle Cloud service
likelihoodConcept
manually managed external keysConcept
Model RegistryGoogle Cloud feature
Mutual TLSConcept
Object Lifecycle ManagementGoogle Cloud feature
Object VersioningGoogle Cloud feature
PII Filter transformGoogle Cloud feature
policy tagsConcept
protection levelConcept
re-identify tokenized contentTask
Redact transformGoogle Cloud feature
regional secretsGoogle Cloud feature
retention policyGoogle Cloud feature
SecretConcept
Secret Manager APIGoogle Cloud service
secret versionConcept
Sensitive data profilingGoogle Cloud feature
Sensitive Data ProtectionGoogle Cloud service
Shielded VMsGoogle Cloud feature
shutdown scriptsGoogle Cloud feature
soft deleteGoogle Cloud feature
startup scriptsGoogle Cloud feature
Supply-chain Levels for Software ArtifactsConcept
TinkConcept
tokenizationConcept
Trusted Execution EnvironmentConcept
VM metadataGoogle Cloud feature

Managing operations

Access ApprovalGoogle Cloud service
Access TransparencyGoogle Cloud service
aggregated sinksGoogle Cloud feature
Artifact Analysis APIGoogle Cloud service
Artifact Analysis noteConcept
Artifact guardGoogle Cloud feature
attestationConcept
attestorConcept
Binary Authorization policyConcept
Cloud Asset InventoryGoogle Cloud service
Cloud Build triggerGoogle Cloud feature
Cloud IDSGoogle Cloud service
Cloud RunGoogle Cloud service
Cloud SchedulerGoogle Cloud service
Container Analysis APIGoogle Cloud service
Container Scanning APIGoogle Cloud service
continuous validationGoogle Cloud feature
create an attestationTask
Data Access audit logsGoogle Cloud feature
Data feedsGoogle Cloud feature
Export logs to a SIEM systemTask
field-level access controlsGoogle Cloud feature
findingsConcept
Firewall InsightsGoogle Cloud feature
Firewall Rules LoggingGoogle Cloud feature
Google Distributed Cloud air-gappedGoogle Cloud service
Google Kubernetes EngineGoogle Cloud service
Image BuilderGoogle Cloud feature
instance filtersGoogle Cloud feature
intrusion detection and prevention serviceGoogle Cloud service
Log AnalyticsGoogle Cloud feature
log bucketGoogle Cloud feature
log bucketsGoogle Cloud feature
Log Field AccessorConcept
log sinkConcept
Log sinksGoogle Cloud feature
log viewGoogle Cloud feature
LogEntryConcept
Logs ViewerConcept
Managed constraintsGoogle Cloud feature
Observability AnalyticsGoogle Cloud feature
occurrenceConcept
On-Demand scanningGoogle Cloud feature
OS Config agentConcept
OS Config APIGoogle Cloud service
PatchGoogle Cloud feature
patch compliance reportingGoogle Cloud feature
patch deploymentGoogle Cloud feature
patch jobConcept
policyConcept
policy setsConcept
postureConcept
posture deploymentConcept
Private Logs ViewerConcept
Pub/SubGoogle Cloud service
ruleConcept
Security Health AnalyticsGoogle Cloud service
Security Health Analytics custom modulesGoogle Cloud feature
Security Information and Event ManagementConcept
Security insightsGoogle Cloud feature
security posture serviceGoogle Cloud service
SIEMOrgForwarderConcept
signerConcept
sinksGoogle Cloud feature
Storage Object CreatorConcept
Unified Data ModelGoogle Cloud feature
VM ManagerGoogle Cloud feature
Web Security ScannerGoogle Cloud service

Supporting compliance requirements

Assured WorkloadsGoogle Cloud service
Compliance ManagerGoogle Cloud service
constraints/gcp.resourceLocationsGoogle Cloud feature
egress policyGoogle Cloud feature
shared responsibility modelConcept
Shielded VMGoogle Cloud feature
Software as a serviceConcept

Loading page

Home
Google Cloud Exams
GCP
Professional Cloud Security Engineer
Topics

Professional Cloud Security Engineer

Secure Google Cloud workloads end to end, from identity and network boundaries to data protection and compliance, and track your readiness for the Professional Cloud Security Engineer exam.

Advanced

Prepare and test your skills

Description
Sample Question
Free Trial
Practice Test

Advanced

Prepare and test your skills

Description
Sample Question
Free Trial
Practice Test

Professional Cloud Security Engineer topics

446 topics, grouped by the exam domain each first appears under.

Configuring access

2-step verificationGoogle Cloud feature
2SV conformance monitoringGoogle Cloud feature
Access Context ManagerGoogle Cloud service
Access Context Manager AdminConcept
Access Context Manager EditorConcept
Access Context Manager ReaderConcept
access levelsConcept
access policiesConcept
access scopesConcept
access tokenConcept
Active DirectoryGoogle Cloud service
Active Directory Federation ServicesGoogle Cloud service
Activity AnalyzerGoogle Cloud feature
Admin Activity audit logsGoogle Cloud feature
allow policyConcept
Application Default CredentialsConcept
assertion consumer serviceConcept
attached service accountConcept
attachment pointConcept
attribute conditionsConcept
attribute mappingConcept
basic rolesConcept
BigQueryGoogle Cloud service
BigQuery Data Transfer ServiceGoogle Cloud service
boolean constraintConcept
boolean rulesGoogle Cloud feature
Chrome Enterprise PremiumGoogle Cloud service
Cloud Audit LogsGoogle Cloud service
Cloud Deploy execution service accountConcept
Cloud IdentityGoogle Cloud service
Cloud Identity accountConcept
Cloud Identity Policy APIGoogle Cloud service
Cloud LoggingGoogle Cloud service
Common Expression LanguageConcept
common unified perimeterConcept
conditional IAM bindingConcept
Configuration ManagerGoogle Cloud feature
configure access to foldersTask
constraintConcept
constraints/iam.allowServiceAccountCredentialLifetimeExtensionGoogle Cloud feature
Context-Aware AccessGoogle Cloud feature
Credential Access BoundariesGoogle Cloud feature
credential configuration fileConcept
custom access levelConcept
custom constraintsGoogle Cloud feature
custom roleConcept
Data Access logsGoogle Cloud feature
default OUConcept
default service accountsConcept
denial conditionConcept
deny policiesGoogle Cloud feature
deny policies per resource limitLimit
deny policyConcept
deny ruleConcept
deny rulesConcept
direct child folders per parent limitLimit
direct resource accessConcept
Directory APIGoogle Cloud service
disable a service account keyTask
Disable Automatic IAM Grants for Default Service AccountsGoogle Cloud feature
domain-wide authorityGoogle Cloud feature
dry-run modeGoogle Cloud feature
Endpoint VerificationGoogle Cloud service
Event Threat DetectionGoogle Cloud feature
Firebase consoleGoogle Cloud service
folderConcept
folder nesting limitLimit
gcloud CLIGoogle Cloud service
Google AccountConcept
Google Admin consoleGoogle Cloud service
Google Cloud consoleGoogle Cloud service
Google Cloud Directory SyncGoogle Cloud service
Google Cloud ObservabilityGoogle Cloud service
Google Cloud service accountsConcept
Google groupConcept
Google GroupsGoogle Cloud service
Google Sign-InGoogle Cloud service
Google WorkspaceGoogle Cloud service
hierarchy subtree stringConcept
IAMGoogle Cloud service
IAM ConditionsGoogle Cloud feature
IAM permissionsConcept
IAM policiesConcept
IAM roleConcept
IAM RolesConcept
IAM Service Account Credentials APIGoogle Cloud service
iam.disableServiceAccountKeyCreationGoogle Cloud feature
iam.serviceAccounts.actAsConcept
IAP TCP forwardingGoogle Cloud feature
Identity and Access ManagementGoogle Cloud service
Identity PlatformGoogle Cloud service
identity providerConcept
Identity-Aware ProxyGoogle Cloud service
ingress and egress rulesGoogle Cloud feature
JSON Web TokenConcept
key rotationTask
list constraintConcept
list rule value and size limitLimit
list rulesGoogle Cloud feature
Move a project into a folderTask
multi-factor authenticationGoogle Cloud feature
NameID claimConcept
OAuth 2.0Concept
OAuth application integrationGoogle Cloud feature
OpenID ConnectConcept
OpenID Connect (OIDC) ID tokensConcept
organizationConcept
Organization AdministratorConcept
organization policiesConcept
organization policyGoogle Cloud feature
organization policy constraintsConcept
Organization Policy ServiceGoogle Cloud service
organization resourceConcept
OS LoginGoogle Cloud feature
parent-only permissionsConcept
permanent IDConcept
Policy AnalyzerGoogle Cloud feature
Policy Analyzer for Organization PolicyGoogle Cloud feature
Policy Denied audit logsGoogle Cloud feature
policy inheritanceConcept
Policy IntelligenceGoogle Cloud service
Policy SimulatorGoogle Cloud service
Policy Simulator for Organization PolicyGoogle Cloud feature
post-SSO verificationGoogle Cloud feature
predefined roleConcept
principalConcept
Privileged Access ManagerGoogle Cloud service
projectConcept
projectsConcept
relying party trustConcept
resource hierarchyConcept
Resource ManagerGoogle Cloud service
roleConcept
role bindingConcept
role recommendationsGoogle Cloud feature
SAMLGoogle Cloud feature
SAML 2.0Concept
SAML profileConcept
Secret ManagerGoogle Cloud service
Security Assertion Markup LanguageConcept
Security Command CenterGoogle Cloud service
Security Token ServiceGoogle Cloud service
Self-signed JSON Web TokensConcept
service accountConcept
Service Account Credentials APIGoogle Cloud service
service account impersonationConcept
service account insightsGoogle Cloud feature
service account keyConcept
service account keysConcept
service account keys per service account limitLimit
Service Account OpenID Connect Identity Token Creator roleConcept
Service Account Token CreatorConcept
Service Account Token Creator roleConcept
Service Account UserConcept
service accountsConcept
service agentConcept
service perimeterGoogle Cloud feature
short-lived credentialsConcept
single sign-onConcept
super admin accountsConcept
super-admin user accountConcept
tagsGoogle Cloud feature
Titan security keysGoogle Cloud feature
Use a domain-specific issuerGoogle Cloud feature
user-managed service accountConcept
VPC Service ControlsGoogle Cloud service
Workforce Identity FederationGoogle Cloud feature
workforce identity poolConcept
workforce identity pool providerConcept
Workforce identity poolsGoogle Cloud feature
workforce pools user projectConcept
workload identity federationGoogle Cloud feature
Workload Identity Federation for GKEGoogle Cloud feature
workload identity poolGoogle Cloud feature
workload identity pool providerConcept
Workload Identity User roleConcept

Securing communications and establishing boundary protection

access levelGoogle Cloud feature
access policyConcept
alias IP rangesGoogle Cloud feature
API keyConcept
ApigeeGoogle Cloud service
Application layer inspectionGoogle Cloud feature
backend security policyGoogle Cloud feature
BGP peerConcept
Certificate Authority ServiceGoogle Cloud service
Certificate ManagerGoogle Cloud service
certificate mapGoogle Cloud feature
classic Application Load BalancerGoogle Cloud service
Cloud Armor security policiesGoogle Cloud feature
Cloud DNSGoogle Cloud service
Cloud InterconnectGoogle Cloud service
Cloud Load BalancingGoogle Cloud service
Cloud MonitoringGoogle Cloud service
Cloud NATGoogle Cloud service
Cloud NAT gatewayGoogle Cloud feature
Cloud Next Generation FirewallGoogle Cloud service
Cloud NGFWGoogle Cloud service
Cloud RouterGoogle Cloud service
Cloud Service MeshGoogle Cloud service
Cloud StorageGoogle Cloud service
Cloud Storage V2Google Cloud feature
Cloud VPNGoogle Cloud service
Compute Network Admin roleConcept
consensus modeGoogle Cloud feature
Cross-Cloud InterconnectGoogle Cloud feature
custom mode VPC networkConcept
Dedicated InterconnectGoogle Cloud service
DNS peeringGoogle Cloud feature
DNS server policyGoogle Cloud feature
dynamic port allocationGoogle Cloud feature
dynamic routing modeGoogle Cloud feature
edge security policyGoogle Cloud feature
egress gatewayGoogle Cloud feature
enforced modeGoogle Cloud feature
Export custom routesTask
feedGoogle Cloud feature
FeedsGoogle Cloud feature
firewall endpointGoogle Cloud feature
firewall policiesGoogle Cloud feature
firewall policyGoogle Cloud feature
firewall policy rulesGoogle Cloud feature
firewall policy rules loggingGoogle Cloud feature
firewall rulesGoogle Cloud feature
floor settingsGoogle Cloud feature
gated egressConcept
GKEGoogle Cloud service
Global accessGoogle Cloud feature
global external Application Load BalancerGoogle Cloud service
Google Cloud ArmorGoogle Cloud service
Google SecOpsGoogle Cloud service
Google Security OperationsGoogle Cloud service
Google-managed certificatesGoogle Cloud feature
HA VPNGoogle Cloud service
hierarchical firewall policiesGoogle Cloud feature
hierarchical security policiesGoogle Cloud feature
host projectConcept
IAM deny policiesGoogle Cloud feature
independent modeGoogle Cloud feature
Layer 7 inspectionGoogle Cloud feature
Log RouterGoogle Cloud feature
Logs ExplorerGoogle Cloud feature
MACsecGoogle Cloud feature
Model ArmorGoogle Cloud service
Model Armor floor settingsGoogle Cloud feature
Model Context ProtocolConcept
Network AnalyzerGoogle Cloud feature
Network Connectivity CenterGoogle Cloud service
NetworkPoliciesGoogle Cloud feature
Order Cross-Cloud Interconnect connectionsTask
Partner InterconnectGoogle Cloud service
policy-based routesConcept
Private Google AccessGoogle Cloud feature
Private Service ConnectGoogle Cloud service
Private Service Connect endpointConcept
Private Service Connect endpointsGoogle Cloud feature
Private Service Connect for Google APIsGoogle Cloud feature
project default egress NAT configurationGoogle Cloud feature
proxy-only subnetConcept
Public NATGoogle Cloud feature
reCAPTCHAGoogle Cloud service
regional network firewall policyGoogle Cloud feature
restricted VIPGoogle Cloud feature
RoutesConcept
Secure Web ProxyGoogle Cloud service
service perimetersConcept
service projectConcept
service-level security policiesGoogle Cloud feature
Shared VPCGoogle Cloud feature
SIEMGoogle Cloud feature
static port allocationGoogle Cloud feature
subnetConcept
TLS inspectionGoogle Cloud feature
TLS inspection policyConcept
UDMConcept
URL filteringGoogle Cloud feature
URL filtering logsGoogle Cloud feature
Virtual Private CloudGoogle Cloud service
VLAN attachmentConcept
VPC Accessible servicesGoogle Cloud feature
VPC firewall rulesGoogle Cloud feature
VPC Flow LogsGoogle Cloud feature
VPC networkGoogle Cloud service
VPC Network PeeringGoogle Cloud feature
VPC-native mode networkingGoogle Cloud feature

Ensuring data protection

Artifact AnalysisGoogle Cloud service
Artifact RegistryGoogle Cloud service
automatic rotation of Cloud SQL secretsGoogle Cloud feature
BigQuery MLGoogle Cloud service
Binary AuthorizationGoogle Cloud service
Bucket LockGoogle Cloud feature
Cloud BuildGoogle Cloud service
Cloud Data Loss PreventionGoogle Cloud service
Cloud Data Loss Prevention APIGoogle Cloud service
Cloud EKMGoogle Cloud service
Cloud EKM through a VPCGoogle Cloud feature
Cloud EKM through the internetGoogle Cloud feature
Cloud External Key ManagerGoogle Cloud service
Cloud HSMGoogle Cloud service
Cloud Key Management ServiceGoogle Cloud service
Cloud KMSGoogle Cloud service
Cloud KMS AutokeyGoogle Cloud feature
Cloud KMS keyConcept
Cloud SQLGoogle Cloud service
Cloud SQL DB credentialsConcept
cloud-platform OAuth scopeConcept
CMEKGoogle Cloud feature
Compute EngineGoogle Cloud service
Compute Engine metadata serverGoogle Cloud feature
Confidential ComputingGoogle Cloud feature
Confidential GKE NodesGoogle Cloud feature
Confidential SpaceGoogle Cloud service
Confidential VMGoogle Cloud feature
coordinated external keysConcept
CryptoKeyConcept
customer-managed encryption keysConcept
customer-supplied encryption keysGoogle Cloud feature
Data CatalogGoogle Cloud service
data encryption keyConcept
data lineageGoogle Cloud feature
data residencyConcept
destroying a key versionTask
deterministic encryptionConcept
discovery serviceGoogle Cloud feature
EKM connectionGoogle Cloud feature
Encryption at restConcept
envelope encryptionConcept
External key managerGoogle Cloud feature
Fine-Grained Reader roleConcept
format-preserving encryptionConcept
Gemini Enterprise Agent PlatformGoogle Cloud service
infoTypeConcept
inspection jobGoogle Cloud feature
inspection serviceGoogle Cloud feature
inspection templateConcept
instance metadataConcept
job triggersGoogle Cloud feature
justification reason codesConcept
keyConcept
Key Access JustificationsGoogle Cloud service
Key Access TransparencyGoogle Cloud feature
Key Encryption KeyConcept
Key versionConcept
KeyRingConcept
Knowledge CatalogGoogle Cloud service
likelihoodConcept
manually managed external keysConcept
Model RegistryGoogle Cloud feature
Mutual TLSConcept
Object Lifecycle ManagementGoogle Cloud feature
Object VersioningGoogle Cloud feature
PII Filter transformGoogle Cloud feature
policy tagsConcept
protection levelConcept
re-identify tokenized contentTask
Redact transformGoogle Cloud feature
regional secretsGoogle Cloud feature
retention policyGoogle Cloud feature
SecretConcept
Secret Manager APIGoogle Cloud service
secret versionConcept
Sensitive data profilingGoogle Cloud feature
Sensitive Data ProtectionGoogle Cloud service
Shielded VMsGoogle Cloud feature
shutdown scriptsGoogle Cloud feature
soft deleteGoogle Cloud feature
startup scriptsGoogle Cloud feature
Supply-chain Levels for Software ArtifactsConcept
TinkConcept
tokenizationConcept
Trusted Execution EnvironmentConcept
VM metadataGoogle Cloud feature

Managing operations

Access ApprovalGoogle Cloud service
Access TransparencyGoogle Cloud service
aggregated sinksGoogle Cloud feature
Artifact Analysis APIGoogle Cloud service
Artifact Analysis noteConcept
Artifact guardGoogle Cloud feature
attestationConcept
attestorConcept
Binary Authorization policyConcept
Cloud Asset InventoryGoogle Cloud service
Cloud Build triggerGoogle Cloud feature
Cloud IDSGoogle Cloud service
Cloud RunGoogle Cloud service
Cloud SchedulerGoogle Cloud service
Container Analysis APIGoogle Cloud service
Container Scanning APIGoogle Cloud service
continuous validationGoogle Cloud feature
create an attestationTask
Data Access audit logsGoogle Cloud feature
Data feedsGoogle Cloud feature
Export logs to a SIEM systemTask
field-level access controlsGoogle Cloud feature
findingsConcept
Firewall InsightsGoogle Cloud feature
Firewall Rules LoggingGoogle Cloud feature
Google Distributed Cloud air-gappedGoogle Cloud service
Google Kubernetes EngineGoogle Cloud service
Image BuilderGoogle Cloud feature
instance filtersGoogle Cloud feature
intrusion detection and prevention serviceGoogle Cloud service
Log AnalyticsGoogle Cloud feature
log bucketGoogle Cloud feature
log bucketsGoogle Cloud feature
Log Field AccessorConcept
log sinkConcept
Log sinksGoogle Cloud feature
log viewGoogle Cloud feature
LogEntryConcept
Logs ViewerConcept
Managed constraintsGoogle Cloud feature
Observability AnalyticsGoogle Cloud feature
occurrenceConcept
On-Demand scanningGoogle Cloud feature
OS Config agentConcept
OS Config APIGoogle Cloud service
PatchGoogle Cloud feature
patch compliance reportingGoogle Cloud feature
patch deploymentGoogle Cloud feature
patch jobConcept
policyConcept
policy setsConcept
postureConcept
posture deploymentConcept
Private Logs ViewerConcept
Pub/SubGoogle Cloud service
ruleConcept
Security Health AnalyticsGoogle Cloud service
Security Health Analytics custom modulesGoogle Cloud feature
Security Information and Event ManagementConcept
Security insightsGoogle Cloud feature
security posture serviceGoogle Cloud service
SIEMOrgForwarderConcept
signerConcept
sinksGoogle Cloud feature
Storage Object CreatorConcept
Unified Data ModelGoogle Cloud feature
VM ManagerGoogle Cloud feature
Web Security ScannerGoogle Cloud service

Supporting compliance requirements

Assured WorkloadsGoogle Cloud service
Compliance ManagerGoogle Cloud service
constraints/gcp.resourceLocationsGoogle Cloud feature
egress policyGoogle Cloud feature
shared responsibility modelConcept
Shielded VMGoogle Cloud feature
Software as a serviceConcept