Secure Google Cloud workloads end to end, from identity and network boundaries to data protection and compliance, and track your readiness for the Professional Cloud Security Engineer exam.
Points to what builds on itWorks with or alternative toHover or tap a line to see what connects the two
organization policy secures Google Cloud resource hierarchy From the official documentation: “As the [organization policy administrator](/iam/docs/roles-permissions/orgpolicy#orgpolicy.policyAdmin), you can define an organization policy, which is a set of restrictions called *constraints* that apply to Google Cloud resources and descendants of those resources in the…”
Google Cloud resource hierarchy works with Identity and Access Management From the official documentation: “In general, IAM policies governing access to resources are inherited through the [Google Cloud resource hierarchy](/resource-manager/docs/cloud-platform-resource-hierarchy#resource-hierarchy-detail).”
Identity and Access Management works with tags From the official documentation: “You can use tags and IAM conditions to conditionally grant role bindings to users in your hierarchy.”
Identity and Access Management works with Identity-Aware Proxy From the official documentation: “IAP re-checks Identity and Access Management (IAM) authorization for all requests during valid sessions.”
Identity and Access Management works with OS Login From the official documentation: “OS Login lets you to manage access to instances using IAM.”
Cloud Asset Inventory works with organization policy From the official documentation: “Each resource that violates the new custom constraint or organization policy is listed with a link to the resource entry in Cloud Asset Inventory.”
Identity and Access Management secures Cloud Asset Inventory From the official documentation: “Cloud Asset Inventory uses [Identity and Access Management](/iam/docs) (IAM) for access control.”
organization policy configures Identity-Aware Proxy From the official documentation: “You can control IAP enablement by setting [organization policy](/resource-manager/docs/organization-policy/overview) constraints.”
organization policy configures OS Login From the official documentation: “The following instructions detail how to enable OS Login using an organization policy in GKE.”
organization policy configures tags From the official documentation: “You can enforce mandatory tags on Dataproc Metastore federation and service resources using an organization policy.”