0% found this document useful (0 votes)
71 views

Week 1 - Intro, IAM, Resource Hierarchy Slides - Gslides

The document provides an agenda and instructions for a Google Cloud Innovators Bootcamp training session. The 6-week program will cover topics including Compute Engine, Kubernetes Engine, Cloud Storage, Cloud Monitoring, and exam revision. Trainees are expected to complete outside work like Qwiklabs exercises and Coursera course activation. The homework mentioned is to book the professional cloud architect exam and complete Qwiklabs and Coursera assignments on topics like Cloud Shell, IAM, and creating VMs.

Uploaded by

Nguyễn Trung
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
71 views

Week 1 - Intro, IAM, Resource Hierarchy Slides - Gslides

The document provides an agenda and instructions for a Google Cloud Innovators Bootcamp training session. The 6-week program will cover topics including Compute Engine, Kubernetes Engine, Cloud Storage, Cloud Monitoring, and exam revision. Trainees are expected to complete outside work like Qwiklabs exercises and Coursera course activation. The homework mentioned is to book the professional cloud architect exam and complete Qwiklabs and Coursera assignments on topics like Cloud Shell, IAM, and creating VMs.

Uploaded by

Nguyễn Trung
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 52

Innovators Bootcamp

We will start in 5 minutes.


Google Cloud Innovators Bootcamp
#GetGoGCP

Training Week 1
To Help Optimize Remote Call:
● If nearby or in a shared meeting room, share screens

● Keep video & mic off throughout the call. Use chat to
ask questions/add comments
○ Try to post concise but detailed questions and if
further details are needed we will ask you to
unmute and describe further.
Intros, Engagement
and Agenda
Google Cloud Innovators Bootcamp
(GIB) #GetGoGCP Program Timeline

Week 1 Week 2 Week 3 Week 4 Week 5 Week 6

Compute & GCP Basics Google Compute Engine Networking on Cloud Google Cloud Storage Cloud Monitoring Revision & Exam Revision
Resources & Resource Google Kubernetes Engine Connecting to GCP Databasing Cloud APM
Hierarchy Google App Engine Firewalls and Load Cloud IAM
Introduction to IAM Balancing GCP Best Practices
SDK Installation &
Rundown
Expectations ● This course is an aid

● Outside effort required

● Qwiklabs and Coursera Activation

● Questions (Live in chat or email us during


the week at [email protected])

● Different places in the cloud journey


Today’s Homework:
Book your exam

Yes that’s right.. Before you’ve even started studying!


Book Your Exam
● Book through
webassessor.com
● Cost $200 USD per attempt
● Exam Options
○ In-Person
○ Remote
Today’s Agenda
Computing & Cloud Basics

What is GCP

Resources and Resource Hierarchy

Introduction to IAM

Google Cloud SDK

GCP Pricing

Quiz
Exam’s Domain ● Setting up a cloud solution environment

● Planning & Configuring a cloud solution

● Deploying and implementing a cloud


solution

● Ensuring successful operation of a cloud


solution

● Configuring Access & Security


Google Cloud SDK - Install
and Setup

● SDK = Software Development Kit

● VERY IMPORTANT: part of Professional Cloud Architect EXAM!

● To Install: https://cloud.google.com/sdk
Rules of Thumb for Everything we
Cover

● Know how to create it (In Console & SDK)

● Know If/How it Scales (In Console & SDK)

● Know If/How it would look like in a cross-project/Org-Wide setting


Computing &
Cloud Basics
Foundations
Scaling Examples
Foundations

Specialised and high


performance

General purpose lower


performance
What is Cloud?
“Cloud computing is the on-demand availability of computer system
resources, especially data storage and computing power, without direct
active management by the user. The term is generally used to describe
data centers available to many users over the Internet.”

Google Cloud
Introduction to the
Google Cloud Platform
Cloud Services
What Makes Google Cloud Different
Protect systems,
Best-in-class Security
data, and users

Hybrid & Multi-Cloud Enables choice

Ease of use
Fully Managed No Ops
with serverless

Intelligence in
Embedded AI & ML
everything

Bringing culture of innovation


Best of Google
to customers and partners
Regions, Zones, Edge/POP’s

https://cloud.google.com/compute/docs/regions-zones
Innovators Bootcamp

5 Minute Break
Introduction to
Resources & Resource
Hierarchy
Organization hierarchy
Organization
Folders

Top-down
inheritance You will primarily use
projects and
IAM
Projects

Additive only resources

Org Policy
Exceptions
supported
Resources
Billing Accounts
Payment Profiles
Demo

● Create a GCP Project


Introduction to
Identity & Access
Management (IAM)
What is Cloud Identity?

● Cloud Identity is an Identity as a Service


Chrome
Apps (IDaaS) solution that allows you to
for Work
centrally manage users and groups who
Android can access GCP and Google Workspace
for Work
cloud resources
People
● It is the same identity service that powers
Google Workspace and can also be used as
IdP for 3rd party applications (supports
Google SAML and LDAP applications)
Cloud Identity
Cloud
Devices

Google
Workspace
Cloud Identity provides

Single pane of glass

User lifecycle Single


Account security Cloud Directory
management sign-on

Device Reporting App Extensible


management and analytics management through APIs
Users and groups

Cloud
Manual
Identity
Users

APIs Groups
Cloud
IAM GCP
Resources
CSV Org Units
Upload

Users and groups created in Cloud Identity are the Google Identities that can be assigned IAM roles in the GCP console

The Cloud Identity roles only manage aspects of Cloud Identity such as user/group management, and are different from
GCP roles which manage permissions to cloud resources
Two Consoles for Administration

Cloud Identity (admin.google.com) GCP (console.cloud.google.com)


Managing Users, Groups, and Authentication settings Roles & Authorization for GCP
Administration and
Management

Cloud Identity GCP


Admin console, Admin SDK Console, gcloud CLI, API

● Creating and managing user accounts ● Provisioning Cloud Platform resources


● Creating and managing groups ● Assigning access and identity
● Assigning access and identity management roles for Cloud Platform
administration roles for users resources to users and groups set in
● Enforcing authentication options for Cloud Identity
users ● Configuring networking and
on-premises integration
IAM Objects
User account Group Service account

Identity
IAM role
Resources
Service Accounts are also
Resources

Identity IAM role Resource

is access
granted to

User/Group Service Account User Service account


role
Google Cloud SDK
Google Cloud SDK
https://cloud.google.com/sdk/
Demo
● Create a new user and add
one of your co workers; do not
grant admin role
● Cloud Shell
● Config Commands
GCP Pricing
How is Pricing Placed with GCP
Start running workloads for free

Only pay for what you use


$300 20+
in free credits free products
Save up to 57% on workloads

Stay in control of your spending

Pricing calculator
Estimate your costs
Demo
Pricing Calculator
Homework Activity

● Set up a GCP Account

● Set up gcloud on a machine by following


instructions here:
https://cloud.google.com/sdk/install

● Create a gcloud configuration with the


GCP account you created earlier. Make
sure this configuration is active!
Homework
● Enroll Coursera course
● Qwiklabs Activity: Working with the Google Cloud Console and Cloud Shell & Cloud
IAM

Additional Resources
Youtube Video Links (Additional reading links in presenter notes!)

GCP Regions & Zones

Newbie to GCP Essentials

Introduction to IAM
Homework
● QwikLabs Activity: “Getting Started with Cloud Shell & gcloud” & “Creating A VM”
● Coursera - ACE - Module 2

Additional Resources

Youtube Video Links (Additional reading links in presenter notes!)

GCP Regions & Zones

Newbie to GCP Essentials

Introduction to IAM
Quiz
https://docs.google.com/forms/d/e/1FAIpQ
LSfSDqPwJXskUAK2k-nayc3P6YoakSAmDf
LV5K7ROfrTuiB29g/viewform

Will go through in 10 mins time


Need to use your registered email address to track attendance
Quiz - Answers

● Use Google groups where


possible as they can help you
manage users at scale

● Always follow the principle of


least privilege when granting
access thus providing the
viewer role to the group.

Find out more:


https://cloud.google.com/iam/docs/groups-in-cloud-console
https://cloud.google.com/iam/docs/using-iam-securely
Quiz - Answers

● Understand how your costs can fluctuate


based on location, workloads, and other
variables with the pricing calculator

Check out the pricing calculator :


https://cloud.google.com/products/calculator
Quiz - Answers

● A service account is a special kind of


account used by an application or a
virtual machine (VM) instance

Find out more:


https://cloud.google.com/iam/docs/service-accounts
Quiz - Answers
● Leverage the Google Cloud resource
hierarchy and the resources that can be
managed using Resource Manager
using Organization, Folders and
Projects.

Find out more:


https://cloud.google.com/resource-manager/docs
/cloud-platform-resource-hierarchy
Quiz - Answers

● gcloud config configurations -


manage the set of gcloud named
configurations

Find out more:


https://cloud.google.com/sdk/gcloud/ref
erence/config/configurations
See you next week same time
same place!
● If you have any questions , please email us on [email protected]
● Don’t forget your homework.
Feedback
https://docs.google.com/forms/d/e/1FAIpQ
LScsxRPks3LJtz2Z3f1v7yBZbApxXlddzbAax
gULbSQuu-yOTA/viewform?usp=pp_url

5 minutes
Need to use your registered email address to track attendance
Innovators Bootcamp

That’s a wrap!

You might also like