Browsed by
Month: May 2026

Implement Cloud Security Fundamentals on Google Cloud: Challenge Lab: GSP342

Implement Cloud Security Fundamentals on Google Cloud: Challenge Lab: GSP342

? Lab Reference: Implement Cloud Security Fundamentals on Google Cloud: Challenge Lab (Lab Code: GSP342). A concise walkthrough to complete the GSP342 challenge lab with a 100% score. The following configuration settings are used throughout this guide: export PROJECT_ID=”qwiklabs-gcp-01-8c1086536ffa” export REGION=”us-west1″ export ZONE=”us-west1-b” export CUSTOM_ROLE=”orca_storage_editor_330″ export SA_NAME=”orca-private-cluster-410-sa” export CLUSTER_NAME=”orca-cluster-412″ Architecture Requirements IAM: Dedicated service account with least-privilege logging/monitoring roles and a custom storage role. Network: Private GKE cluster with public endpoints disabled, restricted to the orca-jumphost management IP. Step 1:…

Read More Read More

Secrets Management for DevOps Teams

Secrets Management for DevOps Teams

Secrets are everywhere in modern environments: API keys, database passwords, access tokens, service accounts, SSH keys, certificates, signing keys, cloud credentials, CI/CD tokens, and so on. The problem usually starts when these credentials are treated just as configuration values. Someone creates an API key, puts it into a pipeline variable, another person copies it into a .env file, somebody else uses the same key in another application, and a year later nobody knows where the key is used or who…

Read More Read More