Cover Photo generated with AI - 12th November 2023 at 11:00am by DALL-E 3 via Bing Chat
Introduction
In my last two posts, I talked about training on GCP and then studying for and passing the PCSE exam.
In this post, I wanted to gather for you every resource that I used that was free, and doesn’t require an element of chance - it’s all immediately accessible for free and at most requires signup to create an account, though most of it doesn’t even require that.
Blogs/Articles
- GCP Sketchnotes by Priyanka Vergadia (aka The Cloud Girl) (I discovered Priyankas’ amazing content via her book Visualizing Google Cloud: 101 Illustrated References for Cloud Engineers and Architects which my boss bought for me)
- Google Cloud Documentation (Yes, sometimes you have to RTFM)
- Google Cloud Security Infrastructure Design Overview
- Google Cloud Directory Sync (GCDS) Best Practices
- Cloud Key Management Service deep dive
- Application Auth methods
- What you need to know about Confidential Computing
- Transform data to secure it: Use Cloud DLP
- Default encryption at rest
- Encryption in transit
- Cloud Architecture Center
- Disaster recovery scenarios for data
- Data incident response process
- How to use Packet Mirroring for IDS in different VPC designs
- Take control of your firewall rules with Firewall Insights
- Container Threat Detection conceptual overview
- Scenarios for exporting Cloud Logging data: Splunk
- Security log analytics in Google Cloud
- Enhancing our privacy commitments to customers
- Advancing customer control in the cloud
- Engaging in a European dialogue on customer controls and open cloud solutions
- Logs data: A step by step guide for overcoming common compliance challenges (PDF)
- Google Transparency Report
- Encryption in transit
- Compliance resource center
- PCI Data Security Standard compliance
- Data residency, operational transparency, and privacy for European customers on Google Cloud (PDF)
- Strengthening our European data sovereignty offerings with Assured Workloads for EU
- Scenarios for exporting Cloud Logging: Compliance requirements
- NIST Cybersecurity Framework & Google Cloud (PDF)
- Government Requests for Cloud Customer Data (PDF)
- Shift security left with on-demand vulnerability scanning
- How to conduct live network forensics in GCP
- Building internet connectivity for private VMs
- Data deletion on Google Cloud
- Anthos security
- Building Secure and Reliable Systems (BOOK - read free online)
- Google SRE Book (BOOK - read free online)
Courses
- QwikLabs (there are some free courses)
- Google Cloud Training (some free, some not)
- Google Cloud Fundamentals: Core Infrastructure (Coursera)
- Google Cloud Fundamentals: Core Infrastructure (Pluralsight - 10 Day Free Trial)
Videos
Getting Started with Security Command Center (9 video playlist)
Google Cloud Security Professional Certification (Playlist)
Google Cloud Security Showcase (Playlist)
Podcasts
- Zero Trust: Fast Forward from 2010 to 2021
- Impersonating Service Accounts in GCP and Beyond: Cloud Security Is About IAM?
- Cloud Migrations: Security Perspectives from The Field
- Preparing for Cloud Migrations from a CISO Perspective, Part 1
- Preparing for Cloud Migrations from a CISO Perspective, Part 2
- Scaling Google Kubernetes Engine Security
- Confidentially Speaking
- Confidentially Speaking 2: Cloudful of Secrets
- Data Security in the Cloud
- The Magic of Cloud Migration: Learn Security Lessons from the Field
As ever, thanks for reading and feel free to leave comments down below!
If you like what I do and appreciate the time and effort and expense that goes into my content you can always