Here's a guide to learning fundamental concepts of core infrastructure related to Google Cloud Platform (GCP). This is ideal for someone new to the GCP ecosystem and a good first starting point.
What is IaaS, PaaS, and SaaS?
IaaS (Infrastructure as a Service), PaaS (Platform as a Service), and SaaS (Software as a Service) are service models in cloud computing.
Google Cloud Network
GCP's global network includes:
- Regions: Geographical locations containing multiple zones.
- Zones: Isolated data centers within a region.
- Edge locations: Locations closer to users for lower latency.
Security Layers in GCP
GCP uses a multi-layered approach to security:
- Hardware & Peripheral Level: Custom hardware, secure boot stack, and premises security.
- Service Deployment Layer: Encrypted RPC calls between services; intra-data center communication secure.
- User Identity Layer: Identity management and support for multi-factor authentication (2FA).
- Storage Level: Encryption of data at rest and in transit.
- Internet Communication Layer: Google Front End with public-private key pairs and X.509 certificates. Protects against DoS attacks.
- Operational Security Layer: Intrusion detection, insider risk reduction, U2F enforcement for employees, and secure software development practices.