After doing these courses, I feel confident creating professional visualizations and dashboards
Shoebur RahmanProcurement Specialist, Giz Bangladesh
Course Description
Lay the Foundations of Cloud Security
Strong cloud security starts with knowing who is responsible for what. This first course in the Security in Google Cloud series introduces Google’s approach to security, the shared security responsibility model, and the threats Google Cloud mitigates on your behalf.Control Who Can Do What
You’ll learn to manage administrative identities with Cloud Identity, then use Resource Manager and Identity and Access Management (IAM) to organize resources and grant access. You’ll work with predefined and custom roles, service accounts, and IAM best practices such as least privilege and separation of duties, and configure IAM in a hands-on lab.Secure and Monitor Your VPC Networks
Next, you’ll configure Virtual Private Cloud (VPC) networks for isolation, security, and logging, covering firewall rules, load balancer SSL policies, peering, Cloud Interconnect, VPC Service Controls, and Private Google Access. Labs on VPC firewalls, VPC Flow Logs, and Cloud IDS help you put this into practice. By the end, you’ll be ready to set up a secure foundation for any Google Cloud environment.Prerequisites
There are no prerequisites for this course
Curriculum
Course outline
1
Security in Google Cloud: Series overview
In this introduction, you'll explore the course goals and preview each section.
2
Foundations of Google Cloud security
This section of the course introduces Google Cloud's foundational security principles, including the Zero Trust model, the shift from traditional shared responsibility to a modern Shared Fate partnership, the types of infrastructure-level threats mitigated at scale, and the three Pillars of Trust: Access Transparency, Access Approval, and Compliance.
3
Managing workforce identity
This section of the course covers configuring Google Cloud identity services to manage workforce access, including Cloud Identity editions, user synchronization via GCDS and Single Sign-On (SSO), and syncless authentication through Workforce Identity Federation. You will also explore Managed Service for Microsoft Active Directory, user and group management, and critical authentication best practices like Multi-Factor Authentication (MFA).
4
Identity and Access Management
Master Google Cloud's fundamental security perimeter through Identity and Access Management (IAM) and resource hierarchy governance. In this module, you will configure basic, predefined, and custom roles, and apply context-aware IAM Conditions. You will evaluate the differences between IAM Allow/Deny policies and governance-focused Organization Policies. Finally, you will leverage Policy Intelligence tools—Troubleshooter, Analyzer, Recommender, and Simulator—to diagnose access, test changes, and strictly enforce the principle of least privilege.
5
Course resources
This module focuses on securing your cloud network perimeter and protecting data in transit. You will explore how to design secure, isolated Virtual Private Cloud (VPC) architectures and control traffic flow using Cloud Next-Generation Firewall (NGFW) policies. The module also covers building a Zero-Trust perimeter to prevent data exfiltration and setting up private access pathways for secure application connectivity. Finally, you will learn how to actively monitor your environment and use advanced threat protection tools to detect and respond to network-level risks.
6
Course review
Course resources
R
Manage Security in Google Cloud
Course
Complete
