これらのコースを受講したことで、プロフェッショナルなビジュアライゼーションやダッシュボードを自信を持って作成できるようになりました
Shoebur Rahman調達スペシャリスト、Giz Bangladesh
コースの説明
Lay the Foundations of Cloud Security
Strong cloud security starts with knowing who is responsible for what. This first course in the Security in Google Cloud series introduces Google’s approach to security, the shared security responsibility model, and the threats Google Cloud mitigates on your behalf.Control Who Can Do What
You’ll learn to manage administrative identities with Cloud Identity, then use Resource Manager and Identity and Access Management (IAM) to organize resources and grant access. You’ll work with predefined and custom roles, service accounts, and IAM best practices such as least privilege and separation of duties, and configure IAM in a hands-on lab.Secure and Monitor Your VPC Networks
Next, you’ll configure Virtual Private Cloud (VPC) networks for isolation, security, and logging, covering firewall rules, load balancer SSL policies, peering, Cloud Interconnect, VPC Service Controls, and Private Google Access. Labs on VPC firewalls, VPC Flow Logs, and Cloud IDS help you put this into practice. By the end, you’ll be ready to set up a secure foundation for any Google Cloud environment.前提条件
このコースに前提条件はありません
カリキュラム
コース概要
1
Security in Google Cloud: Series overview
In this introduction, you'll explore the course goals and preview each section.
2
Foundations of Google Cloud security
This section of the course introduces Google Cloud's foundational security principles, including the Zero Trust model, the shift from traditional shared responsibility to a modern Shared Fate partnership, the types of infrastructure-level threats mitigated at scale, and the three Pillars of Trust: Access Transparency, Access Approval, and Compliance.
3
Managing workforce identity
This section of the course covers configuring Google Cloud identity services to manage workforce access, including Cloud Identity editions, user synchronization via GCDS and Single Sign-On (SSO), and syncless authentication through Workforce Identity Federation. You will also explore Managed Service for Microsoft Active Directory, user and group management, and critical authentication best practices like Multi-Factor Authentication (MFA).
4
Identity and Access Management
Master Google Cloud's fundamental security perimeter through Identity and Access Management (IAM) and resource hierarchy governance. In this module, you will configure basic, predefined, and custom roles, and apply context-aware IAM Conditions. You will evaluate the differences between IAM Allow/Deny policies and governance-focused Organization Policies. Finally, you will leverage Policy Intelligence tools—Troubleshooter, Analyzer, Recommender, and Simulator—to diagnose access, test changes, and strictly enforce the principle of least privilege.
5
Course resources
This module focuses on securing your cloud network perimeter and protecting data in transit. You will explore how to design secure, isolated Virtual Private Cloud (VPC) architectures and control traffic flow using Cloud Next-Generation Firewall (NGFW) policies. The module also covers building a Zero-Trust perimeter to prevent data exfiltration and setting up private access pathways for secure application connectivity. Finally, you will learn how to actively monitor your environment and use advanced threat protection tools to detect and respond to network-level risks.
6
Course review
Course resources
R
Manage Security in Google Cloud
コース修了
