Security Best Practices in Google Cloud: Data

Build a Data Security Posture

Data is usually the most valuable thing you store in the cloud, and the most attractive target. This intermediate course shows you how to implement a data security posture management approach on Google Cloud by combining data discovery, classification, access control, and encryption.

Govern Access and Discover Sensitive Data

You’ll enforce uniform access controls for object storage by moving from legacy access control lists (ACLs) to IAM-only policies and enabling Public Access Prevention. Then you’ll use Sensitive Data Protection to automatically discover and classify sensitive data such as PII at scale. A hands-on lab has you secure BigQuery data with fine-grained access controls.

Share Safely and Encrypt With Confidence

Next, you’ll set up time-bound data sharing that grants limited access without permanently widening your attack surface. You’ll design encryption hierarchies with Cloud KMS, customer-supplied encryption keys (CSEK), and External Key Manager to meet strict data sovereignty requirements, and learn how to harden AI data pipelines. By the end, you’ll be able to protect sensitive data across its full lifecycle.