Practices

Cloud Security In 2022: Stormy Horizons, Shaken Trust, And Lack Of Talent
The stormy cybersecurity horizon will leave its mark on cloud-based assets next year. However, despite the looming threats, experts see no stopping on migration to the cloud. 2021 was a pivotal year in cybersecurity, with ransomware dominating the headlines. With the upward trend in cybercrime unlikely to change next year, the need to secure cloud-based …

How To Migrate An On-Premises Data Warehouse To BigQuery On Google Cloud
Data teams across companies have continuous challenges of consolidating data, processing it and making it useful. They deal with challenges such as a mixture of multiple ETL jobs, long ETL windows capacity-bound on-premise data warehouses and ever-increasing demands from users. They also need to make sure that the downstream requirements of ML, reporting and analytics …

Compliance Engineering – Continuous Compliance GCP Case Studies
Our previous article provided tools and techniques to transform your productionalization process and make it ready for Cloud workloads. In this post, we will cover technical examples of GCP controls and how it can help your organization maintain your security and compliance posture in GCP. In comparison to on-prem infrastructure, GCP is a highly integrated …

Google Cloud Recommendations For Investigating And Responding To The Apache “Log4j 2” Vulnerability (CVE-2021-44228)
Editor’s note: This post was updated on 12/22/21 at 6:23pm PST. In this post, we provide recommendations from the Google Cybersecurity Action Team and discuss Google Cloud and Chronicle solutions to help security teams to manage the risk of the Apache “Log4j 2” vulnerability (CVE-2021-44228 and CVE-2021-45046). For the latest updates on our assessment of …

Investigating The Usage Of GCP Service Accounts
Service accounts on Google Cloud are used when a workload needs to access resources or conduct actions without end-user involvement. There are multiple methods of authenticating using service accounts, including using service accounts as part of Google Compute Engine instances, impersonating service accounts, or using service accounts with a key file — an option which …

Google Cloud IDS Signature Updates To Help Detect CVE-2021-44228 Apache Log4j Vulnerability
Editor’s note: As of 12/20/2021 at 2:15pm PST, this post was updated to indicate that detections for CVE-2021-4104 are present in production As of 12/19/2021 at 1:51pm PST, this post was updated to indicate that detections for CVE-2021-45046 are now present in production. As of 12/16/2021 at 3:45pm PST, this post was updated to include …

Google Cloud Spanner Dialect For SQLAlchemy
We’re very excited to announce the general availability of the Google Cloud Spanner dialect that enables SQLAlchemy applications to take advantage of Cloud Spanner‘s scale, strong consistency, and up to 99.999% availability. SQLAlchemy is a Python SQL toolkit and Object Relational Mapper, giving application developers the full power and flexibility of SQL. Its object-relational mapper …

5 Key Metrics To Measure Cloud Finops Impact In Your Organization In 2022 And Beyond
Value of Establishing a Baseline for Metrics As organizations continue to leverage cloud investments to drive their business growth and top line revenue, business, finance, and technology executives need to become increasingly connected in their efforts to deliver strong business outcomes. More than ever before, executives need to quantify the value of their investments in …

Enabling Keyless Authentication From Github Actions
GitHub Actions is a third-party CI/CD solution popular among many Google Cloud customers and developers. When a GitHub Actions Workflow needs to read or mutate resources on Google Cloud – such as publishing a container to Artifact Registry or deploying a new service with Cloud Run – it must first authenticate. Traditionally, authenticating from GitHub …

Unlocking Opportunities With Data Transformation
One of the biggest challenges data executives have today is turning the immense amount of information that their organization, customers and partners — or rather their whole ecosystem — are creating into a competitive advantage. In my role here at Google Cloud, I specialize in everything data — from analytics, to business intelligence, data science …