Controlling and managing cloud resources
When managing cloud resources, we can roughly break things down into two buckets; identity and access management (IAM) and operations. Within the world of IAM, we’ll explore how resource hierarchies and permissions function in Google Cloud. In the following chapters, we’ll dig specifically into logging, monitoring, and best practices. Let’s start by digging into IAM and resource hierarchies.
IAM and resource hierarchies
As highlighted in this chapter, a significant component of managing security is the ability to manage access and permissions. Within a Google Cloud environment, there is a resource hierarchy. An organization node is the root authority for an organization underneath which the rest of the resource hierarchy unfolds. Within an organization exist folders and projects. Folders are used to organize multiple projects and assign a set of permissions. Beneath folders in the hierarchy are projects, and within...
