Understanding the GCP organization, folder, and project hierarchy

A GCP project organizes all your Google Cloud resources. Resources in GCP can be services, billing, accounts, authentications, logs, and monitoring. Resources from one project can be used and accessed by other resources from other projects. So long as the permissions to resources are set correctly, there is no restriction on accessing them between projects.

For example, look at Figure 9.3. The cloud SQL database from the core-apps-and-db project can be accessed by Cloud Composer in dwh-project. Let’s look at another example – a user account that was created in the core-apps-and-db project can access data from BigQuery in the data project. Note that accounts and authentications are also resources. The key point here is that resources in GCP projects are not isolated.

Now, let’s talk about the GCP folder. One GCP folder can contain one to many GCP projects. GCP folders can also contain one to...