Security Features in GCP

Welcome to Google Cloud Platform, or GCP for short. GCP is the last of the top three most popular cloud platforms mentioned in this book. A lot of how GCP works is similar to AWS and Azure, but there are definitely some aspects to GCP that are unique and important for pentesters to understand before they pentest in the platform.

First, let’s examine some of the most commonly used aspects of the GCP ecosystem. In this chapter, you’ll learn about the most popular GCP services, applications, and features, and why they’re used. Next, we’ll look into GCP Software-as-a-Service (SaaS), Infrastructure-as-a-Service (IaaS), and Platform-as-a-Service (PaaS) features. We will conclude the chapter by discussing Google’s own GCP security tools and third-party security tools.

Before we pentest GCP, it helps to understand how the company we’re working for may use GCP, and what security features Google provides that can help pentesters...