GCP IaaS services

With GCP IaaS services, you get maximum control, but you also have maximum responsibility. Google provides its networking infrastructure and the hardware and tools for deploying VMs.

The main difference between using IaaS services and deploying an on-premises cloud network is that the organization you work for won’t have physical access to the infrastructure. No one in the organization you work for will be allowed to touch the physical power button on any of the computers in the GCP data centers. You aren’t even allowed to physically enter those data centers.

But you have a lot more freedom to conduct penetration testing activities in IaaS services. You should still make sure that you abide by the Google Cloud Platform Acceptable Use Policy. But don’t fret, because all of the pentesting tutorials that I give in Chapter 11 and Chapter 12 are policy compliant!

Here are the GCP components that give your organization Google’s infrastructure...