ACE Flashcards
IaaS
(Infrastructure as a Service)
Virtualized infrastructure resources. Pay for usage or allocation
Ex: Compute Engine
PaaS
(Platform as a Service)
Platforms for building and deploying applications. Pay for usage
Ex: Cloud Function
SaaS
(Software as a Service)
Delivers software applications to end users. Subscription-based
Ex: Google Workspace
Cloud shared responsibility
Shared responsibility between provider and customer
Hierarchy of cloud locations
- us-east1 (Region)
- -a (Zone)
Interacting with GCP
- SDK (API)
- App
- CLI
- Console
Service: IAM
(Identity and Access Management)
Assigns roles to entities
Roles
- Basic
- Predefined
- Custom
Basic roles
Predefined roles with broad permissions (Viewer, Editor, Owner)
Ex: Owner: Full access to manage resources and permissions
Predefined roles
Predefined roles with specific or broad permissions
Ex: Compute Admin: Full control over Compute Engine resources.
Custom roles
Roles with tailored permissions for specific needs
Ex: Custom Role: Role granting access to specific Cloud Storage buckets
Resource hierarchy
- Organization
- Folder
- Project
- Resource
Service account
Identity assigned to a resource, granting roles
Service: Cloud Identity
Assigns access policies to users
Service: VPC Network
Connects resources within a region and to the internet
Service: Compute Engine
Provides VMs. Preemptible instances for reduced costs
Service: Cloud Load Balancing
Distributes traffic across application instances with global or regional scope
Service: Application Load Balancer
(ALB)
Operates at the application layer (HTTP/HTTPS)
Service: Network Load Balancer
(NLB)
Operates at the transport layer (TCP, UDP, IP)
Service: Cloud DNS
(Domain Name System)
GCP’s DNS service
Service: Cloud CDN
(Content Delivery Network)
Caches content at global edge locations
Service: Cloud Storage
Bucket-based object storage with versioning, lifecycle management, and Autoclass for automated cost optimization
Cloud Storage tiers
- Standard: Accessed anytime (no restrictions)
- Nearline: Accessed less than once every 30 days
- Coldline: Accessed less than once every 90 days
- Archive: Accessed less than once every 365 days
Service: Cloud SQL
RDBMS (PgSQL, MySQL, SQL Server) for regional systems with vertical scaling
