Google Cloud Flashcards
Definition: Resource Management Tool
Helps track / rename / update / create / delete projects
Identity and Access Management
Who has access to change folders / policies within the organisation node
Compute Engine
Google cloud product that offers VMs (Virtual Machines) as a service
Service Account
Permissions given to the VMs (Virtual Machines) themselves rather than specific people
Ways to interact with Google Cloud
- Google Cloud console (GUI)
- Cloud SDK and Cloud Shell
- APIs
- Cloud Mobile App
Virtual Private Cloud (VPC)
A secure, individual, private cloud-computing model hosted within a public cloud.
The firewall (protection) and the connections routing are already available with this option.
Tagging options are available to eg set a firewall rule for all instances called “web”.
Cloud Marketplace
Instance from where the Compute Engines (VMs) can be easily started as well as the third-party VMs
Preemtible & Spot VMs
Used for the work where the human supervision is not needed such as batch analysis jobs in a large dataset.
Unlike regular Compute Engines, these processes cannot be stopped so these resources cannot be re-allocated to a different task. Compute Engines also allow you to choose your machine type parameters.
Cloud Load Balancing
Helps manage traffic depending on the demand spikes
Cloud Domain Name Server (DNS) / Google’s free 8. 8. 8. 8 service
Translates the public host name into IP addresses
Cloud CDN (Contact delivery network)
So that the customers experience lower latencies, these are the services located close to the customers. Helps store content close to the end-users
Kubernetes Engine
Allows to have cloud services from different providers, diversify and not be stuck to Google Cloud only.
A product that helps manage and scale containerised applications.
There are pods that include max 1 container.
Groups of pods are a cluster.
Firewall Rules (example)
When you have several VMs connected to your VPC (Virtual Private Cloud) network, you cannot simply transmit info from one VM to another.
Firewall rules must be in place to allow for such interactions.
allow-icmp rule allows to send to the external IP
allow-custom rule allows to send to the internal IP
allow-ssh allows to start a Secure Shell instance on the web
VPC
Google Cloud Virtual Private Cloud (VPC) provides networking functionality to Compute Engine virtual machine (VM) instances, Kubernetes Engine containers, and App Engine flexible environment. In other words, without a VPC network you cannot create VM instances, containers, or App Engine applications. Therefore, each Google Cloud project has a default network to get you started.
You can think of a VPC network as similar to a physical network, except that it is virtualized within Google Cloud. A VPC network is a global resource that consists of a list of regional virtual subnetworks (subnets) in data centers, all connected by a global wide area network (WAN). VPC networks are logically isolated from each other in Google Cloud.
5 storage products
- Cloud Storage
- Cloud SQL
- Cloud Spanner
- Firestore
- Cloud Bigtable