Google Cloud, IT Atlas

Overview

Google Cloud resources live in projects, grouped by folders under an organisation node. IAM policies are attached to those nodes and inherit downward, and organisation policies apply constraints estate wide.

It is commonly chosen for BigQuery centred analytics, GKE, and machine learning workloads, and increasingly appears as the second platform in multi cloud estates.

Security considerations

Use service accounts with workload identity federation instead of downloaded key files.
Enable organisation policy constraints such as domain restricted sharing and disabling of external IPs.

Related topics

Cloud Computing

On demand delivery of compute, storage, networking and platform services over a network, billed by consumption and managed through APIs.

Amazon Web Services

The largest public cloud platform, organised around accounts within AWS Organizations, with IAM as the central authorisation system.

Microsoft Azure

Microsoft's public cloud platform, tightly integrated with Entra ID and Microsoft 365, organised through management groups, subscriptions and resource groups.

Kubernetes & Containers

Container orchestration that schedules workloads across a cluster, providing declarative deployment, scaling, service discovery and self healing.

Data Warehousing

Consolidating data from operational systems into a modelled, query optimised store for analysis and reporting.