Posts

Showing posts from July, 2023

Multi-cloud :Keyless authentication : GCP workloads from AWS

Image
  Multi-cloud :Keyless authentication (WIF- workload identity federation ):   GCP workloads from AWS Now any enterprise is looking solution on multi and hybrid cloud  which creates and challenges to cloud provider to implementation service sharing with high security .  Scenario likes  Date saved in GCP and consumed by AWS using Lamda function or EKS services  Data pipelines can be triggered any any service in AWs or Azure . service are managed and access in GCP using   service account is a special kind of account typically used by an application or compute workload, such as a Compute Engine instance, rather than a person. A service account is identified by its email address, which is unique to the account. Service accounts overview  |  IAM Documentation  |  Google Cloud Service Keys looks like below      But it has some dis-advantages ( mostly on security )  Keys can ea...

Building GCP Infrastructure with Terraform and the Power of AI: A ChatGPT-Powered Guide

Image
 Building GCP Infrastructure with Terraform and the Power of AI: A ChatGPT-Powered Guide This blog aims to provide a simple guide on utilizing GCP infrastructure with Terraform while leveraging the assistance of an AI tool called ChatGPT. If you are new to GCP and starting your journey as a beginner, this blog will help you understand the implementation of a Compute Engine deployed in a public subnet. Prerequisites: - A basic understanding of Google Cloud services - Knowledge of Infrastructure as Code (IAC) and how Terraform facilitates infrastructure building - Access to a free GCP account and ChatGPT. Steps: 1. Create a GCP service account using gcloud. 2. Compile a list of Terraform scripts suitable for constructing a small-scale infrastructure. 3. Execute Terraform commands from the cloud shell to implement the infrastructure. Creating a Service Account Using the gcloud Command: Log in to GCP cloud account and activate cloud shell terminal under any project  Create one dir...