Skip to main content

Posts

Showing posts from November, 2019

Cloud SQL

Cloud SQL is a hosted MySQL service. It provides: Rich query language Primary and secondary indexes ACID transactions Relational integrity Stored procedures Fully managed MySQL and PostgreSQL databases Fully managed instances Patches and updates automatically applied You still have to administer MySQL users Cloud SQL supports many clients gcloud beta sql App Engine, G Suite scripts Applications and tools    SQL Workbench, Toad    External applications using standard MySQL drivers

Cloud Storage and Cloud IAM or ACLs or Signed URLs

Cloud Storage offers layers of increasingly granular access control. For most purposes, Cloud IAM is sufficient, and roles are inherited from project to bucket to object. Access control lists (ACL) offer finer control. And for detailed control, signed URLs provide a cryptographic key that gives time-limited access to a bucket or object. A signed policy document further refines the control by determining what kind of file can be uploaded by someone with a signed URL Cloud IAM Works with Cloud Storage just as with using Cloud IAM with any other resource. Project Owners are automatically granted Bucket Owner role for all buckets in the project. Note that ACLs and Cloud IAM are independent, so Project-level Cloud IAM permissions will not appear in bucket or object ACLs. Signed URLs A signed URL gives you the ability to grant access to a bucket without Cloud IAM user authentication for a limited period of time. e.g., when you don’t want to require users to have Goog...