Index
- A
- abstractions, Kubernetes clusters, 86–88
- acceptance testing, 190
- access controls, 40, 272–273
- Cloud Filestore, 113
- ACID (atomicity, consistency, isolation, durability)
- AES128 encryption, 163
- AES256 encryption, 163
- agile methodologies, 246–247
- AI (artificial intelligence), 75
- Vertex AI, 94
- alerts, Cloud Operations Suite, 183, 186
- ALTS (Application Layer Transport Security), 164
- AMD Epyc processor, confidential VMs, 78
- analytical databases, 117–120
- Anthos, 75, 90–91
- Apache Airflow DAG, 97
- Apache Spark, 46
- API best practices
- App Engine, 8, 79
- App Engine Cron Service, 81
- App Engine Flexible, 8
- App Engine Standard, 80
- application availability, 60–61
- application design, cost considerations, 27–33
- application development methodologies
- Application Layer (OSI Model), 132
- architecture design debt, 248
- archival storage, 111
- ASICs (application-specific integrated circuits), 94
- asynchronous calls, 99–100
- atomicity (ACID), 114
- auditing, 167
- authentication, 250
- authorization, 250
- AutoML tables, 29
- autoscaling, 4, 62
- availability, 10, 41, 66
- high availability, 52
- B
- backup storage, 111
- balanced persistent disk, 76
- batch loading, BigQuery, 119
- batch processing
- BGP (Border Gateway Protocol), 135
- BigQuery, 3, 29, 117–119
- BigQuery Storage Write API, 119
- Bigtable, 29
- binding, 158
- blameless culture, 215
- block storage, persistent disks, 76
- Blue/Green deployment, 192
- boot images, 76
- Borg, 118
- business continuity planning, 217–218
- business processes
- team skill management, 233–234
- business requirements
- analyzing, 3–7
- Capex (capital expenditure), 6–7
- compliance, 7
- data management, 36–37
- development, accelerating, 4
- digital transformation, 7
- EHR Healthcare case study, 25–26
- governance, 7
- Helicopter Racing League case study, 26
- incident recovery, 5–6
- KPI (key performance indicator), 7
- line of business, 7
- Mountkirk Games case study, 26–27
- operating budget, 7
- operational expenses, 3–4, 7
- Opex (operational expenditures), 7
- product strategy, 24–27
- SLAs (service-level agreements), 7
- SLIs (service-level indicators), 7
- SLOs (service-level objectives), 5, 7
- systems integration
- TerramEarth case study, 27
- business use cases, 24–25
- BYOL (bring your own license), 270
- sole-tenant nodes and, 76
- C
- caches, 32
- caching, high availability, 59
- canary deployment, 191–192
- canary updates, 79
- Capacitor, 118
- Capex (capital expenditure), 3, 6–7
- capital expenditures, 3
- case studies, 11
- CD (continuous delivery)
- CDAP, Cloud Data Fusion and, 96
- CEL (Common Expression Language), 160
- change management
- chaos engineering tools, 198, 214
- CI (continuous integration), 192–193
- CI/CD (Continuous Integration/Continuous Delivery)
- CIDR (Classless Inter-Domain Routing) blocks, 9, 133, 147
- Circuit Breaker pattern, upstream throttling and, 195
- client processes, stateful systems, 98
- Cloud Armor, 135
- Cloud Audit Logs, 168
- Cloud Bigtable, 120
- Cloud CDN, 145
- Cloud Composer, 29, 97
- Cloud Data Fusion, 29, 96–97
- Cloud Data Transfer, 30
- Cloud Dataflow, 96
- BigQuery and, 119
- Cloud Datalab, 29
- Cloud Dataproc, 96
- Cloud Datastore, 121
- Cloud Deployment Manager, 29
- Cloud DNS, 145
- Cloud EKM (External Key Manager), 166
- Cloud Filestore, 57, 121
- Cloud Functions, 8, 75
- Cloud HSM, 165
- Cloud IAM Conditions, 160
- Cloud Interconnect service
- Cloud KMS, 165
- Cloud Logging, 5, 187
- Cloud Logging Agent, 167
- Cloud Memorystore, 30, 59, 99
- Cloud Monitoring, 5
- Cloud Natural Language API, 29
- Cloud Operations Suite
- Cloud Pub/Sub, 29
- Cloud Router, 135
- Cloud Run, 8, 79
- Cloud Source Repository, 193
- Cloud Spanner, 29, 117
- Cloud SQL, 29, 115
- Cloud Storage, 30, 57, 109, 166
- Coldline storage, 111
- DRA (Durable Reduced Availability), 111
- dual-region storage, 111
- Enforce Public Access Prevention, 162
- FUSE (Filesystem in Userspace), 110
- geo-redundant storage, 111
- lifecycle management, 122–123
- multiregion storage, 111
- namespaces, bucket names, 109
- Nearline storage, 111
- Premium network tier, 111
- Standard network tier, 111
- standard storage, 111
- use cases, 111–112
- Cloud TPU, 94
- Cloud Translation, 29
- Cloud Vision, 29
- Cloud VPN, hybrid-cloud networking and, 140
- Cloud Workflows, 96
- CloudSQL, 32
- Coldline storage, 111
- Colossus, 118
- communication plans, 231
- complete deployment, 191
- compliance, 7, 38–39, 44
- Compute Engine, 8, 67
- instance groups
- compute requirements, 8
- compute resources, 74. See also compute services
- compute services. See also specific services
- confidential VMs, 78
- confidentiality, 40
- consistency (ACID), 114
- constraints, 162
- Resource Location Restrictions, 162
- containers
- continuous delivery, 4
- continuous integration, 4
- COPPA (Children's Online Privacy Protection Act), 6, 38, 173
- cost considerations, 46
- TCO (total cost of ownership), 28
- cost management, 235
- cost-benefit analysis, 208
- COTS (commercial off-the-shelf software), 207
- cross-region replica, 116
- cryptographic keys, 165
- customer success management, 234
- customer-managed encryption keys, 166
- customer-supplied keys, 165
- D
- DAGs (directed acyclic graphs), 97
- Apache Airflow DAG, 97
- data and system migration. See migration
- data at rest, 39
- Data Catalog, 29
- data flows, 94–95
- data in transit/motion, 39
- data integrity
- data lifecycle management
- Data Link Layer (OSI Model), 132
- data management, 44
- data migration
- data retention, 122–123
- data security
- Cloud Storage, 166
- encryption
- data sets, archived, 68
- data transfer, 132
- data warehouses, 48
- databases, 48
- data-driven testing, 251
- Dataflow, 29
- Dataproc, 29
- datasets, BigQuery, 118–119
- DDoS (distributed denial-of-service) attacks, 135
- decryption, 132
- Dedicated Interconnect, 60, 141
- defense in depth, 39, 170
- DEK (data encryption key), 163
- delivery, continuous, 4
- deployment, 87
- Deployment Manager, 97
- design
- developer documentation, 210
- development and operations
- application development methodologies
- DevOps
- Dialogflow Essentials, 29
- digital transformation, 7, 232
- direct peering, hybrid-cloud networking and, 140
- disaster plan, 218
- disaster recovery (DR), 218–219
- distributed systems, client processes, 98
- division of labor, 189
- DNS (domain name services), 9
- naming conventions, 109
- documentation
- documents, Cloud Datastore, 121
- DRA (Durable Reduced Availability), 32, 111
- Dremel, 118
- dual-region storage, 111
- durability, 10
- durability (ACID), 115
- G
- garbage collection, 187
- gated egress and ingress topology, 139
- gated egress topology, 139
- gated ingress topology, 139
- gcs mount point, 110
- GDPR (General Data Protection Regulation), 6, 38, 172
- geo-redundant storage, 111
- GitHub, 193
- GKE (Google Kubernetes Engine), 84–85
- GLBA (Gram-Leach-Bliley Act), 38
- global load balancing
- Google Cloud, emulators, 257
- Google Cloud Build, 193
- Google Cloud Deployment, Anthos Config Management, 93
- Google Cloud interaction, 256–257
- Google Cloud Key Management Service, 76
- Google Cloud Professional Architect exam, 2
- exam objectives, 2–3
- Google Cloud SDK, 256
- Google Cloud Shell, 256
- Google Front End, 164
- governance, 7
- Grafana, 188
- GUIDs (globally unique identifiers), 109
- H
- handover topology, 139
- HBase API, Cloud Bigtable, 120
- headers, 250
- Helicopter Racing League, 13–14
- high availability
- high-level objectives, 24
- HIPAA (Health Insurance Portability and Accountability Act), 6, 38
- HIPAA/HITECH, 171–172
- HTTP(S) load balancer, 144
- hybrid testing, 252
- hybrid-cloud networking, 138, 147
- I
- IaC (infrastructure-as-code), migration and, 265
- IAM (Identity and Access Management), 154, 174
- best practices, 160–161
- Cloud IAM Conditions, 160
- Cloud Identity, 155
- G Suite domains, 154
- Google accounts, 155
- Google Groups, 155
- IAP (Identity-Aware Proxy), 161
- identities, 154–155
- members, 154–155
- permissions, 156
- policies, 158–159
- resources, 155–156
- hierarchy, 159
- Workload Identity Federation, 161
- IAM Disable Cross-Project Service Account Usage, 162
- IAM roles
- IAP (Identity-Aware Proxy), 161
- IETF (Internet Engineering Tasks Force), 134
- incident management, 198
- incident recovery, 3, 5–6, 68
- information security, 39–41
- in-memory cache, 99
- instance groups
- instance templates, 78
- instances
- integration, continuous, 4
- integration testing, 190, 197
- integrity monitoring, shielded VMs, 77
- Internal TCP/UDP load balancer, 143–144
- IOPS (IO operations per second), 64
- IP addressing, 9
- IP protocol, 132
- isolation (ACID), 114–115
- ITIL (Information Technology Infrastructure Library), 173–174
- ITIL Enterprise, 216–217
- M
- MAC (Media Access Control), 132
- managed databases, 58–59
- managed services, 3, 28–30, 43, 49
- marketing and sales, 234
- Memchached, Cloud Memorystore, 122
- memorystore, 32
- meshed topology, 139
- metered model of migration, 270
- methodologies, 244
- microservice architecture, 4, 49
- Migrate for Anthos, 265
- Migrate for Compute Engine, 265
- migration, 253–255
- assessment phase, 265
- cloud migrations, 253
- cloud services integration, 264–266
- data migration, 268–269
- Database Migration Service, 255
- deployment phase, 265
- Google Transfer Service, 254, 255
- gsutil, 255
- KPIs and, 46
- lift and shift, 4
- management planning, 271–273
- network planning, 271–273
- planning phase, 265
- replatforming, 253–254
- repurchasing, 254
- retaining, 254
- retirement, 254
- rip and replace, 4
- software license mapping, 269–270
- systems migration, 266–269
- third-party vendors, 255
- transfers, 254
- MIGs (managed instance groups), 78
- mirrored topology, 139
- ML (machine learning), 75
- Cloud Dataproc, 96
- model-based testing, 252
- modularity-driven testing, 251–252
- monitoring
- monolithic applications, microservice architecture, 4
- Mountkirk Games, 14–15
- multicloud network, 138
- multiregion storage, 111
- MySQL, Cloud SQL and, 116
- .NET, App Engine Flexible, 81
- network availability
- network latency, 123–124
- Network Layer (OSI Model), 132
- Network TCP/UDP load balancer, 143
- networking. See also VPCs (virtual private clouds)
- access controls, 272–273
- Cloud CDN, 145
- Cloud DNS, 145
- Compute Instance Admin, 272
- connectivity, 273
- data transfer, 132
- decryption, 132
- encryption, 132
- firewall rules, 134–135
- firewalls
- IP addressing
- MAC (Media Access Control), 132
- Network Admin, 272
- Network Viewer, 272
- OSI model, 132
- peering, VPCs and, 137–138
- Premium Tier, 31
- Private Google Access, 142
- Private Google Access for On-premises Hosts, 142
- Private Service Access, 142
- Private Service Connect for Google APIs, 141
- Private Service Connect for Google APIs with Consumer HTTP(S), 142
- Private Service Connect for Published Services, 142
- requirements
- scalability, 64
- scaling, 273
- Security Admin, 272
- Serverless VPC Access, 142
- Service Directory, 145
- service-centric, 141–142, 147
- Standard Tier, 31
- TCP (Transmission Control Protocol), 132
- TLS (Transport Layer Security), 132
- topologies
- VPNs (virtual private networks), 271–272
- Node.js
- NodePort ServiceType (GKE), 89
- nonfunctional requirements, 10
- NoSQL databases, 8–9
- notifications, Cloud Monitoring, 186
- O
- object storage, 32
- migration and, 268–269
- observability, 10
- operating budget, 7
- operational expenses, 7
- reducing, 3–4
- operations documentation, 210
- operations KPI, 42
- Opex (operational expenditures), 7
- OSI (Open Systems Interconnection) Network model
- OWASP (Open Web Application Security Project), 135
- Owner role, 157
- P
- PaaS (platform-as-a-service)
- Partner Interconnect, 60, 141
- pay-as-you-go model of migration, 270
- payload, 250
- PCI (Payment Card Industry Data Standard), 6
- PCI DSS (Payment Card Industry Data Security Standard), 38
- PDs (persistent disks), 57
- penetration testing, 167
- permissions, 174
- Compute Engine, 156
- persistent disks
- PersistentVolumes (GKE), 87
- PHP, App Engine Standard, 80
- PHP 5/7, App Engine Flexible, 81
- Physical Layer (OSI Model), 132
- pipelines, 94–95
- Plan-Do-Study-Act methodology, 233
- pods
- TPUs (Tensor Processing Units), 94
- points of presence, 124
- policies
- portfolios, 230
- POSIX, Cloud Filestore, 113
- PostgreSQL, Cloud SQL and, 116
- post-mortem analysis, 198
- incident post-mortems
- project post-mortems, 215–216
- preemptible VMs, 3–4, 30–31, 77
- Preium network tier, 111
- Premium Network Tier, 60
- Premium Tier networking, 31
- preprocessing scripts, 45
- Presentation Layer (OSI Model), 132
- principle of least privilege, 39
- privacy regulations, 38–39
- Private Google Access, 142
- Private Google Access for On-premises Hosts, 142
- private IP addressing, 134
- Private Service Access, 142
- Private Service Connect for Google APIs, 141
- Private Service Connect for Google APIs with Consumer HTTP(S), 142
- Private Service Connect for Published Services, 142
- product strategy, business requirements, 24–27
- professional services, 234
- programs, 230
- project KPIs, 41–42
- projects, 229–230
- Prometheus, 188
- public IP addressing, 134
- Pub/Sub, 31–32
- Pub/Sub Lite, 4, 31–32
- pull subscriptions, Cloud Pub/Sub, 95
- push subscriptions, Cloud Pub/Sub, 95
- Python, App Engine Standard, 80
- Python 2.7, App Engine Flexible, 81
- Python 3.6, App Engine Flexible, 81
- Q
- QUIC (Quick UDP Internet Connections), 164
- R
- RDP (Remote Desktop Protocol), 134
- read replicas, 116
- Recommendations AI, 29
- recommenders, VMs, 78
- recovery. See also incident recovery
- recovery plan, 218
- Redis, Cloud Memorystore and, 121–122
- redundancy, availability, 66–67
- redundant network connections, 60
- regional load balancing
- regression testing, 197
- regulations, 44
- compliance, 3, 6–7
- COPPA (Children's Online Privacy Protection Act), 6, 38, 173
- data integrity, 39
- EHR system and, 46
- GDPR (General Data Protection Regulation), 6, 38, 172
- GLBA (Gram-Leach-Bliley Act), 38
- HIPAA (Health Insurance Portability and Accountability Act), 6, 38
- HIPAA/HITECH, 171–172
- PCI (Payment Card Industry Data Standard), 6
- PCI DSS (Payment Card Industry Data Security Standard), 38
- privacy, 38–39
- SOX (Sarbanes-Oxley Act), 6, 38, 172–173
- relational data, migration and, 269
- relational databases
- ACID (atomicity, consistency, isolation, durability)
- selecting, 119
- release management, 188
- CI (continuous integration), 192–193
- reliability, 10, 66, 182
- reliability stress testing, 197–198
- ReplicaSet, 87
- Resource Location Restrictions, 162
- RESTful APIs, integration testing, 190
- rip and replace, 4
- ROI (return on investment), 42, 43, 208
- roles, 156, 174
- rolling deployment, 191
- rolling updates, 79
- routers, 132
- Cloud Router, 135
- RTO (recovery time objectives), 218
- Ruby
- runbook, 210
- S
- SaaS (software as a service), VPC network peering and, 137–138
- scalability, 10, 66
- App Engine, 61
- autoscale, 61, 62
- Cloud Function, 61
- Compute Engine, 62–63
- Kubernetes, 61
- Kubernetes Engine, 63–64
- managed services, 67
- network design, 64
- NoSQL databases, 61
- regional persistent disks, 64
- relational databases, 61
- scaling down, 62
- scaling in, 62
- scaling out, 62
- scaling up, 62
- stabilization period, 62
- storage resources, 64
- trailing time window, 63
- unmanaged instance groups, 62
- vertical scaling, 248
- VMs, 61, 62
- Secret Manager, 213
- secure boot, shielded VMs, 77
- Secure Encrypted Virtualization, 78
- security, 44. See also information security
- security design
- self-managed databases, 58
- Serverless VPC Access, 142
- service accounts, VMs, 76
- Service Directory, 145
- service networking (GKE), 89–90
- service-centric networking, 147
- service-level objectives, 3
- Session Layer (OSI Model), 132
- Shared VPC, 137
- shielded VMs, 77
- signature, 250
- Simian Army, 198
- SLAs (service-level agreements), 7
- availability and, 52–53
- SLIs (service-level indicators), 5, 7
- SLOs (service-level objectives), 5, 7
- SoD (security of duties), 168–169
- software development
- analysis, 206–207
- business requirements and, 3
- design
- software license mapping, 269–270
- sole-tenancy, VMs, 76–77
- SOX (Sarbanes-Oxley Act), 6, 38, 172–173
- spiral methodologies, 245–246
- spot VMs, 77
- Spot VMs, 31
- SQL Server, Cloud SQL and, 116
- SSD persistent disk, 76
- SSL Proxy load balancer, 144
- SSL/TLS traffic, SSL Proxy load balancer, 144
- Stackdriver, 183
- stakeholder management
- stakeholders, 228
- Standard network tier, 111
- Standard Network Tier, 60
- standard persistent disk, 76
- standard storage, 111
- Standard Tier networking, 31
- state, distributed systems
- storage
- streaming data, BigQuery, 119
- subnets, 9
- synchronous calls, 99–100
- system testing, 197
- systems integration
- systems reliability
- upstream throttling, 195
- T
- tablets, Bigtable, 120
- target pool, 143
- TCO (total cost of ownership), 28, 43
- TCP (Transmission Control Protocol), 132
- TCP Proxy Load Balancing, 145
- team skill management, 233–234
- technical debt, 247–248
- technical processes
- troubleshooting, 213–216
- technical requirements, functional requirements, 8–10
- Terraform, 97
- TerramEarth, systems integration, 35
- TerramEarth case study, 15–16
- business requirements, 27
- test-driven development, 252
- testing
- testing frameworks
- thrashing, 196–197
- time-series databases, 32, 45
- TLS (Transport Layer Security), 132, 164
- topologies
- TPUs (Tensor Processing Units), 94
- pods, 94
- trailing time window, 63
- training and support, 234
- Transport Layer (OSI Model), 132
- tripping the circuit breaker, 195
- trust boundaries, 160
- V
- version control, 212
- Vertext AI, 94
- vertical scaling, 248
- Viewer role, 157
- virtualization, Secure Encrypted Virtualization, 78
- visualization, Grafana, 188
- VMs (virtual machines)
- volatile instances, 99
- VPCs (virtual private clouds), 9, 146, 271–272
- VPNs (virtual private networks), 9, 271–272
- vTPM (virtual trusted platform module), shielded VMs, 77
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.