Become a cloud pro with strategic GCP skills. Get hands-on experience, understand "Why GCP?", and prepare with a practice exam. No setup, no cleanup, no hassle.

Cracking the Google Cloud Associate Cloud Engineer Certification.png

cloud_sdk_2025.tar.gz

Cloud SDK

Google Cloud Platform will be the next major cloud admin skill in the coming years. Google is increasing its market reach in the cloud provider domain using strategic partnerships and a lot of funding for the customers. So, no doubt that GCP is going to dominate the cloud domain in the coming years.

This course is a headstart to quickly get hands-on with GCP and make yourself comfortable with it. You will start with "Why GCP?" and will go all the way to using its services in different ways. If you are from an AWS background, you will find the course very easy to understand due to similarities between AWS and GCP services.

At the end of the course, you will take a practice exam that will resemble the exam you’ll take when you go to get your Google Cloud Engineer Certification. Good luck!

Cracking the Google Associate Cloud Engineer Certification

Apart from roles and permissions, other IAM components are IAM members and policies.

You have seen the “can do what” part of the IAM definition; this lesson will focus on “who” and “how.”


# IAM members

As per Google Cloud:

“A member can be a Google Account (for end-users), a service account (for apps and virtual machines), a Google group, or a Google Workspace or Cloud Identity domain that can access a resource. The identity of a member is an email address associated with a user, service account, or Google group; or a domain name associated with Google Workspace or Cloud Identity domain.”

To simplify, let’s look at the diagram below.




Members of IAM can be:

1. **Google Account:** Anyone with Gmail ID can be given access to the project or specific resources.

2. **Service Account:** This is internal to GCP. A service account acts as an identity for the services. For example, if we want to restrict a particular virtual machine from accessing any resources, we can remove all the roles and permissions associated with the virtual machine's service account.

3. **Google Groups:** Often, you might want to assign the same permissions to a set of users or a team. Google groups help to fulfill this requirement. Instead of giving individuals the same set of permissions, the admin can assign the same set of permissions to a Google group email ID. Individual users who need the same permissions can then be added or removed from the group.

4. **Cloud Identity Domain:** These are email IDs with organization domains, like abc@educative.io. If an organization is not using Google Workspaces, this organization's user emails are given access to GCP using the Cloud Identity service.

5. **Google Workspaces Domain:** If an organization is using G-Suite to manage their organization's email and other company-wide services, these user IDs are Google Workspaces IDs. These are automatically synced with the organization's GCP account.



Apart from these, two predefined keywords represent a specific type of member.
- `allAuthenticatedUsers`:
The value "allAuthenticatedUsers" is a special identifier representing all service accounts and all users on the internet who have authenticated with a Google account. This identifier provides access to the accounts that aren't connected to a Google Workspace or Cloud Identity domain, such as personal Gmail accounts. Users who aren't authenticated, such as anonymous visitors, are omitted.


- `allUsers`:
The value "allUsers" is a unique identifier representing every user on the internet, including authenticated and unauthenticated users.



So, now that you know how many types of users are in GCP let's look at "how" to control these members' access to services using IAM.

# IAM policy

IAM policy is created whenever a role or permission is granted to a user. The IAM policy object represents an IAM policy. An IAM policy object consists of a list of bindings, and a binding binds a list of members to a role.

Let's look at the structure of a policy.





Introduction to IAM members and policies.


IAM Members and Policies

Introduction to IAM members and policies.

Introduction

Creating Projects and IAM

Billing Management

Google Cloud CLI

Compute Service Offerings

Storage

Network Resources

Cost Estimation

Event Driven Services

Monitoring and logging

Miscellaneous Services

GCP Certified Associate Cloud Engineer Practice Exam

IAM Members and Policies

IAM members