Professional Cloud Architect – Google Cloud Certification Guide: A handy guide to designing, developing, and managing enterprise-grade GCP cloud solutions

Cover
Title Page
Copyright and Credits
Dedication
About Packt
Foreword
Contributors
Table of Contents
Preface
Section 1: Introduction to GCP
Chapter 1: GCP Cloud Architect Professional
	The benefits of being a certified architect
	Registering for the exam
	What to expect from the exam
	Some tips
	Summary
	Further reading
Chapter 2: Getting Started with Google Cloud Platform
	Introducing the cloud
	Understanding GCP
		GCP differentiators
		GCP locations
		Resource manager
			Organizations
			Folders
			Projects
			Resources scope
				Global resources
				Regional resources
				Zonal resources
			Managing projects
			Granting permissions
			Billing
				Managing billing accounts
				Assigning a project to a billing account
				Exporting billing
				Budgets and alerts
				Billing account roles
	Summary
	Further reading
Chapter 3: Google Cloud Platform Core Services
	Computing and hosting services
	Storage services
	Networking services
	Big data services
	ML services
	Identity services
	Summary
	Further reading
Section 2: Managing, Designing, and Planning a Cloud Solution Architecture
Chapter 4: Working with Google Compute Engine
	Code in Action
	Deploying our first GCE instance
	Deployment options
		Region
		Zone
		Boot disk
		Application images
		Snapshots
		Existing disks
		Management | Labels
		Management | Deletion protection
		Management | Metadata
		Management | Startup scripts
		Management | Preemptibilty
		Management | Availability policy
		Management | Automatic restart
		Security | Shielded VM
		Disks | Deletion rule
		Sole tenancy | Node affinity labels
		GPUs and TPUs
	Instance templates and instance groups
		Setting the location
		Port name mapping
	Autoscaling 
	Autohealing
	Quotas and limits
	IAM roles
	Pricing
	Summary
	Further reading
Chapter 5: Managing Kubernetes Clusters with Google Kubernetes Engine
	An introduction to microservices 
	Containers
	Docker
	Kubernetes
		Kubernetes architecture
			The master node
			Worker nodes
		Kubernetes objects
			Pods
			Replica sets
			Deployments
			Namespaces
			Services 
				Types of services
	Google Kubernetes Engine
		Node pools
		Container-Optimized OS
		Storage
		GKE cluster management
		Creating a GKE cluster
			Advanced configuration
			Networking
			Security
			Stackdriver
			Additional features
			Deploying our first application
			Cluster second-day operations
				Upgrading the cluster
				Auto-upgrades
				Auto-repair
				Resizing the cluster
				Autoscaling a cluster 
				Rotating the master IP
		IAM
		Kubernetes role-based access control
		Container Registry
		Cloud Build
		Quotas and limits
		Pricing
	Summary
	Further reading
Chapter 6: Exploring Google App Engine as a Compute Option
	Code in Action
	App Engine components
	Choosing the right location
	Working with App Engine
	Environment types
		App Engine Standard environment
		Flexible environment
	Deploying an App Engine application
	Versions
	Splitting traffic
	Migrating traffic
	Firewall rules
	Settings
		Custom domain
		SSL certificates
	Scaling
	Cron jobs
	Memcache
	IAM
	Quotas and limits
	Pricing
	Summary
	Further reading
Chapter 7: Running Serverless Functions with Google Cloud Functions
	Main Cloud Functions characteristics
	Use cases
		Application backends
		Real-time data processing systems
		Smart applications
	Runtime environments
	Types of Cloud Functions
		HTTP functions
		Background functions
	Events
	Triggers
	Other considerations
		Cloud SQL connectivity
		Connecting to internal resources in a VPC network
		Environmental variables
		Cold start
		Local emulator
	Deploying Cloud Functions
		Deploying Cloud Functions with the Google Cloud Console
		Deploying functions with the gcloud command 
			Triggers
	IAM
	Quotas and limits
	Pricing
	Cloud Run 
	Summary 
	Further reading
Chapter 8: Networking Options in GCP
	Exploring GCP networking
	Understanding Virtual Private Cloud
		Connectivity
		Cost
		VPC Flow Logs
		Cross-VPC connectivity
			Shared VPC
			VPC peering
				Choosing between shared VPC and VPC peering
	Load balancing
		Global versus regional load balancing
		External versus internal
		Proxy versus load balancer
		Load balancer types
		Comparison
		Choosing the right load balancer
	NAT
		NAT gateway
		Cloud NAT
	Hybrid connectivity
		VPN
		Interconnects
		Peering
		Choosing the right connectivity method
	DNS
		DNS resolution
		Cloud DNS
		DNSSEC
	Firewall rules
		Default rules
		Implied rules
		Always allowed traffic rules
		Always denied rules
		User-defined rules
		Firewall logging
	Private access
	Summary
	Further reading
Chapter 9: Exploring Storage Options in GCP - Part 1
	Code in Action
	Choosing the right storage option
		Data consistency
	Understanding Cloud Storage
		Storage classes
		Data consistency
		Cloud Storage FUSE
		Creating and using a bucket
		Versioning and lifecycle management
			Versioning
			Lifecycle management
		Transferring data
			Cloud Storage Transfer Service
			Google Transfer Appliance
		Understanding IAM
		Quotas and limits
		Pricing
	Understanding Cloud Datastore
		Data consistency
		Creating and using Cloud Datastore
		Datastore versus Firestore
		IAM
		Quotas and limits
		Pricing
	Understanding Cloud SQL
		Data consistency
		Creating and managing Cloud SQL
		Read Replicas
		Failover Replica
		Backup and recovery
		Migrating data
		Instance cloning
		IAM
		Quotas and limits
		Pricing
	Summary
	Further reading
Chapter 10: Exploring Storage Options in GCP - Part 2
	Cloud Spanner
		Instances configuration
		Node count
		Replication
		TrueTime
		Data consistency
		Creating a Cloud Spanner instance
		IAM
		Quotas and limits
		Pricing
	Bigtable
		Bigtable configuration
			Instances
			Clusters
			Nodes
			Schema
			Replication
			Application profiles
		Data consistency
		Creating a Bigtable instance and table
		IAM
		Quotas and limits
		Pricing
	Summary
	Further reading
Chapter 11: Analyzing Big Data Options
	End-to-end big data solution
	Cloud Pub/Sub
		Creating a topic and subscription
		IAM
		Quotas and limits
		Pricing
	Cloud Dataflow
		IAM
		Quotas and limits
		Pricing
	BigQuery
		BigQuery features
			Datasets
			Tables
		Using BigQuery
			Importing and exporting data
			Storage
		IAM
		Quotas and limits
		Pricing
	Dataproc
		Architecture
		IAM
		Quotas and limits
	Cloud IoT Core
		IAM
		Quotas and limits
		Pricing
	Additional considerations
	Summary
	Further reading
Chapter 12: Putting Machine Learning to Work
	An introduction to AI and ML
	The seven steps of ML
		Gathering and preparing the data 
		Choosing a model
		Training
		Evaluation
		Hyperparameter tuning
		Prediction
	Learning models
	GCP ML options
	TensorFlow
	Cloud ML Engine
		Using ML Engine
		Interacting with ML Engine
		ML Engine scale tiers
		Cloud Tensor Processing Units (TPUs)
		Submitting a training job
		Deploying the model
		Predictions
			Submitting predictions
	Pretrained ML models 
		The Cloud Speech-to-Text API
		The Cloud Text-To-Speech API
		The Cloud Translation API 
		The Cloud Natural Language API
		The Cloud Vision API
		The Google Cloud Video Intelligence API
	Dialogflow
	AutoML
	Summary
	Further reading
Section 3: Designing for Security and Compliance
Chapter 13: Security and Compliance
	Code in Action
	Introduction to security
	Cloud Identity
	Resource Manager
	Identity and Access Management (IAM)
		Service accounts
		Cloud Storage access management
	Firewall rules and load balancers
	Cloud Security Scanner
	Monitoring and logging
	Encryption
		Data encryption keys versus key encryption keys
		CMEKs versus CSEKs
	Industry regulations
		PCI compliance
		Shared responsibility model
		Data Loss Prevention (DLP)
		Penetration testing in GCP
	Additional security services
		Cloud Identity-Aware Proxy (IAP)
		Security Command Center (SCC)
		Forseti
		Cloud Armor
	Summary
	Further reading
Section 4: Managing Implementation
Chapter 14: Google Cloud Management Options
	Code in Action
	Using APIs
	Google Cloud Shell
	The GCP SDK
		gcloud
		gsutil
		bq
		cbt
	Cloud Deployment Manager
	Pricing Calculator
	Additional things to consider
	Summary
	Further reading
Section 5: Ensuring Solution and Operations Reliability
Chapter 15: Monitoring Your Infrastructure
	Technical requirements
	Introduction to Stackdriver
		Cost
	Configuring Stackdriver
	Stackdriver Monitoring
		Groups
		Dashboards
		Alerting policies
		Uptime checks
		Monitoring agents
	Stackdriver Logging
		Logs Viewer
		Basic log filtering
		Advanced filtering
		Exporting logs
		Logging agent
		Log-based metrics
		Cloud audit logs
		ACTIVITY
		Retention
	APM
		Trace
		Debugger
		Profiler
	Error Reporting
	Summary
	Further reading
Section 6: Exam Focus
Chapter 16: Case Studies
	Understanding how to approach exam case studies
	What are they looking for in the case studies?
		Company overview
		Solution concept
		Business requirements
		Technical requirements
		Executive summary
		Forming a solution
			The analytics platform
			The backend platform
		Summary of Mountkirk
	Additional case studies
		TerramEarth
			Analysis
		Dress4Win
			Analysis
	Summary
	Further reading
Chapter 17: Test Your Knowledge
	Mock test 1
	Mock test 2
Assessments
Other Books You May Enjoy
Index