Visualizing Google Cloud: 101 Illustrated References for Cloud Engineers and Architects

Cover
Title Page
Copyright Page
Acknowledgments
About The Author
Contents
Introduction
	Reader Support for This Book
		How to Contact the Publisher
Chapter 1 Infrastructure
	Introduction
	What Is Compute Engine?
	Machine Types
	How Does It Work?
	Availability
	Pricing
	Security
	Use Cases
	Why Containers?
	Why Kubernetes?
	What Is So Cool about Kubernetes?
	Kubernetes the Hard Way
	What Is GKE?
	Why GKE?
	How Does GKE Work?
	How Does GKE Make Scaling Easy?
	What Is Cloud Run?
	How to Use Cloud Run
	How Does Cloud Run Work?
	How Is Cloud Run Different from Cloud Functions?
	What Is App Engine?
	Environments
	How Does It Work?
	Notable Features
	What Is Cloud Functions?
	How to Use Cloud Functions
	Pricing and Security
	Some Cloud Functions Use Cases
	What Is Google Cloud VMware Engine?
	Benefits of Google Cloud VMware Engine
	How Does Google Cloud VMware Engine Work?
	Google Cloud VMware Engine Use Cases
	What Is Bare Metal Solution?
	Features
	How Does It Work?
	What Does the Bare Metal Solution Environment Include?
	What Is the Level of AbstractionY ou Need?
	What Is Your Use Case?
	Need Portability with Open Source?
	What Are Your Team Dynamics Like?
	What Type of Billing Model Do You Prefer?
Chapter 2 Storage
	What Are the Different Storage Types?
	Object Storage
	Block Storage
	File Storage
	Storage Classes
	Choosing a Location for Your Use Case
	How to Use Cloud Storage
	Security
	Data Transfer Reasons and Requirements
	Google Cloud Data Transfer Options
	Benefits of Filestore
	Filestore Use Cases
	Filestore Performance Tiers
	Where Do Virtual Machines Store Data So They Can Access It When They Restart?
	Types of Block Storage
	How to Pick Block Storage Based on Availability Needs
	Where Should Your Application Store Data?
	Object Storage —CloudStorage
	Block Storage —Persistent Diskand Local SSD
	File Storage -Filestore
Chapter 3 Databases
	Relational Databases
	Nonrelational databases
	Which One Is Best?
	How to Set Up Cloud SQL
	Reliability and Availability
	Migrating an Existing MySQL Database to Cloud SQL
	Security and Compliance
	Cloud SQL in Action
	How Does Spanner Work?
	How Does Spanner Provide High Availability and Scalability?
	How Do Reads and Writes Work?
	How Does Spanner Provide Global Consistency?
	What Is Firestore?
	Document-Model Database
	How Do You Use Firestore?
	Some Cloud Bigtable Features
	Scale and High Availability (HA)
	How Does It Optimize Throughput?
	What are Your Application’s Availability Needs?
	Features and Capabilities
	Use Cases
Chapter 4 Data Analytics
	5 Steps to Create a Data Analytics Pipeline
		Extract, Transform, and Load (ETL)
	How Does Pub/Sub Work?
	Pub/Sub Features
	Pub/Sub Use Cases
	Main Components
	How Does Cloud IoT Core Work?
	Design Principles of Cloud IoT Core
	Use Cases
	How Does Data Processing Work?
	How to Use Dataflow
	Dataflow Governance
	How Does Dataproc Work?
	Migrating HDFS Data from On-Premises to Google Cloud
	What Is Data Preparation?
		Discover
		Structure
		Clean
		Enrich
		Validate
	How Does Dataprep Work?
	BigQuery Unique Features
	How Does It Work?
	BigQuery Storage Internals
	Dremel: BigQuery’s query engine
	Security
	Cost
	Data Integration Capabilities
		Data Integration
		Unified Wrangling and Pipeline
		Metadata and Modeling
		Open, Hybrid, and Multicloud
		Data Protection
	How Does Data Catalog Work?
	Data Catalog Architecture
	Data Governance
	How Does Cloud Composer Work?
	How to Run Workflows in Cloud Composer
	Cloud Composer Security Features
	How Does It Work?
	Connectivity Options
	Datastream Use Cases
	Looker’s Platform
	In-Database Architecture
	Semantic Modeling Layer
	Cloud Native
	Capture
	Process
	Store
	Analyze
	Use
	Services Spanning the Pipeline
Chapter 5 Application Development and Modernization Opening
	Building and Modernizing Cloud Applications
	Microservices or Monolith?
	What Do Most Microservices Need?
	Where to Begin?
	Should You Migrate to Google Cloud?
	Which Migration Path Is Right for You?
	Common Cloud Migration Use Cases
		Use Case 1: Hybrid Cloud Burst
		Use Case 2: Modernize with Anthos
		Use Case 3: Land, Expand, Retire
		Use Case 4: DR Site Promotion
	Why Is Traditional Hybrid and Multicloud Difficult?
	How Does Anthos Make Hybrid and Multicloud Easy?
		Digging Deeper into Anthos
	Deployment Option 1: Google Cloud
	Deployment Option 2: VMware vSphere
	Deployment Option 3: Bare-Metal Servers
	Deployment Option 4: Anthos Attached Clusters
	Deployment Option 5: AWS
	Deployment Option 6: Microsoft Azure
	How Has the Application Development Landscape Changed?
		Cloud Build
		Cloud Code
		Cloud Deploy
	What Is Microservices Architecture?
	How Are Monolithic and Microservices Architectures Different?
	Microservices Use Cases
	Service Choreography and Service Orchestration
	Google Cloud Support for Service Orchestration
		Workflows
	Google Cloud Support for Service Choreography
		Pub/Sub
		Eventarc
	Additional Services That Help with Both Choreography and Orchestration
		Cloud Tasks
		Cloud Scheduler
	What Is API Management?
	What Is Apigee?
	What is API Gateway?
	API Gateway Architecture
	What’s the Difference Between API Gateway and Apigee API Management Platform?
	What Is the Operations Suite?
	What Does Cloud Operations Include?
	How Does Cloud Operations Work?
	Sample Application Architecture
		Domain Name System (DNS)
		Web and Application Servers
		Database
		Load Balancing and Scale
		Content Delivery Network (CDN)
		Object Store
		Serverless Functions
		Events
		Data Analytics
		Machine Learning
		Operations
		DevOps
		Security
Chapter 6 Networking
	How Is the Google Cloud Physical Network Organized?
		Google Network Infrastructure
	Cloud Networking Services
	Premium Tier
	Standard Tier
	Choosing a Tier
	Cloud Interconnect and Cloud VPN
		Cloud Interconnect
		Cloud VPN
	Network Connectivity Center
	Peering
	CDN Interconnect
	Features of VPC Networks
	Shared VPC
	VPC Network Peering
	VPC Packet Mirroring
	How Does DNS Work?
	What Does Cloud DNS Offer?
	Hybrid Deployments: DNS Forwarding
		Inbound
		Outbound
	Hybrid Deployments: Hub and Spoke
	What Is Cloud Load Balancing?
	How Does Cloud Load Balancing Work?
		External Load Balancing
		Internal Load Balancing
	How to Use Global HTTP(S) Load Balancing
	How to Secure Your Application with Cloud Load Balancing
	How to Choose the Right Load-Balancing Option
	What Is Cloud CDN?
	How Does Cloud CDN Work?
	How to Use Cloud CDN
	Security
	How Is Cloud NAT Different from Typical NAT Proxies?
	Benefits of Using Cloud NAT
	NAT Rules
	Basic Cloud NAT Configuration Examples
	Network Topology
	Connectivity Tests
	Performance Dashboard
	Firewall Insights
	How Does a Typical Service Mesh Work in Kubernetes?
	How Is Traffic Director Different?
	How Does Traffic Director Support Proxy-less gRPC and VMs?
	How Does Traffic Director Work Across Hybrid and Multicloud Environments?
	Ingress and gateways
	Why Service Directory?
	How Service Directory Works with Load Balancer
	Using Cloud DNS with Service Directory
	Connect
	Scale
	Secure
	Optimize
	Modernize
Chapter 7 Data Science, Machine Learning, and Artificial Intelligence
	Data Engineering
	Data Analysis
	Model Development
	ML Engineering
	Insights Activation
	Orchestration
	Prepackaged AI Solutions
	Pretrained APIs
	BigQuery ML
	Vertex AI
	End-to-End Model Creation in Vertex AI
	What Does Vertex AI Include?
	AutoML Behind the Scenes
	How Do I Work with AutoML in Vertex AI?
	What Is MLOps?
	Vertex AI Pipelines
	Vertex AI Pipelines Under the Hood
	Vertex AI Pipelines Open Source Support
	Benefits of BigQuery ML
		Additional Notable Features of BigQuery ML
	Supported Models in BigQuery ML
	How to Use Vision AI
	What Can I Do with Vision API?
	How to Use Video AI
	What Can I Do with the Video Intelligence API?
	Use Case Scenarios
	What Is Translation AI?
	What If Your Business Has Specific Terms?
	AutoML Translation
	What Is the Media Translation API?
	How to Use Natural Language AI
	What Can I Do with the Natural Language API?
	What Can I Do with the Speech-to-Text API?
	How to Use the Speech-to-Text API
	What Is Contact Center AI?
	How Does Contact Center AI Work?
	What Is Document AI?
	How to Use Document AI
	Sample Document AI Architecture
	Vertical Solutions
	What Is Recommendations AI?
	Sample Customer Journey with Recommendations AI
	How Does Recommendations AI Work?
	Data Engineering
	Data Analysis
	Model Development
	ML Engineering
	Insights Activation
	Orchestration
Chapter 8 Security
	Cloud Security Is Shared Fate
	Infrastructure Security
	Network Security
	Application Security
	Secure Software Supply Chain Security
	Data Security
	Identity and Access Management
	Endpoint Security
	Security Monitoring and Operations
	Governance, Risk, and Compliance
	Defense in Depth at Scale
	End-to-End Provenance and Attestation
	Application Security
		Cloud Load Balancing
		DDoS Protection and Web Application Firewall: Cloud Armor
		Bot and Fraud Protection with reCAPTCHA Enterprise
		API Security with Apigee
		Sample Web Application and API Security Architecture
	Risk Points for a Software Supply Chain
	How Does Google Secure the Software Supply Chain Internally?
	What is SLSA?
	How Does Google Cloud Help You Secure Your Software Supply Chain?
		Binary Authorization
		Code
		Build
		Test and Scan
		Deploy and Run
	Encryption
		Encryption at Rest by Default
		Encryption in Transit by Default
		Encryption in Use: Confidential Computing
	At-Rest Encryption Options
		Customer-Supplied Encryption Keys (CSEKs)
		Key Management Service (Cloud KMS)
		Hardware Security Modules (HSMs)
		Cloud External Key Manager (Cloud EKM)
		Other Data Security Services
	What Is DLP?
	How Does It Work?
	A Variety of Deidentification Techniques
	What Is Cloud Identity?
		How Cloud Identity Connects with Google Cloud
	Authentication Options
		2-Step Verification (2SV) with Google Authentication
		SSO Authentication with a Third-Party Identity Provider
		User experience
		Advantages
	What Is Cloud IAM?
	Cloud IAM best practices
	What Are Service Accounts?
	Service Account Types
	Service Account Credentials
	Service Account Best Practices
	What Is BeyondCorp?
	What Is BeyondCorp Enterprise?
	How Does BeyondCorp Enterprise Work?
		Gathering Device Information
		Limiting Access
		Securing Resources with IAP
		Applying IAM Conditions
	What Is Security Command Center?
	How Does Security Command Center work?
	Infrastructure Security
	Network Security
	Application Security
	Software Supply Chain Security
	Data Security
	Identity and Access Management (IAM)
	Endpoint Security
	Security Monitoring and Operations
	Governance, Risk, and Compliance
EULA