Whether you are a software developer, database administrator, DevOps engineer, data engineer, network engineer or architect, security is part of your job. This course gives you an overview of key security controls and services in Google Cloud and when to use them to protect resources and data.  This course includes best practices for:

• Managing identities including service accounts and federated identities

• Controlling access to resource using IAM roles

• Using organization policies to ensure consistent compliance with security policies

• Protecting web applications against security risks

• Using Apigee to protect APIs

• Building secure containers

• Securely managing secrets, such as passwords, API keys, and credentials

• Protecting data in Cloud Storage as well as databases

• Preventing data exfiltration using. Google Cloud's Data Loss Prevention (DLP) service

• Securing Compute Engine instances and Google Kubernetes Engine clusters

• Using network security controls including Cloud NAT, Cloud Armor, Identity-Aware Proxy, and VPC Service Controls

This course is designed for those who are new to Google Cloud or want additional exposure to recommended ways to protect data and resources in Google Cloud.  The course present an overview of principles, patterns, and practices that will help you improve the security of your Google Cloud environments. 

This course does not delve into implementation details, such as the syntax of gcloud commands to implement a security measure on a virtual machine.  Implementation details are covered in other courses, particularly the Google Cloud Associate Engineer: Get Certified course.