IAM policies, allow and deny policies - SkilBrill

Skip to content

Home
Courses
About
Contact
Blog
- Freshers

Search for:

Home - Lessons - Google Cloud Fundamentals - M2 — Identity and Access Management - IAM policies, allow and deny policies

Google Cloud Fundamentals IAM policies, allow and deny policies

Google Cloud Fundamentals

0% Completed

M1 — Cloud Concepts and Google Cloud Structure

Why organisations move workloads to cloud

Google Cloud regions, zones and edge locations

Projects, folders, organisations and resource hierarchy

Billing accounts, budgets, alerts and quota

The service catalogue and how to read documentation

Console tour and command line setup

M2 — Identity and Access Management

Cloud IAM roles, principals and permissions

Service accounts and workload identity federation

IAM policies, allow and deny policies

Basic, predefined and custom role differences

Organisation policy constraints

Access audit with Cloud Audit Logs

M3 — Compute Options

Compute Engine VMs, machine types and images

Managed instance groups and autoscaling

Cloud Run for containerised services

Cloud Functions for event-driven work

Google Kubernetes Engine at a high level

Choosing between compute options

M4 — Storage and Databases

Cloud Storage classes and lifecycle rules

Persistent disk and filestore

Cloud SQL versus Cloud Spanner versus Firestore

BigQuery as an analytics store

Data transfer and export paths

Backup, retention and recovery basics

M5 — Networking and Edge

VPC networks, subnets and routes

IP addressing, alias ranges and peering

Cloud Load Balancing types

Cloud DNS and Cloud CDN

Cloud NAT for private egress

Firewall rules and policy

M6 — Security Baseline

Shared responsibility on Google Cloud

Encryption at rest and in transit

Secret Manager and key management

VPC Service Controls overview

Security Command Center posture

Compliance reports and Assured Workloads

M7 — Cost Management and Operations

Reading and forecasting a cloud bill

Committed use and sustained use discounts

Rightsizing and autoscaling for cost

Cloud Monitoring metrics and dashboards

Cloud Logging basics

Tagging and cost allocation

M8 — Capstone: Platform Assessment

Assess an on-premise estate for cloud readiness

Draw the target resource hierarchy

Propose a compute, storage and network design

Estimate the monthly run cost

Write the IAM and security baseline

Present the recommendation with trade-offs

Announcements Course Info

Global Trusted Software Training Partner Since 2022

SkilBrill Training Institute delivers industry-focused technology education that bridges the gap between academic learning and real-world demands. Our structured programs combine foundational theory with practical application, ensuring every graduate is confident and job-ready from day one.

Learn More About Us

© 2026 SkilBrill Training Institute. All Rights Reserved. Privacy Policy Terms Refunds Outcomes

📞 Enroll Now

Start Your Journey

Fill in your details and our team will get back to you within 24 hours

Please enable JavaScript in your browser to complete this form.

Full Name *

Email *

Course Interested In *

Mode of Course *