Identity as the perimeter: IAM and workload identity - SkilBrill

Skip to content

Home
Courses
About
Contact
Blog
- Freshers

Search for:

Home - Lessons - Google Cloud Architecture - M5 — Security Architecture and Governance - Identity as the perimeter: IAM and workload identity

Google Cloud Architecture Identity as the perimeter: IAM and workload identity

Google Cloud Architecture

0% Completed

M1 — Architecting: Method and Google Cloud Framework

What architecture means in a regulated organisation

Google Cloud well-architected framework pillars

Requirements gathering and non-functional specification

Risk, constraint and dependency mapping

Design documentation and decision records

Reviewing someone else’s architecture critically

M2 — Compute and Container Platform Design

Choosing between VMs, GKE, Cloud Run and App Engine

GKE multi-cluster and fleet design

Service mesh and traffic management

Autoscaling strategy and capacity modelling

Batch and high-performance compute placement

Platform guardrails and golden paths

M3 — Data and Database Architecture

Workload classification: OLTP, OLAP, streaming

Cloud SQL, Spanner, Firestore and Bigtable selection

BigQuery architecture and slot management

Data lake on Cloud Storage with Dataplex

Data gravity, locality and residency constraints

Migration strategy and dual-run design

M4 — Network and Hybrid Connectivity Architecture

Hub-and-spoke VPC design at scale

Shared VPC and organisation-level networking

Cloud Interconnect and partner interconnect sizing

Hybrid DNS design and split horizon

Egress control and internet exposure

Edge, CDN and global load balancing

M5 — Security Architecture and Governance

Defence in depth across the Google Cloud surface

Identity as the perimeter: IAM and workload identity

VPC Service Controls perimeters and ingress/egress

Encryption, key hierarchy and data classification

Org policy, Assured Workloads and compliance mapping

Threat model and security review process

M6 — Reliability, Disaster Recovery and SRE

SLO, SLI and error budget definition

Multi-zone and multi-region design patterns

Backup, restore and DR tiering by RTO and RPO

Chaos testing and failure injection

Capacity planning and graceful degradation

Incident command and post-incident review

M7 — Cost, Capacity and Operational Excellence

FinOps operating model for a cloud estate

Commitment strategy and discount modelling

Chargeback, showback and cost allocation

Operational load estimation per platform choice

Technical debt and platform runway

Business case and TCO for the board

M8 — Capstone: Architecture Case Studies

Architect a global e-commerce platform

Architect a regulated healthcare data platform

Architect a real-time payments system

Review and critique a flawed submitted design

Defend the design against cost and reliability objections

Write the executive architecture summary

Announcements Course Info

Global Trusted Software Training Partner Since 2022

SkilBrill Training Institute delivers industry-focused technology education that bridges the gap between academic learning and real-world demands. Our structured programs combine foundational theory with practical application, ensuring every graduate is confident and job-ready from day one.

Learn More About Us

© 2026 SkilBrill Training Institute. All Rights Reserved. Privacy Policy Terms Refunds Outcomes

📞 Enroll Now

Start Your Journey

Fill in your details and our team will get back to you within 24 hours

Please enable JavaScript in your browser to complete this form.

Full Name *

Email *

Course Interested In *

Mode of Course *