Securing Cloud Functions on Google Cloud

Course details

With the rising popularity of serverless computing, organizations face increasingly complex levels of risks. Cloud-based services such as Google Cloud Platform (GCP) have become essential in today’s business world, but how do you keep your data secure?

In this course, instructor Felicia Rosemond covers the basics of securing Cloud Functions on Google Cloud and takes a deep dive into serverless computing, identity and access management, network security, data protection, and more. Explore a wide variety of beginner- to immediate-level security methods and processes for GCP Cloud Function security as well as interactions between functions, Firebase and Kubernetes integration, and how to secure a Cloud Function using a JSON Web Token. By the end of this course, you’ll have a thorough understanding of how to use the tools and services available within GCP to secure your functions and keep your data safe.

Concepts

Introduction

Why secure Google Cloud Platform (GCP) Cloud Functions (CF)

Building a System of Cloud Functions

Firebase and Google Cloud Functions
GCP CF and GCP CF interaction
GCP CF and Kubernetes
JSON Web Token (JWT) and CF

GCP Cloud Function Security

How GCP Cloud Function security works
Identity-based security for CFs
Network-based security for CFs

CF to CF Interaction

External facing CF configuration - Identity-based
Internal only CF configuration - Identity-based
External facing CF configuration - Network-based
Internal only CF configuration - Network-based

Firebase Integration

Using Firebase authentication tokens
Firebase Security Rules
Using Cloud Tasks

Kubernetes Integration

Workload Identity and Google Kubernetes Engine (GKE)
Configuring Workload Identity on a Pod
Invoking the cloud function

Securing GCP CF with JSON Web Token (JWT)

Why use JSON Web Token (JWT)
Setting up JWT verification functions

Conclusion

Next steps