Securing the Deployment Pipeline on GCP

This lesson explores how to secure your deployment pipelines on GCP. We will cover the four main techniques to securely build and deploy containers using Google Cloud and you will follow along with guided demonstrations from Google Cloud Platform so that you get a practical understanding of the techniques covered.

If you have any feedback relating to this lesson, please contact us at support@cloudacademy.com.

Learning Objectives

By completing this lesson, you will understand:

• The advantages of using Google managed base images
• How to detect security vulnerabilities in containers using Container Analysis
• How to create and enforce GKE deployment policies using Binary Authorization
• How to unauthorized changes to production using IAM

Intended Audience

This lesson is intended for:

• Infrastructure/Release engineers interested in the basics of building a secure CI/CD pipeline in GCP
• Security professionals who want to familiarize themselves with some of the common security tools Google provides for container deployment
• Anyone taking the Google “Professional Cloud DevOps Engineer” certification exam

Prerequisites

To get the most out of this lesson, you should be familiar with:

• Building CI/CD pipelines
• Building containers and deploying them to Kubernetes
• Setting up IAM roles and policies