The way developers establish database connections is an important aspect of managing a Cloud SQL database. Solid connection management practices help to minimize downtime and security risks. Developers must consider how a connection is established, which connections are authorized, and how users or other services are authenticated. This lab will cover how to establish secure connections with the Cloud SQL Auth proxy.

The Cloud SQL Auth proxy uses Identity and Access Management (IAM) permissions to authorize and secure connections to Cloud SQL database instances. Like most proxy tools, it serves as the intermediary authority on connection authorizations.

In this lab, you will create a Cloud SQL database instance and learn how to securely connect to the instance using the Cloud SQL Auth Proxy and a custom IAM Service Account.

Learning Objectives

Upon completion of this intermediate-level lab, you will be able to:

• Create a Cloud SQL Database instance that serves a PostgreSQL database
• Connect to a Cloud SQL Database instance using the Cloud SQL Auth proxy

Intended Audience

• Candidates for the Google Associate Cloud Engineer exam
• Candidates for the Google Data Engineer exam
• Google Cloud practitioners

Prerequisites

Familiarity with the following will be beneficial but is not required:

• General knowledge of the Google Cloud SQL service