Cloud Next Generation Firewall documentation
Cloud Next Generation Firewall provides a fully distributed firewall service with advanced protection capabilities and pervasive coverage to protect your Google Cloud workloads from internal and external attacks. Learn more.
Start your proof of concept with $300 in free credit
- Get access to Gemini 2.0 Flash Thinking
- Free monthly usage of popular products, including AI APIs and BigQuery
- No automatic charges, no commitment
Documentation resources
Related resources
Related videos
Securing your AI inference pipeline
Check out part 1 of this video → https://goo.gle/4gpPXzc Google SAIF → https://goo.gle/3Dbfg9s Google AI Supply Chain Security Whitepaper → https://goo.gle/3ZRZf15 Are you leaving the door open for attackers to manipulate your AI model and steal
Securing your AI model development pipeline
Vertex AI Pipelines → https://goo.gle/41IIBSZ Binary Authorization → https://goo.gle/3VOTAGL Vertex AI Pipeline demo → https://goo.gle/4ghaHJE Are you concerned about AI models going rogue? Secure your AI development pipeline using Google Cloud and
How to use customer-managed keys (CMEK)
Cloud services that have a CMEK integration → https://goo.gle/4iKELPm Protection levels → https://goo.gle/49PFyur Learn how Google Cloud's Customer-Managed Encryption Keys (CMEK) simplify data security by managing key access and inventory. This video
New Way Now: Tabiya empowers millions of job seekers with personalized skills and career guidance
𝗦𝘂𝗺𝗺𝗮𝗿𝘆: Meet Christian Meyer, the CEO and founder of Tabiya, a nonprofit dedicated to improving the job search journey for young people in underserved communities. Tabiya is developing open-source technology to connect job seekers with the right
Simplify SaaS security for Google Workspace and 150+ other SaaS apps with Adaptive Shield
Adaptive Shield offers a unified platform to manage and secure your entire SaaS ecosystem. With our intuitive dashboard, you can gain complete visibility into your Google Workspace and over 150 other SaaS apps. Our easy-to-follow guidance helps you
How to secure your cloud with VPC Service Controls
Overview of VPC Service Controls → https://goo.gle/405HhIT How you can mitigate data exfiltration with VPC Service Controls → https://goo.gle/3zY4xhA Discover how to strengthen your Google Cloud security posture with VPC Service Controls. Join Martin
Cloud KMS Autokey best practices
Cloud KMS Keys Best Practices → https://goo.gle/3zOsgRd Encrypt Resources Easily with Cloud KMS Autokey → https://goo.gle/3TWm4x8 Learn how to optimize your use of Cloud Key Management System (KMS) with these best practices for setting up and using
How to automate resource encryption with Cloud KMS Autokey and Terraform
Enable Autokey → https://goo.gle/4gAyPqS Set up Autokey and Key Handles with Terraform → https://goo.gle/3TBijxh Create a resource with Autokey → https://goo.gle/3zhxjcL Enhance your Google Cloud security practices with Cloud KMS Autokey and
How to automate resource encryption with Cloud KMS Autokey
Learn more about Cloud KMS Autokey → https://goo.gle/3B9fey3 Enable Cloud KMS Autokey → https://goo.gle/3Xmf0e8 Learn how to simplify resource encryption with Cloud KMS Autokey. Watch along as Luis Urena, Cloud Security Architect at Google,
Encryption with Cloud KMS Keys
Cloud Key Management → https://goo.gle/4cYmGJx Use Cloud KMS keys in Google Cloud → https://goo.gle/3z0Wmkc Google Cloud Key Management simplifies managing your own encryption keys across different services. Manage symmetric and asymmetric keys for
Better together: Google Kubernetes Engine threat detection powered by Security Command Center
Introducing Google Kubernetes Engine (GKE) Threat Detection powered by Security Command Center (SCC). Event Threat Detection protects your use of Google Cloud from the Identity layer up through Network layer detections. Discover how GKE and SCC
How Snapchat secures its services on multi-tenant Google Kubernetes Engine
Learn about Snap's journey in developing a secure multi-tenant platform on Google Kubernetes Engine. This session dives into the elements used for service isolation in shared clusters, including container-hardening enforcements using a Kubernetes
Cloud security threat briefing with Mandiant
As organizations increasingly adopt cloud technologies, threat actors have adapted their tactics to exploit vulnerabilities within cloud environments. This threat briefing explores the methods employed by malicious actors to compromise cloud
Identities as the bedrock for Google Cloud security
Join our experts to learn more about your identity choices with Google Cloud. We will deep-dive into workload identity federation and support for GCE and workforce identity federation for Azure AD, Okta, and other IdPs, secure your environments with
Ensure the health of cloud resources: How to address software vulnerabilities and identity risk
Which software vulnerabilities in my cloud environment pose the greatest risk, and how do I fix them quickly? What’s the best way to prevent over-permissioned identities from leading to unauthorized cloud access? Join this technical session and learn
What's new with IAM - from least privilege to organization policies and AI-powered assistance
Identities, access controls, and organizational guardrails are at the heart of your cloud security architecture. Google Cloud Identity and Access Management (IAM) is evolving, making it easy for you to onboard your workforce and workloads and empower
Go global with Vitra.ai by translating your websites to 75+ languages and drive business growth.
Our no-code solution on #GoogleCloud uses Vitra.ai to effortlessly expand your digital reach to 75+ languages. By uniting the strengths of Google's translation expertise and Palm AI's innovative technology, we are ushering in a new era of
Google Cloud cybersecurity solutions
Make Google part of your security team with security guardrails such as Cloud Identity by enacting the principle of least privilege intel-driven security operations, and cloud security—supercharged by AI. Join cloud security experts Nicolas Bédard
Cloud Security Risks: Identify and Protect Against Threats
Enhance your skills with hands-on labs on Google Cloud Skills Boost! Get started with the Beginner: Google Cloud Cybersecurity Certificate: https://goo.gle/49QvSia [Course 3 of 5, Google Cloud Cybersecurity Certificate]Delve into the key aspects of
Full-stack Identity and Access Management (IAM) – your options on Google Cloud
Learn how Google Cloud enables identity-first, AI/ML-powered, policy-based security to help protect your users, infrastructure, data, and applications. You’ll hear from our experts about the latest enhancements in the Google Cloud identity platform,
Cloud security threat briefing with Mandiant
As organizations increasingly adopt cloud technologies, threat actors have adapted their tactics to exploit vulnerabilities within cloud environments. This threat briefing explores the methods employed by malicious actors to compromise cloud
Fight fraud and bots with reCAPTCHA Enterprise
According to a recent AARP-sponsored report from Javelin Research & Strategy, identity fraud cost 40 million Americans a combined $43 billion in 2022. Regardless of the threat vector and objective, botmitigation technologies have primarily relied
Secure onboarding to Google Cloud with Identity and Access Management (IAM)
Identity and access management is foundational to your cloud journey – it’s your first step in keeping your cloud resources safe and secure. Even though organizations agree that well-structured identity and access management is necessary to secure
Identity Federation on Google Cloud with Goldman Sachs
Identity-first security is an approach that leverages identity-based controls as a foundational element of an organization’s cybersecurity architecture. Secure workforce and workload identities are the bedrock for implementing identity-first
C360 for BigQuery powered by Lytics fuels next gen AI, analytics, and predictions
Maximize ROI and create more successful campaigns with C360 for BigQuery powered by Lytics, built 100% on Google Cloud — and the first-ever CDP with natively integrated generative-AI capabilities. With Lytics, collect consumer data from engagement
How to use Github Actions with Google's Workload Identity Federation
You can build and deploy code (CI/CD) to Google Cloud using GitHub Actions by uploading a service account key to GitHub. But that opens one more spot of vulnerability and it makes it hard to rotate keys. Some organizations even forbid exporting
Cloud Run user auth for internal apps
Enabling IAP for Cloud Run → https://goo.gle/43O59zz GitHub → https://goo.gle/3Ch8gUK In this video, Martin demonstrates how to host an application on Cloud Run using Google's Identity-Aware Proxy and ensure only a list of approved users can access
What is IAM? #IAM #InteractiveTutorial
Identity & Access Management is like the bouncer at the Cloud Club, working to protect your cloud deployment and ensure that only authorized principals can access your information. Want to get some hands-on experience with IAM? Check out the
Migrate App Engine Users service to Cloud Identity Platform (Module 21)
Serverless Migration Station is a Serverless Expeditions miniseries focused on helping developers modernize their applications running on a Google Cloud serverless compute platform. Module 21 is the second video focused on migrating from the App
How to use App Engine Users service in Flask apps (Module 20)
Serverless Migration Station is a Serverless Expeditions mini-series focused on helping developers modernize their applications running on a Google Cloud serverless compute platform. In Module 20, Google engineers Martin and Wesley show viewers how