Google Services Flashcards
(37 cards)
Google Compute Engine (GCE)
Provides compute infrastructure to provision VIrtual Machine instances which you can create or control using predefined Google Images or your own (IaaS)
Google Kubernetes Engine (GKE)
Allows createion of Kubernetes clusters on demand and is auto cluster and scaled. Its integrated with other services such as container repository. (CaaS)
Google App Engine (GAE)
Allows developers to lack knowledge in infrastructure by scaling, hosting, monitoring, and updating infrastructure and allows both Standard (common sets of languages) and Flexible (custom) coding frameworks (PaaS)
Cloud Functions
Allows you to write functions in supported languages, ideal for executing simple tasts like data processing, mobile backends, and IoT functions. (FaaS)
Cloud Storage
Fully managed, object-oriented storage service with infinate capacity allowing the creation of buckets that store your data
File Store
A managed file service which allows users to provision a Network Attached Storage (NAS) service that can be integrated with GCE and GKE. Offers Standard and Premium tiers which have different Input/Output operations per second (I/Ops) and throughputs.
Cloud SQL
Fully managed relational database for MySQL or PostgreSQL, offering data replication, back ups, data, exports, and monitoring.
Cloud Datastore
Fully managed Non-SQL database, ideal for applications that rely on highly available structured data at scale.
Cloud Firestore
Next generation Cloud Datastore with enhanced features
Cloud Spanner
A fully managed, globablly distributed and highly consistent database service. Users can define a schema and leverage industry standard SQL. High performing at 99.999% SLA.
BigTable
Massive scale non-SQL database with sub-10ms latency. Used by Google for Gmail and Google Maps. Ideal for fintech, IoT, and ML storage use cases. Integrates easily with Dataproc and Dataflow, but is much more expensive than Datastore.
Software-Defined Neworks
You can allow users to deliver all networking services programatically (SDNs)
Virtual Private Cloud
the foundation of GCP networking. Each GCP project has a default VPC but a user can create new networks. Similar to a cloud version of a physcial network, can contain multiple subnes, creates a global logical boundry that allows communication between VPCs but traffic needs to be traversing the internet to use of use VPC peering.
Load Balancer
Allows the distribution of traffic between your workloads and is available for GCE, GKE, and GAE with both regional and global scopes.
Virtual Private Networks (VPNs)
Allows a connection between on-premesis network and GCP VPC through an IPsec tunnel over the internet. Only site-to-site VPNs are supported and they must have two gateways on each side of the tunnel.
Cloud Interconnect
If there’s a need for low latency and high availability connection, interconnect should be considered. In this case, traffic does not traverse the internet.
Cloud Router
A service that allows for dynamic routhing exchange between compute engine, VPNs, and external networks
Cloud DNS
A managed DNS service with 100% SLA and translates domains into IP addresses. DNS can also host private zones accessible only from your GCP network and can be integrated on-premesis where your local DNS is authorized and Cloud DNS is responsible for caching
Cloud Content Delivery Network (CDN)
A service that allows the caching of HTTP(S) load balanced content, including Cloud Storage bucket objects. This can help reduce DDoS attacks.
Cloud NAT
A regional service that allows VMs without external IPs to communicate with the internet, fully managed with auto-scalability and works with GCE and GKE. Better alternative for NAT instances that need to be managed by users.
Firewalls
A service that allows for micro-segmentation. Firewall rules are created per VPC and can be based on IPs, IP ranges, tags, and service accounts. Default rules can be changed.
Identity Aware Proxy
Replaces he VPN when the user is working from an untrusted network, controlling access using user identity, device status, and IP Address (Google Beyond Corp)
Cloud Armor
Allows protection against infrastructure DDoS attacks using Google’s global infrastructure and security systems. Integrates with HTTP(S) load balancers and blocks traffic based on IP Addresses or ranges. Preview mode allows users to analyze the attack pattern without cutting off regular users.
BigQuery
A highly scalable and fully managed data cloud warehouse. Allows users to perform analytics operations with built in ML. Completely serverless and can host petabytes of data, scales seamlessly, and allows parallel data processing. Data can be stored in BigQuery, Cloud Storage, BigTable, Sheets, or Google Drive. Uses ANSI-compliant SQL and ODBC and JDBC drivers.