Security Command Center (SCC)
Comparing SCC's Standard, Premium and Enterprise tiers, and why it's worth activating at the Organization level.
VPC Service Controls (VPC-SC)
How VPC-SC prevents data exfiltration, its core concepts (service perimeter, access level, ingress/egress rule), and Google's recommended dry-run-to-enforce rollout process.
Cloud KMS (CMEK)
When you need Customer-Managed Encryption Keys, the cost differences between the three key protection levels, and enforcing CMEK with Organization Policy.
Secret Manager
Use Secret Manager instead of hard-coding passwords and API keys, including version management, tiered IAM access and rotation notifications.
Cloud Armor
Cloud Armor's WAF and DDoS protection, the OWASP Core Rule Set, rate limiting, and the Enterprise tier's hierarchical security policies.
Binary Authorization
Gate container image deployment with attestation signatures, with dry-run and breakglass support for a phased rollout.
Assured Workloads (compliance-specific scenarios)
For specific regulatory requirements (FedRAMP, CJIS, ITAR), Assured Workloads wraps an entire folder in a compliance package.