Setting up GAMADV-XTD3 on a Google Cloud Platform Compute Engine Securely
Disclaimer: This video is NOT meant for people setting up GAMADV-XTD3 for the first time. In most organizations, setting it up the normal way should be fine. This video is meant for administrators who have some familiarity with Google Cloud Platform's IAM best practices, as well as strong knowlege of authentication/authorization for GAMADV-XTD3, including domain-wide delegation of authority and 2-legged vs. 3-legged OAuth.
In this video, we look at setting up GAMADV-XTD3 without downloading the service account key with domain-wide delegation to the VM which will address some of the security concerns with GAM.
In addition, you can enable OS-Login and 2-step verification on the VM and remove external IP to ensure that VM is only accessible to an authorized user.
https://github.com/taers232c/GAMADV-X...
https://cloud.google.com/compute/docs...
https://cloud.google.com/iam/docs/ser...
#gam #googleworkspace #gsuite #gcp #googlecloud
00:00 - Intro
00:21 - GCP Always Free Usage Limits
01:09 - Review of IAM policies in GCP Project (Service Account Key Admin is actually not needed)
02:13 - Checking Billing Account for GCP Project
02:55 - VM Creation
04:10 - Best Practices for VM Access
04:22 - Connecting to VM
05:00 - Installing GAMADV-XTD3 without GCP Project Creation
05:43 - Creating oauth2service.json
06:35 - Enabling APIs
07:35 - Assigning Admin Privilege to Service Account
09:29 - Editing gam.cfg
11:30 - Validating the contents of .gam directory
12:18 - Setting up domain wide delgation of authority
13:15 - Closing
Workspace Admins Info
View the Google Workspace Admins Public Calendar of upcoming events: https://calendar.google.com/calendar/...
Add it to your list of calendars via email: [email protected]
Get access to the Shared drive with documents from this event and other past events along with the collection of Community Docs. Workspace Admins Community Comment Access Group: https://groups.google.com/a/workspace...
To access the Workspace Admins [Public] shared drive, be sure to join the group above first: https://drive.google.com/drive/folder...
Google Workspace Recap podcast discussing each weeks new feature releases: https://workspacerecap.com
C2C Global, The Independent Google Cloud Community: https://www.c2cglobal.com/
Google Cloud Community, The official Google Cloud Community: https://www.googlecloudcommunity.com