Build and Secure Networks in Google Cloud: Challenge Lab
This lab is a part of "30 Days of Google Cloud Program"
Checkout here : https://events.withgoogle.com/30dayso...
Track 1: Cloud Engineering Track
5. Skill Badge: Build and Secure Networks in Google Cloud
Build and Secure Networks in Google Cloud
Link of this quest : https://google.qwiklabs.com/quests/128
Link of this Challenge Lab : https://google.qwiklabs.com/focuses/1...
About the lab :
You are a security consultant brought in by Jeff, who owns a small local company, to help him with his very successful website (juiceshop). Jeff is new to Google Cloud and had his neighbour's son set up the initial site. The neighbour's son has since had to leave for college, but before leaving, he made sure the site was running.
You need to configure this simple environment securely. Your first challenge is to set up appropriate firewall rules and virtual machine tags. You also need to ensure that SSH is only available to the bastion via IAP.
For the firewall rules, make sure:
The bastion host does not have a public IP address.
You can only SSH to the bastion and only via IAP.
You can only SSH to juice-shop via the bastion.
Only HTTP is open to the world for juice-shop.
Tips and tricks:
Pay close attention to the network tags and the associated VPC firewall rules.
Be specific and limit the size of the VPC firewall rule source ranges.
Overly permissive permissions will not be marked correct.
#30daysofgooglecloud #Qwiklabs #ChallengeLab