Google Cloud Foundation Map
Published on
Start with the organization, folders, projects, organization policies, workforce federation, service accounts, and billing accounts. Use projects to contain identity policy, quotas, costs, APIs, and workload lifecycle.
- Identity: Cloud IAM, workforce and workload identity federation, service accounts, and break-glass access.
- Network: global VPCs, subnets, Shared VPC, Cloud DNS, Cloud Load Balancing, Private Service Connect, Cloud NAT, and controlled egress.
- Compute: Compute Engine, Cloud Run, Cloud Functions, and GKE.
- Data: Cloud Storage, Persistent Disk, Cloud SQL, Spanner, Bigtable, Memorystore, and Pub/Sub.
- Security and evidence: Cloud Audit Logs, Organization Policy, Security Command Center, Cloud KMS, Secret Manager, and central log sinks.
- Operations and cost: Cloud Monitoring, Cloud Logging, Backup and DR, budgets, labels, and billing export.
Document project creation, service-account impersonation, network ownership, key administration, regional data requirements, service quotas, restoration tests, and foundation-policy changes.
Last updated on