|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/hands-on-labs-google-cloud-security-engineer
课程评论：没有评论
课程名称：Google Cloud安全工程师的实践实验室 课程概述：安全是Google Cloud服务的一个重要特性，Google Cloud为确保您项目的安全性和身份验证开发了特定工具。在本课程中，您将通过多个Google Cloud服务获得实际操作经验，以理解和保护资源，特别是Google Kubernetes Engine (GKE)。 本课程与其他课程不同，包含一个背景视频模块，随后是一系列在Google Cloud上进行的实践练习，这些练习通过Qwiklabs完成。实践模块不包含视频、讲座或测验，仅提供实际操作的机会。 如果您喜欢本课程，可以查看完整的任务，包括一个需要在最少指导下构建解决方案的挑战实验室。完成后您将有机会获得Google Cloud数字技能徽章！请访问 google.qwiklabs.com，查找“在Google Kubernetes Engine中保护工作负载”和“确保Google Cloud中的访问和身份”。 课程大纲： 1. 欢迎来到Google Cloud中的安全：实践操作 - 描述：在此模块中，您将了解如何与课程互动。 2. IAM自定义角色 - 描述：在此实验中，您将使用Cloud Console和gcloud创建自定义角色。 3. VPC网络对等 - 描述：在此实验中，您将设置两个VPC网络之间的对等连接。 4. 设置私有Kubernetes集群 - 描述：在此实验中，您将创建和配置一个Google Cloud中的私有Kubernetes集群。Kubernetes节点运行的虚拟机将无法外部访问。 5. 如何在Google Kubernetes Engine上使用网络策略 - 描述：在此实验中，您将提供两个服务帐号以代表用户角色，并创建三个命名空间：开发、测试和生产。您将测试每个命名空间中角色的访问控制。 6. 在Kubernetes Engine中使用基于角色的访问控制 - 描述：在此实验中，您将提供两个服务帐号以代表用户角色，并创建三个命名空间：开发、测试和生产。您将测试每个命名空间中角色的访问控制。
Name:Welcome to Security in Google Cloud: Hands-On Practice
Description:In this module, you'll get to know how to interact with the course.
Name:IAM Custom Roles
Description:In this lab, you create custom roles using Cloud Console and gcloud.
Name:VPC Network Peering
Description:In this lab, you set up peering between two VPC networks.
Name:Setting up a Private Kubernetes Cluster
Description:In this lab, you create and configure a private cluster for Kubernetes in Google Cloud. The virtual machines on which the Kubernetes nodes run will not be externally accessible.
Name:How to Use a Network Policy on Google Kubernetes Engine
Description:In this lab, you provision two service accounts to represent user personas and three namespaces: dev, test, and prod. You will test the access controls of the personas in each namespace.
Name:Using Role-based Access Control in Kubernetes Engine
Description:In this lab, you provision two service accounts to represent user personas and three namespaces: dev, test, and prod. You will test the access controls of the personas in each namespace.
Security is an uncompromising feature of Google Cloud services, and Google Cloud has developed specific tools for ensuring safety and identity across your projects. In this course you will get added hands-on practice understanding and securing resources with multiple Google Cloud services including Google Kubernetes Engine (GKE). This course is unlike other courses, in that it consists of one module of background videos, followed by a series of hands-on practice exercises on Google Cloud via Qwiklabs. The practice modules include no videos, lectures, or quizzes - just more practice on real Google Cloud. If you enjoyed this course, you can check out the full quest including a challenge lab that requires a solution to be built with minimal guidance. You will have an opportunity to earn a Google Cloud digital Skill Badge on completion as well! Visit - google.qwiklabs.com and look for ‘Secure Workloads in Google Kubernetes Engine’ and ‘Ensure Access & Identity in Google Cloud’.
