Скачать или смотреть VPC Networks - Controlling Access

Overview
In the real-world you need to protect sensitive data and ensure the continued availability of your web applications at all times. Learn how to use the Google Cloud VPC network to create a more secure, scalable, and manageable web server deployment within your Google Cloud environment.

In this lab, you create two nginx web servers on the default VPC network and control external HTTP access to the web servers using tagged firewall rules. Then, you explore IAM roles and service accounts.

Two web servers gives you redundancy - if one web server fails, the other can continue serving web traffic, preventing downtime.
Tagged firewall rules provide granular control over which traffic is allowed to reach specific web servers.
By assigning a service account permission to perform tasks, you're upholding the principal of least privilege, keeping your Cloud resources safe.
Objectives
In this lab, you learn how to perform the following tasks:

Create a nginx web server on a vpc network
Create tagged firewall rules
Create a service account with IAM roles
Explore permissions for the Network Admin and Security Admin roles