Cloud Security Foundation

There are many new capabilities available now in IAM, Access Risk, and Cloud Governance. Check this blog to see all things new announced at Next 2025. https://cloud.google.com/blog/products/identity-security/whats-new-in-iam-access-risk-and-cloud-governance?e=48754805 

If you are at RSA 2025, join us on the expo floor. We have action packed security foundations topics happening all 3 days Apr 29-May 1st on the expo floor. Find the Google Cloud Security team on the show floor at booth #N-6062 in the Moscone Center, North Hall. Here you can: Meet with our security experts: Engage in one-on-one conversations on foundational cloud security topics and discover how making Google a part of your security team Check out live presentations: Theater presentations at booth on April 29th, 30th at 3PM and 4:40PM, and May 1st at 12:40PM. Topics covered include Cloud Armor for DDoS Protection, Cloud NGFW for firewall, and VPC Service Controls for mitigating data exfiltration. Don't miss us!

Security Practitioners, you do not want to miss this one! We have an exciting webinar coming up tomorrow in our Security Foundation webinar series - it's on Virtual Red Teaming topic.https://www.brighttalk.com/webcast/18282/639711 Security Command Center (SCC) delivers the best protection for Google Cloud and its unique virtual red teaming capability continuously simulates millions of attack permutations against a digital twin of your cloud environment - helping you to effectively manage risk!  Join and hear from our experts - Doug Ko @pandamoose and Gary Oppel.

Hi All -  Check this blog post on how you can define and maintain a secure cloud platform for your workloads. Google Cloud provides many foundational security controls for you to build a layered defense architecture in cloud - this blog highlights few of these controls and an overview of using them for securing your infrastructure, data, applications, and AI models. https://www.googlecloudcommunity.com/gc/Community-Blog/Protecting-your-Google-Cloud-Workloads-Foundational-Controls-and/ba-p/890701 

Hello Google Cloud Community, I'm seeking help with a persistent issue accessing the OAuth Consent Screen for my Google Cloud project. Context: Project ID: youtubeAccount: Using a standard @gmail.com account (PII Removed by Sraff)Project Type: This is a standalone project, not part of any Google Cloud Organization structure.IAM Role: I have verified via the IAM & Admin > IAM page that my account (PII Removed by Staff) has the "Owner" role for this project.Problem: Despite having the Owner role, I cannot access the OAuth Consent Screen configuration page: When navigating via the GCP Console menu (APIs & Services > OAuth consent screen), I am incorrectly redirected to an "OAuth Overview / Google Auth Platform" page showing metrics, not the actual configuration settings. When attempting to access the consent screen via the direct URL (

How can we limit which VM types users can spin up to control costs, and what's a safe way to roll out this change without breaking things? Any tips greatly appreciated!

Our team is planning to implement the OWASP Top 10 WAF rules using Google Cloud Armor to enhance our application security. What are the best practices?

Heads up, Security Foundation Community! If you're planning to attend Google Cloud Next, don't miss this important session: Want to solidify your Google Cloud security from the ground up? Join @anilnandigam at the Start secure, stay secure: Build a strong cloud security foundation session. Learn how Google Cloud's Security Foundation and shared fate model offer clear guidance for securing your entire cloud environment. Be sure to add this must-attend session to your Next '25 agenda and save your seat. Let us know in the comments if you'll be there. See you at Next!

Hi everyone, A big welcome to all new members joining the Google Cloud Security Foundation forum! This space is dedicated to discussing the core principles, best practices, and essential services for building a secure foundation on Google Cloud Platform. We focus specifically on understanding and utilizing the cloud-first security controls that are integral parts of the Google Cloud platform itself. Topics we often cover here include these core platform controls: Identity and Access Management (IAM) fundamentals Network security basics (VPCs, Firewall Rules, Cloud Armor basics) Data security concepts (Encryption at rest/in transit) Logging and Monitoring essentia