Managing Security in Google Cloud Course Syllabus

Overview: This course provides a targeted, lab-rich introduction to securing workloads on Google Cloud, designed to build foundational knowledge for cloud security roles. The curriculum spans five core modules, combining conceptual learning with hands-on labs to reinforce skills in identity management, network security, and access controls. With approximately 4.5 hours of total content, the course features clear module progression, quizzes, and practical exercises using real GCP tools. Ideal for those preparing for cloud security certifications or advancing into roles like Cloud Security Engineer.

Module 1: Welcome & Course Overview

Estimated time: 0.2 hours

• Introduction to course goals and structure
• Understanding specialization context

Module 2: Foundations of Google Cloud Security

Estimated time: 0.5 hours

• Shared-responsibility model in cloud security
• Google Cloud’s built-in threat mitigation controls
• Access Transparency and audit capabilities
• Hands-on demo of managed security protections
• Quiz to reinforce foundational concepts

Module 3: Securing Access to Google Cloud

Estimated time: 0.5 hours

• Introduction to Cloud Identity
• Directory sync and user onboarding
• Single Sign-On (SSO) integration
• Authentication hygiene best practices
• Hands-on lab: Setting up users and authentication via Cloud Identity

Module 4: Identity and Access Management (IAM)

Estimated time: 0.75 hours

• Understanding Google Cloud resource hierarchy
• Role-based access control (RBAC) fundamentals
• Service accounts and their secure use
• Applying least-privilege principles with IAM policies
• Hands-on lab: Configuring IAM roles and policies

Module 5: VPC Security & Network Protection

Estimated time: 2.5 hours

• Configuring VPC firewall rules and SSL policies
• Securing network perimeters with load balancers
• VPC peering, interconnects, and flow logs
• Deploying Cloud IDS for intrusion detection
• Implementing VPC Service Controls to restrict data access
• Hands-on labs: Firewall setup, logging, IDS deployment, and service controls

Prerequisites

• Familiarity with basic Google Cloud Platform (GCP) fundamentals
• Understanding of core networking concepts
• Basic experience with cloud infrastructure services

What You'll Be Able to Do After

• Explain Google Cloud’s shared responsibility model and built-in security protections
• Configure and manage user identities and authentication using Cloud Identity
• Implement least-privilege access controls using IAM roles and policies
• Secure virtual private cloud (VPC) environments with firewalls, flow logs, and Cloud IDS
• Demonstrate use of VPC Service Controls to protect against data exfiltration