GCP Security Skill

Defense-in-depth for GCP: identity, secrets, policy, and threat detection.

IAM Fundamentals

Roles

• Primitive roles: roles/owner, roles/editor, roles/viewer — too broad, avoid in prod.
• Predefined roles: roles/storage.objectAdmin, roles/container.developer — use these.
• Custom roles: Create your own with exact permissions needed.

# List predefined roles
gcloud iam roles list