Google Cloud Storage - Building Systems with Security by Design and Default
summary
Shows concrete security controls for Google Cloud Storage: access transparency logs who and why Googlers touch data (GA), browser IAM UI flags public objects (GA), Cloud KMS for customer-managed keys (public beta) with demo of key creation, rotation and crypto shredding by destroying keys, Bucket Lock WORM retention across all storage classes (early access) with a 10‑second retention demo, VPC service controls private beta, DLP redaction demo, and Cohesity backup integration using GCS as long‑term, encrypted storage.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 14:00Security
- 14:35Google Private Network
- 15:02Google Private Network Security
- 16:09Encryption
- 18:20Audits
- 22:33Access Transparency
- 24:00UI Enhancements
- 25:50Cloud Camus
- 27:45VPC
- 28:59Bucket Lock
- 31:47Demo
- 40:55Data Protection
related talks
32mInternational Data Transfer with
03mcybersecurity solutions
36mSecure your software supply chain from dependencies to deployment
28mYour Secrets in Cloud-Based Key Management Services
39mCloud Platform (GCP) Essentials
37mSecure By Design: Architecting cloud and AI workloads from the perspective of infosec
19mFoundations of data security
06mKeynote: Cloud Native Observability & Security from Google Cloud