Securing a Cloud SQL for PostgreSQL Instance GSP920

Overview
This lab will provide you with step-by-step guidance on how to secure a Cloud SQL for PostgreSQL instance. You will deploy a new Cloud SQL instance using a customer-managed encryption key (CMEK). The CMEK feature lets you use your own cryptographic keys for data at rest in Cloud SQL. After adding customer-managed encryption keys, whenever an API call is made, Cloud SQL uses your key to access data. Once you have created the Cloud SQL for PostgreSQL instance you will configure pgAudit to selectively record and track SQL operations performed against that instance and finally you will configure and test Cloud SQL IAM database authentication.

Objectives
You will learn how to perform the following tasks:
– Setup CMEK for Cloud SQL for PostgreSQL.
– Enable and configure pgAudit on a Cloud SQL for PostgreSQL instance.
– Configure Cloud SQL for PostgreSQL IAM database authentication.
#gcp #googlecloud #qwiklabs