Google Cloud Certified Professional-Cloud-Security-Engineer Question # 42 Topic 5 Discussion

Challenge:

Prevent common misconfigurations that expose services (e.g., MYSQL) to the public internet.

Hierarchical Firewall Policies:

These policies can be applied at the organization level to enforce consistent network security rules across all projects.

Solution:

Create a hierarchical firewall policy that allows connections only from internal IP ranges.

This policy ensures that services like MySQL are not exposed to 0.0.0.0/0 (the entire internet).

Steps:

Step 1: Define the hierarchical firewall policy at the organization level.

Step 2: Set the rule to allow traffic only from internal IP ranges.

Step 3: Apply the policy to all projects under the organization.

Benefits:

Centralized management of network security.

Prevents accidental exposure of services to the public internet, enhancing security.