THE CLOUD SECURITY PLAYBOOK

gsutil & Bash in Action

Overview

I created a structured reference repository documenting gsutil and bash commands for Google Cloud security tasks. The project organizes commands by use case, including IAM, VPC networking, storage encryption, and incident response. This ensures quick access to proven commands while demonstrating expertise in cloud security operations.

Problem

I found myself relying on scattered notes and memory when working through cloud security tasks, especially during audits and incident response. Without a centralized reference, I risked slower response times and even misconfigurations, often resorting to individually developed workarounds. Documenting these commands in a structured way ensures I can respond quickly, consistently, and without reinventing the wheel each time.

Solution

I built a dedicated GitHub repository that organizes Google Cloud security commands by use case, complete with explanations, best practices, and references.

Key Features:

  • 🔑 IAM Management: Service accounts and OS Login

  • 🔥 VPC Security: Firewall rules and flow log analysis

  • 🔐 Data Protection: Customer-Supplied Encryption Keys (CSEK)

  • 🕵🏾‍♂️Incident Response: Forensic VM disk snapshots and bucket audits

  • 📘 Cheatsheets: Quick-reference gsutil commands

Impact:

This project not only strengthens my ability to respond quickly in real-world scenarios but also serves as a living reference for peers and hiring managers.

Next

VPC Flow Logs