Questions tagged [google-cloud-platform]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1 votes
1 answer
29 views

Google Cloud Storage Service Account Key Management for Signed URLs

Background I am looking to have a Cloud Storage bucket that is not publicly accessible for images. Then my plan was to sign any image URL on the website to authorize it for a short period of time (~30 ...
user avatar
  • 367
0 votes
0 answers
28 views

Google Cloud and Private CM on Microsoft Windows and FedRamp compliance for TLS

Is it possible to use Private Certificate Authority based on Microsoft Windows Servers for protection SSL/TLS connections in FedRAMP environment on Google Cloud?
user avatar
3 votes
1 answer
454 views

should I treated the let's encrypt fullchain.pem as a public key

I am using let's encrypt to generate a certificate. It contains 'fullchain.pem' and 'privkey.pem'. should I treated the let's encrypt fullchain.pem as a public key? I find the public key certificate ...
user avatar
  • 133
0 votes
1 answer
67 views

How to perform security audit of a web service that uses google cloud's external HTTP(s) load balancer?

An independent security auditor discovered many open ports by using nmap while auditing a web service deployed on GCP. The service is a Cloud Run instance behind an HTTP(s) load balancer. The auditor ...
user avatar
  • 101
0 votes
0 answers
170 views

Is it possibile to interact with firebase database using credentials obtained from an APK?

during the static analysis while pentesting an android application I found the following information to connect to a firebase instance. <string name="google_app_id">1:**REDACTED**:...
user avatar
  • 101
0 votes
0 answers
116 views

Nitro Enclave / KMS Equivalent for Google and Azure

In AWS KMS I can set a key policy on a CMK so that it can only be used from within a Nitro Enclave that either has a particular signature or a particular image hash. Is there something similar to this ...
user avatar
  • 215
0 votes
1 answer
99 views

Can Cisco Umbrella be Used Along with Google Classroom?

We are creating an Information Assurance and Security Plan for a public school. The Plan will include Google Classroom because the school doesn’t have an online learning platform. The problem is our ...
user avatar
1 vote
1 answer
105 views

Does adding a randomized string in S3 file path has equal security to Google Drive shared link

I would like to use an AWS S3 bucket to store my IoT firmware file and allows all of my IoT devices to access it to update the firmware to the latest version. I want that the firmware file in the S3 ...
user avatar
2 votes
1 answer
139 views

Container Vulnerability Management

Having difficulty understanding how to translate 'traditional' vulnerability management to a cloud environment. Previously accustomed to using tools like OpenVAS and Nessus, setting up scans which ...
user avatar
0 votes
0 answers
15 views

Google Cloud Platform may have been compromised and used for cryptocurrency mining [duplicate]

How to detect where the issue on my server is, and whether the server is being used for cryptocurrency mining? I just received an email from Google and my server stopped working. Dear Developer, Our ...
user avatar
1 vote
0 answers
195 views

Keeping data confidential from the system administrator

Problem How do I ensure that I cannot access confidential data manually through the database? Practically speaking, this is a firestore database on google cloud, and I have access to the administrator ...
user avatar
2 votes
1 answer
357 views

My Firebase project has unknown users, has my google cloud service account been compromised?

My project is a flutter app, it is in Internal Testing only, I am the only user. I've been working on this project for about a month and all of a sudden today I keep getting unknown users registering. ...
user avatar
1 vote
1 answer
355 views

Is it safe to make every resource public in a Google Cloud Storage bucket?

I'm developing a business web application for my client, in which he can upload images (e.g. floor plans, photos of object etc.) and documents of different objects (word, excel etc.). The images ...
user avatar
1 vote
0 answers
92 views

No way of restricting public access to Firestore/API

Just glancing at GCP offerings for storing data, I noticed that while using Firestore, the only control for restricting public access is via security rules. However, in case of mis-configuration of ...
user avatar
  • 1,341