This is the last post of my Google Cloud networking series, and it is about the tool I find the most elegant of them all - Private Service Connect, or PSC. With VPC peering we connected two whole networks. With Shared VPC we put many projects on one network. PSC does something much more surgical - it lets one team …

In the last two posts we connected networks with VPC peering and cross-project VPC peering, and both times we ran into the same wall - peering is not transitive, and every team still has to build and maintain its own VPC. In this blog post we are going to look at the way enterprises actually solve this on Google Cloud …

When I started the Shared VPC lab I hit a wall on the very first command - gcloud compute shared-vpc enable simply does not work on a standalone project. Shared VPC, Organization Policies, folders, hierarchical firewall policies and org-level IAM all need one thing first - a Google Cloud Organization. And most of us …

TL;DR Cross-project peering is the same primitive as same-project peering plus one flag: each side is created in its own project with --peer-project pointing at the other. Nobody needs access to the other project's network; Compute Network Admin on your own project is enough. The lab: hub-vpc 10.10.1.0/24 in project …

TL;DR VPC Network Peering connects two VPC networks over Google's backbone using internal IPs: no VPN, no gateway, no public IP, no hourly charge. Traffic is billed like any VM-to-VM traffic, free inside a zone and at the normal zone-to-zone rate inside a region. It is bilateral and not transitive. Create it from both …

For the last few weeks I have been building and shipping a small SaaS of my own, and I want to document the infrastructure side while it is fresh, because most "deploy to Cloud Run" tutorials stop at gcloud run deploy and skip everything that makes a service production-ready: a managed database, secrets, a …

Table of Contents What Are We Building? Architecture Overview Prerequisites Project Structure Step 1: Multi-Cloud Infrastructure with Terraform Providers Configuration AWS Module — VPC, Subnet, Security Group, EC2 GCP Module — Network, Firewall, VM Root Main and Outputs Step 2: The Flask App — CrashLab API Intentional …

If you prefer to watch, the whole guide is also a video - In this article we are going to look at Amazon API Gateway - the AWS service that acts as the "front door" for your backend, whether that backend is a Lambda function, a container on ECS/Fargate, an EC2 instance or another AWS service. If you have …

Table of Content HTTP Trigger Azure Function App Timer-Triggered Azure Function App Azure Queue Storage Trigger Azure Function App Authentication using Azure Entra ID How to Deploy an Azure HTTP Trigger Function App Using Python and the Azure CLI Azure Function Apps offer a powerful serverless compute option that …

TL;DR This page is the code and slide companion to my Azure Masterclass video: virtual machine, load balancer, scale set, VNet, subnet, route table and NSG. The Terraform below creates 10 resources in one resource group. Validated, not applied: on 2026-11-04 terraform validate with Terraform 1.17.1 passed for azurerm …