Associate Cloud Engineer (ACE)
Build real cloud skills with guided labs on AWS and Google Cloud. Practice in live environments with instant access to real cloud resources. No cloud account required.
3 labs available
In this lab, students will set up a scalable and secure compute environment using Google Cloud Platform. They will create a resource hierarchy for their project, configure IAM roles for secure access, launch and configure Compute Engine instances, and set up a highly available web application environment with load balancing and auto-scaling features. The lab will emphasize security best practices, including the use of Shielded VMs and OS Login for SSH management, and set up billing to monitor costs effectively.
In this lab, you will learn to set up a Google Cloud resource hierarchy. This is essential for organizing cloud resources in a clear, structured manner, aligning with best practices for resource management and policy application. You'll implement and verify a hierarchy that includes organizations, folders, and projects. Additionally, you'll practice enabling APIs and managing IAM roles within this structure. Constructing a well-defined resource hierarchy is crucial for managing resources effectively and ensuring compliance across an organization.
In this lab, you will learn how to create a new Google Cloud Project, set up billing configurations, and assign IAM roles to users. This foundational task is crucial for ensuring that your project's resources are properly accounted for and that appropriate access controls are enforced to enhance security and collaboration within your organization. You will also enable essential APIs and review quota settings to maintain operations within the limits imposed by organizational policies.
2 labs available
In this hands-on lab, you will explore how to manage Identity and Access Management (IAM) in GCP, focusing on both IAM policy configurations and service accounts. You will progressively build a secure and effective access management system using trusted users and service accounts throughout various stages of the lab.
In this lab, you will learn how to manage Identity and Access Management (IAM) roles and service accounts within Google Cloud Platform. You will implement various IAM policies and configure service accounts suitable for different use cases. The tasks will guide you through creating and managing IAM roles, assigning roles to users, and setting up service accounts with least privilege permissions to enhance security. You will also practice service account impersonation and the creation of short-lived service account credentials. By the end of this lab, you will have configured a secure environment incorporating several Google Cloud services working collaboratively to enforce access controls.
2 labs available
In this lab, you will create a secure and scalable web application on Google Cloud Platform using multiple services. You'll set up VPC networking, deploy Compute Engine instances for the web servers, manage traffic with Cloud Load Balancing, and automate HTTP(S) load balancing. You will also configure a Cloud SQL database, secure your setup with IAM roles, and apply Cloud Monitoring to ensure performance and availability. By the end of the lab, you will have a well-architected web application demonstrating the integration of networking, compute, and database services on GCP.
In this lab, you will learn to create and manage Compute Engine resources. You'll set up virtual machines, configure OS Login for secure SSH access, and enable Shielded VM features for enhanced security. Additionally, you'll practice working with snapshots and disk management to ensure data integrity and availability.