google-cloud-waf-security

Name: google-cloud-waf-security
Author: jmxt3

32stars3forks

How to install google-cloud-waf-security?

jmxt3/gitscape.ai/google-cloud-waf-security

$npx -y skills add jmxt3/gitscape.ai --skill google-cloud-waf-security

Installs into the current project.

Summary

Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify security requirements, and provide actionable recommendations fo

Files · 1

View on GitHub

SKILL.md

1	# Google Cloud Well-Architected Framework skill for the Security pillar
2
3	## Overview
4
5	The security pillar of the Google Cloud Well-Architected Framework provides
6	design principles and best practices for building a robust security posture by
7	integrating security into every layer of the architecture for cloud workloads.
8	It focuses on maintaining confidentiality and integrity of data and systems
9	while ensuring compliance and privacy. It provides a structured approach to risk
10	management, threat defense, and identity control, enabling you to operate cloud
11	workloads securely and at scale.
12
13	## Core principles
14
15	The recommendations in the security pillar of the Well-Architected Framework are
16	aligned with the following core principles:
17
18	- Implement security by design: Integrate cloud security and network
19	security considerations starting from the initial design phase of your
20	applications and infrastructure. Google Cloud provides architecture
21	blueprints and recommendations to help you apply this principle. Grounding
22	document:
23	https://docs.cloud.google.com/architecture/framework/security/implement-security-by-design
24
25	- Implement zero trust: Use a _never trust, always verify_ approach, where
26	access to resources is granted based on continuous verification of trust.
27	Google Cloud supports this principle through products like Chrome Enterprise
28	Premium and Identity-Aware Proxy (IAP). Grounding document:
29	https://docs.cloud.google.com/architecture/framework/security/implement-zero-trust
30
31	- Implement shift-left security: Implement security controls early in the
32	software development lifecycle. Avoid security defects before system changes
33	are made. Detect and fix security bugs early, fast, and reliably after the
34	system changes are committed. Google Cloud supports this principle through
35	products like Cloud Build, Binary Authorization, and Artifact Registry.
36	Grounding document:
37	https://docs.cloud.google.com/architecture/framework/security/implement-shift-left-security
38
39	- Implement preemptive cyber defense: Adopt a proactive approach to
40	security by implementing robust fundamental measures like threat
41	intelligence. This approach helps you build a foundation for more effective
42	threat detection and response. Google Cloud's approach to layered security
43	controls aligns with this principle. Google Cloud supports this principle
44	through products like Security Command Center, Google Threat Intelligence,
45	and Google SecOps. Grounding document:
46	https://docs.cloud.google.com/architecture/framework/security/implement-preemptive-cyber-defense
47
48	- Use AI securely and responsibly: Develop and deploy AI systems in a
49	responsible and secure manner. The recommendations for this principle are
50	aligned with guidance in the AI and ML perspective of the Well-Architected
51	Framework and in Google's Secure AI Framework (SAIF). Grounding document:
52	https://docs.cloud.google.com/architecture/framework/security/use-ai-securely-and-responsibly
53
54	- Use AI for security: Use AI capabilities to improve your existing
55	security systems and processes through Gemini in Security and overall
56	platform-security capabilities. Use AI as a tool to increase the automation
57	of remedial work and ensure security hygiene to make other systems more
58	secure. Google Cloud supports this principle through products like Google
59	Threat Intelligence and Google SecOps. Grounding document:
60	https://docs.cloud.google.com/architecture/framework/security/use-ai-for-security
61
62	- Meet regulatory, compliance, and privacy needs: Adhere to
63	industry-specific regulations, compliance standards, and privacy
64	requirements. Google Cloud helps you meet these obligations through products
65	like Assured Workloads, Organization Policy Service, and our compliance
66	resource center. Grounding document:
67	https://docs.cloud.google.com/architecture/framework/security/meet-regulatory-compliance-and-privacy-needs
68
69	## Relevant Google Cloud products
70
71	The following are _examples_ of Google Cloud products and features that are
72	relevant to security:
73
74	- Identity and access management
75
76	- Identity and Access Management (IAM): Fine-grained access control for
77	Google Cloud resources.
78	- Identity-Aware Proxy (IAP): Secure access to applications without a VPN.
79	- Chrome Enterprise Premium: Endpoint security and context-aware access.
80
81	- Network security
82
83	- Google Cloud Armor: DDoS protection and Web Application Firewall (WAF).
84	- VPC Service Controls: Define security perime

People who liked this also viewed

6 picks

Type

google-cloud-waf-security

32stars3forks

View on GitHub

How to install google-cloud-waf-security?

jmxt3/gitscape.ai/google-cloud-waf-security

$npx -y skills add jmxt3/gitscape.ai --skill google-cloud-waf-security

Installs into the current project.

Summary

Files · 1

View on GitHub

SKILL.md

1	# Google Cloud Well-Architected Framework skill for the Security pillar
2
3	## Overview
4
5	The security pillar of the Google Cloud Well-Architected Framework provides
6	design principles and best practices for building a robust security posture by
7	integrating security into every layer of the architecture for cloud workloads.
8	It focuses on maintaining confidentiality and integrity of data and systems
9	while ensuring compliance and privacy. It provides a structured approach to risk
10	management, threat defense, and identity control, enabling you to operate cloud
11	workloads securely and at scale.
12
13	## Core principles
14
15	The recommendations in the security pillar of the Well-Architected Framework are
16	aligned with the following core principles:
17
18	- Implement security by design: Integrate cloud security and network
19	security considerations starting from the initial design phase of your
20	applications and infrastructure. Google Cloud provides architecture
21	blueprints and recommendations to help you apply this principle. Grounding
22	document:
23	https://docs.cloud.google.com/architecture/framework/security/implement-security-by-design
24
25	- Implement zero trust: Use a _never trust, always verify_ approach, where
26	access to resources is granted based on continuous verification of trust.
27	Google Cloud supports this principle through products like Chrome Enterprise
28	Premium and Identity-Aware Proxy (IAP). Grounding document:
29	https://docs.cloud.google.com/architecture/framework/security/implement-zero-trust
30
31	- Implement shift-left security: Implement security controls early in the
32	software development lifecycle. Avoid security defects before system changes
33	are made. Detect and fix security bugs early, fast, and reliably after the
34	system changes are committed. Google Cloud supports this principle through
35	products like Cloud Build, Binary Authorization, and Artifact Registry.
36	Grounding document:
37	https://docs.cloud.google.com/architecture/framework/security/implement-shift-left-security
38
39	- Implement preemptive cyber defense: Adopt a proactive approach to
40	security by implementing robust fundamental measures like threat
41	intelligence. This approach helps you build a foundation for more effective
42	threat detection and response. Google Cloud's approach to layered security
43	controls aligns with this principle. Google Cloud supports this principle
44	through products like Security Command Center, Google Threat Intelligence,
45	and Google SecOps. Grounding document:
46	https://docs.cloud.google.com/architecture/framework/security/implement-preemptive-cyber-defense
47
48	- Use AI securely and responsibly: Develop and deploy AI systems in a
49	responsible and secure manner. The recommendations for this principle are
50	aligned with guidance in the AI and ML perspective of the Well-Architected
51	Framework and in Google's Secure AI Framework (SAIF). Grounding document:
52	https://docs.cloud.google.com/architecture/framework/security/use-ai-securely-and-responsibly
53
54	- Use AI for security: Use AI capabilities to improve your existing
55	security systems and processes through Gemini in Security and overall
56	platform-security capabilities. Use AI as a tool to increase the automation
57	of remedial work and ensure security hygiene to make other systems more
58	secure. Google Cloud supports this principle through products like Google
59	Threat Intelligence and Google SecOps. Grounding document:
60	https://docs.cloud.google.com/architecture/framework/security/use-ai-for-security
61
62	- Meet regulatory, compliance, and privacy needs: Adhere to
63	industry-specific regulations, compliance standards, and privacy
64	requirements. Google Cloud helps you meet these obligations through products
65	like Assured Workloads, Organization Policy Service, and our compliance
66	resource center. Grounding document:
67	https://docs.cloud.google.com/architecture/framework/security/meet-regulatory-compliance-and-privacy-needs
68
69	## Relevant Google Cloud products
70
71	The following are _examples_ of Google Cloud products and features that are
72	relevant to security:
73
74	- Identity and access management
75
76	- Identity and Access Management (IAM): Fine-grained access control for
77	Google Cloud resources.
78	- Identity-Aware Proxy (IAP): Secure access to applications without a VPN.
79	- Chrome Enterprise Premium: Endpoint security and context-aware access.
80
81	- Network security
82
83	- Google Cloud Armor: DDoS protection and Web Application Firewall (WAF).
84	- VPC Service Controls: Define security perime

People who liked this also viewed

6 picks

Type