Andrii Tkach
Member since 2023
Diamond League
25592 points
Cloud 運算中的安全性原則簡介
Earned Nov 20, 2025 EST
Build a Certification Study Guide: PCSE Exam Prep
Earned Nov 13, 2025 EST
使用 Security Command Center 緩解威脅及修復安全漏洞
Earned Nov 13, 2025 EST
運用 Cloud Armor 保護網路
Earned Nov 13, 2025 EST
在 Google Cloud 環境導入 DevSecOps 做法
Earned Nov 11, 2025 EST
Mitigating Security Vulnerabilities on Google Cloud
Earned Nov 10, 2025 EST
Security Best Practices in Google Cloud
Earned Nov 6, 2025 EST
Manage Security in Google Cloud
Earned Oct 31, 2025 EDT
Networking in Google Cloud: Hybrid and Multicloud
Earned Oct 28, 2025 EDT
Networking in Google Cloud: Load Balancing
Earned Oct 27, 2025 EDT
Networking in Google Cloud: Network Security
Earned Oct 23, 2025 EDT
Networking in Google Cloud: Network Architecture
Earned Oct 22, 2025 EDT
Networking in Google Cloud: Routing and Addressing
Earned Oct 20, 2025 EDT
Networking in Google Cloud: Fundamentals
Earned Oct 17, 2025 EDT
Introduction to Security in the World of AI
Earned Oct 16, 2025 EDT
Google Kubernetes Engine Best Practices: Security
Earned Oct 14, 2025 EDT
在 Google Cloud 實作 Cloud 安全防護措施：基礎知識
Earned Oct 13, 2025 EDT
Observability in Google Cloud
Earned Oct 9, 2025 EDT
Introduction to Security Principles in Cloud Computing
Earned Oct 8, 2025 EDT
建立及管理 Bigtable 執行個體
Earned Sep 27, 2023 EDT
建立及管理 AlloyDB 執行個體
Earned Sep 25, 2023 EDT
[DEPRECATED] Enterprise Database Migration
Earned Sep 25, 2023 EDT
從 BigQuery 資料取得深入分析結果
Earned Jun 30, 2023 EDT
在 Google Cloud 實作 CI/CD 管道
Earned Jun 30, 2023 EDT
Google Kubernetes Engine 成本效益最佳化
Earned Jun 28, 2023 EDT
DEPRECATED Build Google Cloud Infrastructure for Azure Professionals
Earned Jun 25, 2023 EDT
建構適用於 AWS 專家的 Google Cloud 基礎架構
Earned Jun 25, 2023 EDT
建構安全的 Google Cloud 網路
Earned Jun 24, 2023 EDT
設定 Google Cloud 網路
Earned Jun 21, 2023 EDT
建立 Google Cloud 網路
Earned Jun 16, 2023 EDT
在 Compute Engine 導入 Cloud Load Balancing
Earned Jun 14, 2023 EDT
在 Google Cloud 部署 Kubernetes 應用程式
Earned Jun 12, 2023 EDT
在 Google Cloud 使用 Terraform 建構基礎架構
Earned Jun 12, 2023 EDT
透過 Google Cloud Observability 監控及記錄系統狀態
Earned Jun 9, 2023 EDT
在 Google Cloud 實作 DevOps 工作流程
Earned Jun 8, 2023 EDT
在 Google Cloud 設定應用程式開發環境
Earned Jun 7, 2023 EDT
DEPRECATED Cloud Operations and Service Mesh with Anthos
Earned Jun 6, 2023 EDT
Getting Started with Terraform for Google Cloud
Earned Jun 2, 2023 EDT
Logging and Monitoring in Google Cloud
Earned Jun 1, 2023 EDT
可靠的 Google Cloud 基礎架構：設計與程序
Earned May 26, 2023 EDT
Developing a Google SRE Culture
Earned May 20, 2023 EDT
Google Cloud 基礎知識：核心基礎架構
Earned May 18, 2023 EDT
這是 Google Cloud 網路安全專業證書五堂課程中的第一堂。本課程將介紹網路安全的必要基礎，包括安全防護生命週期、數位轉型和雲端運算的重要概念。您將瞭解初級雲端資安分析師用來自動執行工作的常見工具。
Learn more
Learn how to use Gemini Notebook to create a personalized study guide for the Professional Cloud Security Engineer certification exam. You'll review Gemini Notebook features, create a notebook, and learn how to use a study guide to practice for the certification exam.
Learn more
完成使用 Security Command Center 緩解威脅及修復安全漏洞技能徽章中階課程，即可證明您具備下列技能： 防範及管理環境威脅、找出並修復應用程式安全漏洞，以及應對安全異常狀況。
Learn more
瞭解如何在 Google Cloud 保護部署項目， 包括使用 Cloud Armor 機器人管理功能，降低機器人風險及控管自動化用戶端的存取權；使用 Cloud Armor 拒絕清單，限制或允許 存取 Google Cloud 邊緣的 HTTP(S) 負載平衡器；套用 Cloud Armor 安全性政策，限制存取 Cloud CDN 和 Google Cloud Storage 中的快取物件； 以及使用 Cloud Armor WAF 規則，減少常見安全漏洞。
Learn more
這堂課程會介紹基本技巧，以便您在 Google Cloud 採用安全又有效率的 DevSecOps 做法。您會瞭解如何使用 Artifact Registry、 Cloud Build、Cloud Deploy 和二進位授權等 Google Cloud 服務來保護開發管道，在整個 CI/CD 管道建構、測試及部署採用安全控管機制的容器化應用程式。
Learn more
In this self-paced training course, participants learn mitigations for attacks at many points in a Google Cloud-based infrastructure, including Distributed Denial-of-Service attacks, phishing attacks, and threats involving content classification and use. They also learn about the Security Command Center, cloud logging and audit logging, and using Forseti to view overall compliance with your organization's security policies.
Learn more
This self-paced training course gives participants broad study of security controls and techniques on Google Cloud. Through recorded lectures, demonstrations, and hands-on labs, participants explore and deploy the components of a secure Google Cloud solution, including Cloud Storage access control technologies, Security Keys, Customer-Supplied Encryption Keys, API access controls, scoping, shielded VMs, encryption, and signed URLs. It also covers securing Kubernetes environments.
Learn more
This course provides foundational knowledge for securing your Google Cloud environment. You will learn Google Cloud's security model, including Zero Trust principles and the Shared Fate model. You will configure identity services like Cloud Identity and Workforce Identity Federation, manage access control using Identity and Access Management (IAM) roles, conditions, and policies, and implement network security controls such as VPCs, Cloud Firewall tiers, and VPC Service Controls to build a secure perimeter.
As the foundation of the Security in Google Cloud learning path, this course establishes the core principles required for two subsequent specialized tracks: the five-course Security Best Practices in Google Cloud series and the four-course Mitigate Threats in Google Cloud series.
Learn more
Welcome to the sixth course in our Networking and Google Cloud series, Hybrid and Multicloud. The first module will walk you through various cloud connectivity options, with a deep dive into Cloud Interconnect, exploring its different types and functionalities. In the second module, we'll cover Cloud VPN, discussing its implementation, high availability, VPN topologies, and the Network Connectivity Center for streamline management. By the end of this course, you will be able to explain the different connectivity options available to extend your on-premises and other cloud networks to Google Cloud, and analyze the suitability of different Google Cloud hybrid and multicloud connectivity services for specific use cases.
Learn more
This training course builds on the concepts covered in the Networking in Google Cloud: Fundamentals course. Through presentations, demonstrations, and labs, participants explore and implement Cloud Load Balancing.
Learn more
Welcome to the fourth course of the "Networking in Google Cloud" series: Network Security!
In this course, you'll dive into the services for safeguarding your Google Cloud network infrastructure.
The first module, Distributed Denial of Service (DDoS) Protection, covers how to fortify your network against Distributed Denial of Service (DDoS) attacks, ensuring uninterrupted availability of your services.
In the second module, Controlling Access to VPC Networks, you'll learn the network access control, enabling you to define permissions for who can access your resources and how.
Finally, in the third module, Advanced Security Monitoring and Analysis, we'll explore how to proactively detect and respond to potential threats, keeping your Google Cloud environment secure and resilient.
By the end of this course, you'll have a comprehensive understanding of Google Cloud network security.
Learn more
Welcome to the third course of the "Networking in Google Cloud" series: Network Architecture!
In this course, you will explore the fundamentals of designing efficient and scalable network architectures within Google Cloud.
In the first module, Introduction to Network Architecture, we'll start by introducing you to the core components and concepts of network architecture, including subnets, routes, firewalls, and load balancing.
Then in the second module, network topologies, we'll dive into various network topologies commonly used in Google Cloud, discussing their strengths, and weaknesses.
Learn more
Welcome to the second course in the networking and Google Cloud series routing and addressing.
In this course, we'll cover the central routing and addressing concepts that are relevant to Google Cloud's networking capabilities.
Module one will lay the foundation by exploring network routing and addressing in Google Cloud, covering key building blocks such as routing IPv4, bringing your own IP addresses and setting up cloud DNS. In Module two will shift our focus to private connection options, exploring use cases and methods for accessing Google and other services privately using internal IP addresses.
By the end of this course, you'll have a solid grasp of how to effectively route and address your network traffic within Google Cloud.
Learn more
Networking in Google cloud is a 6 part course series. Welcome to the first course of our six part course series, Networking in Google Cloud: Fundamentals.
This course provides a comprehensive overview of core networking concepts, including networking fundamentals, virtual private clouds (VPCs), and the sharing of VPC networks. Additionally, the course covers network logging and monitoring techniques.
Learn more
Artificial Intelligence (AI) offers transformative possibilities, but it also introduces new security challenges. This course equips security and data protection leaders with strategies to securely manage AI within their organizations. Learn a framework for proactively identifying and mitigating AI-specific risks, protecting sensitive data, ensuring compliance, and building a resilient AI infrastructure. Pick use cases from four different industries to explore how these strategies apply in real-world scenarios.
Learn more
Get Anthos Ready. This Google Kubernetes Engine-centric quest of best practice hands-on labs focuses on security at scale when deploying and managing production GKE environments -- specifically role-based access control, hardening, VPC networking, and binary authorization.
Learn more
完成 在 Google Cloud 實作 Cloud 安全防護措施：基礎知識 技能徽章中階課程， 即可證明您具備下列技能：運用 Identity and Access Management (IAM) 建立及指派角色、 建立及管理服務帳戶、啟用虛擬私有雲 (VPC) 網路中的私人連線、 運用 Identity-Aware Proxy 限制應用程式存取權、 運用 Cloud Key Management Service (KMS) 管理金鑰和已加密資料，以及建立私人 Kubernetes 叢集。
Learn more
Welcome to Observability in Google Cloud, the second part of a two-part course series. It is suggested that you complete part 1, Logging and Monitoring in Google Cloud, prior to taking this course.
This course is all about application performance management tools, including Error Reporting, Cloud Trace, and Cloud Profiler.
Learn more
This is the first of five courses in the Google Cloud Cybersecurity Certificate. In this course, you’ll explore the essentials of cybersecurity, including the security lifecycle, digital transformation, and key cloud computing concepts. You’ll identify common tools used by entry-level cloud security analysts to automate tasks.
Learn more
完成「建立及管理 Bigtable 執行個體」技能徽章入門課程，證明您具備下列技能：建立執行個體、設計結構定義、 查詢資料，以及在 Bigtable 執行管理工作，包括監控效能、設定自動調度節點資源和複製作業。
Learn more
完成建立及管理 AlloyDB 執行個體技能徽章入門課程， 即可證明自己具備下列技能：執行主要 AlloyDB 作業 和工作、從 PostgreSQL 遷移至 AlloyDB、管理 AlloyDB 資料庫，以及 使用 AlloyDB 資料欄引擎加快數據分析查詢。
Learn more
This course is intended to give architects, engineers, and developers the skills required to help enterprise customers architect, plan, execute, and test database migration projects. Through a combination of presentations, demos, and hands-on labs participants move databases to Google Cloud while taking advantage of various services.
This course covers how to move on-premises, enterprise databases like SQL Server to Google Cloud (Compute Engine and Cloud SQL) and Oracle to Google Cloud bare metal.
Learn more
完成 從 BigQuery 資料取得深入分析結果 技能徽章入門課程，即可證明您具備下列技能： 撰寫 SQL 查詢、查詢公開資料表、將樣本資料載入 BigQuery、使用 BigQuery 的查詢驗證工具 排解常見語法錯誤，以及在 Data Studio 中 透過連結 BigQuery 資料建立報表。
Learn more
完成在 Google Cloud 實作 CI/CD 管道技能徽章中階課程，即可獲得技能徽章。 您將透過本課程學習如何使用 Artifact Registry、Cloud Build 和 Cloud Deploy，並且操作 Google Cloud 控制台、Google Cloud CLI、Cloud Run 和 GKE。本課程會介紹如何建構持續整合 管道、儲存及保護構件、掃描安全漏洞、驗證 已核准的發布版本是否有效。此外，您還會實際操作，將應用程式 同時部署至 GKE 和 Cloud Run。
Learn more
完成 Google Kubernetes Engine 成本效益最佳化 技能徽章中階課程， 即可證明您具備下列技能：建立及管理多租戶叢集、依據命名空間監控資源使用量、 設定自動調度叢集和 Pod 資源以提升效能、設定負載平衡以最佳化 資源分配，以及導入有效性和完備性探測，確保應用程式維持健康並符合成本效益。
Learn more
Earn a skill badge by completing the Build Google Cloud Infrastructure for Azure Professionals course, where you learn how to configure IAM permission, orchestrate workloads using Kubernetes, host a web application using compute engine, and configure load balancing. A skill badge is an exclusive digital badge issued by Google Cloud in recognition of your proficiency with Google Cloud products and services and tests your ability to apply your knowledge in an interactive hands-on environment. Complete this Skill Badge, and the final assessment challenge lab, to receive a digital badge that you can share with your network.
Learn more
完成 建構適用於 AWS 專家的 Google Cloud 基礎架構 課程即可獲得技能徽章。在這個課程，您將學會如何設定 IAM 權限、 使用 Kubernetes 自動調度管理工作負載、透過 Compute Engine 託管網頁應用程式， 以及設定負載平衡機制。
Learn more
完成「建構安全的 Google Cloud 網路」課程，即可獲得技能徽章。本課程將說明多項網路相關 資源，協助您在 Google Cloud 建構、調度資源和保護應用程式。
Learn more
完成「設定 Google Cloud 網路」課程，即可獲得技能徽章。 您將瞭解如何在 Google Cloud Platform 執行基本的網路工作，包括建立自訂網路、新增子網路防火牆規則，還有建立 VM 並測試 VM 之間的通訊延遲。
Learn more
完成 建立 Google Cloud 網路 課程即可獲得技能徽章。這個課程將說明 部署及監控應用程式的多種方法，包括查看 IAM 角色及新增/移除 專案存取權、建立虛擬私有雲網路、部署及監控 Compute Engine VM、編寫 SQL 查詢、在 Compute Engine 部署及監控 VM，以及 使用 Kubernetes 透過多種方法部署應用程式。
Learn more
完成「在 Compute Engine 導入 Cloud Load Balancing」技能徽章入門課程，即可證明您具備下列技能： 在 Compute Engine 建立及部署虛擬機器， 以及設定網路和應用程式負載平衡器。
Learn more
完成 在 Google Cloud 部署 Kubernetes 應用程式 技能徽章中階課程，即可證明您具備下列技能： 設定及建構 Docker 容器映像檔、建立及管理 Google Kubernetes Engine (GKE) 叢集、運用 kubectl 有效 管理叢集，以及運用強大的持續推送軟體更新做法來部署 Kubernetes 應用程式。
Learn more
完成「在 Google Cloud 使用 Terraform 建構基礎架構」技能徽章中階課程， 即可證明自己具備下列知識與技能：使用 Terraform 的基礎架構即程式碼 (IaC) 原則、運用 Terraform 設定佈建及管理 Google Cloud 資源、有效管理狀態 (本機和遠端)，以及將 Terraform 程式碼模組化，以利重複使用和管理。
Learn more
完成 透過 Google Cloud Observability 監控及記錄系統狀態 技能徽章入門課程， 即可證明您具備下列技能：監控 Compute Engine 中的虛擬機器、 運用 Cloud Monitoring 監管多項專案、在 Cloud Functions 延伸應用監控和記錄功能、 建立和傳送自訂應用程式指標，以及根據自訂指標設定 Cloud Monitoring 快訊。
Learn more
完成 在 Google Cloud 實作 DevOps 工作流程 技能徽章中階課程， 即可證明您具備下列技能：建立與管理 Git 存放區、 在 Google Kubernetes Engine (GKE) 發布、管理和調度 Deployment， 以及建立 CI/CD 管道，自動建構容器映像檔與執行 GKE 部署作業。
Learn more
只要修完「在 Google Cloud 設定應用程式開發環境」課程，就能獲得技能徽章。 在本課程中，您將學會如何使用以下技術的基本功能，建構和連結以儲存空間為中心的雲端基礎架構：Cloud Storage、Identity and Access Management、Cloud Functions 和 Pub/Sub。
Learn more
Course two of the Architecting Hybrid Cloud with Anthos series prepares students to operate and observe Anthos environments. Through presentations and hands-on labs, participants explore adjusting existing clusters, setting up advanced traffic routing policies, securing communication across workloads, and observing clusters in Anthos. This course is a continuation of course one, Multi-Cluster, Multi-Cloud with Anthos, and assumes direct experience with the topics covered in that course.
Learn more
This course provides an introduction to using Terraform for Google Cloud. It enables learners to describe how Terraform can be used to implement infrastructure as code and to apply some of its key features and functionalities to create and manage Google Cloud infrastructure.
Learners will get hands-on practice building and managing Google Cloud resources using Terraform.
Learn more
Welcome to the two-part course on Logging, Monitoring, and Observability in Google Cloud. The core operations tools in Google Cloud break down into two major categories. The operations-focused components and the application performance management tools. This course, Logging and Monitoring in Google Cloud, covers the operations-focused components including Logging, Monitoring, and Service Monitoring. After taking this course, it is suggested that you complete part 2, Observability in Google Cloud, to learn about the available application performance management tools.
Learn more
這堂課程可讓參加人員瞭解如何使用確實有效的設計模式，在 Google Cloud 中打造相當可靠且效率卓越的解決方案。這堂課程接續了「設定 Google Compute Engine 架構」或「設定 Google Kubernetes Engine 架構」課程的內容，並假設參加人員曾實際運用上述任一課程涵蓋的技術。這堂課程結合了簡報、設計活動和實作研究室，可讓參加人員瞭解如何定義業務和技術需求，並在兩者之間取得平衡，設計出相當可靠、可用性高、安全又符合成本效益的 Google Cloud 部署項目。
Learn more
In many IT organizations, incentives are not aligned between developers, who strive for agility, and operators, who focus on stability. Site reliability engineering, or SRE, is how Google aligns incentives between development and operations and does mission-critical production support. Adoption of SRE cultural and technical practices can help improve collaboration between the business and IT. This course introduces key practices of Google SRE and the important role IT and business leaders play in the success of SRE organizational adoption.
Learn more
「Google Cloud 基礎知識：核心基礎架構」介紹了在使用 Google Cloud 時會遇到的重要概念和術語。本課程會透過影片和實作實驗室，介紹並比較 Google Cloud 的多種運算和儲存服務，同時提供重要的資源和政策管理工具。
Learn more
