Best practices for Identity and Access Management on Compute Engine (Google Cloud Next '17)

[@jrb65]

great talk on the compute engine security

[@SumitSingh-ut7yu]

How to add our own organization/domain in GCP organization section ?

[@StevenHancz]

Hi At 15:21 you state that a user creates a compute instance running as a service account. How is that possible? Why would a compute engine run as a service account ? And finally does Big Query checks if a service account has permission to execute the get method? IF it does does that not mean that the user has a service account that can execute the get. This does not compute.

[@lijie6431]

2x is the perfect speed

[@VincentTubed]

Isn't AD not LDAP :)?