Add all three projects into a folder, and define the policies on the folder:

Folders are a grouping mechanism and can contain projects, other folders, or a combination of both. Folders can be used to group resources that share common IAM policies.

Overview of Cloud Billing concepts

Dataflow:

Google’s stream analytics makes data more organized, useful, and accessible from the instant it’s generated. Built on Dataflow along with Pub/Sub and BigQuery, our streaming solution provisions the resources you need to ingest, process, and analyze fluctuating volumes of real-time data for real-time business insights.

Cloud Logging collects logs from these services and then saves them to Cloud Storage buckets. Dataflow then processes the logs by extracting metadata and computing basic aggregations. The Dataflow pipeline is designed to process the log elements daily to generate aggregate metrics for server response times, based on the logs for each day. Finally, the output from Dataflow is loaded into BigQuery tables, where it can be analyzed to provide business intelligence. This solution also explains how you can change the pipeline to run in streaming mode, for low-latency, asynchronous log processing.

Least Privilege: Identity and Access Management (IAM) overview

IAM lets you grant granular access to specific Google Cloud resources and helps prevent access to other resources. IAM lets you adopt the security principle of least privilege, which states that nobody should have more permissions than they actually need.

Dataproc is a fully managed and highly scalable service for running Apache Spark, Apache Flink, Presto, and 30+ open source tools and frameworks.

Google Cloud Migrate for Compute Engine migrates VMs from your on-premises data center into Compute Engine. For other workloads that are better suited as a VM, simply move them as is with Migrate for Compute Engine and leverage VPC network integration with GKE.

Migrate for Compute Engine 5.0 documentation

BigQuery ML lets you create and execute machine learning models in BigQuery using standard SQL queries. BigQuery ML democratizes machine learning by letting SQL practitioners build models using existing SQL tools and skills. BigQuery ML increases development speed by eliminating the need to move data.

What is BigQuery ML?

Cloud BigTable: A fully managed, scalable NoSQL database service for large analytical and operational workloads with up to 99.999% availability. Bigtable is ideal for storing very large amounts of data in a key-value store and supports high read and write throughput at low latency for fast access to large amounts of data. In addition, Cloud BigTable is ideal when you want to ingest time series data from sensors at low latency it is a fully managed service used for large NoSQL analytical workloads. Hence, Cloud BigTable would be the best option out of the rest.

Cloud Bigtable

Cloud Identity is an Identity as a Service (IDaaS) solution that centrally manages users and groups. You can configure Cloud Identity to federate identities between Google and other identity providers, such as Active Directory and Azure Active Directory. Cloud Identity also gives you more control over the accounts that are used in your organization. For example, if developers in your organization use personal accounts, such as Gmail accounts, those accounts are outside of your control. When you adopt Cloud Identity, you can manage access and compliance across all users in your domain.

Overview of Cloud Identity

Google Cloud VMWare Engine: Using Google Cloud VMWare Engine, you may easily lift and shift your VMware-based applications to Google Cloud without changes to your apps, tools, or processes. The service provides all the hardware and VMware licenses you need to run in a dedicated VMware SDDC in Google Cloud.

Google Cloud VMware Engine

Google Cloud Directory Sync: Google Cloud Directory Sync enables administrators to synchronize users, groups, and other data from an Active Directory/LDAP service to their Google Cloud domain directory. You use GCDS to synchronize your Google users, groups, and shared contacts to match the information in your LDAP server.

About Google Cloud Directory Sync