Provision preemptible VMs to reduce cost. Discontinue use of all GCP services and APIs that are not HIPAA-compliant.

Provision preemptible VMs to reduce cost. Disable and then discontinue use of all GCP services and APIs that are not HIPAA-compliant.

Provision standard VMs in the same region to reduce cost. Discontinue use of all GCP services and APIs that are not HIPAA-compliant.

Provision standard VMs to the same region to reduce cost. Disable and then discontinue use of all GCP services and APIs that are not HIPAA-compliant.

Engage with a security company to run web scrapers that look your for users' authentication data om malicious websites and notify you if any is found.

Deploy intrusion detection software to your virtual machines to detect and log unauthorized access.

Schedule a disaster simulation exercise during which you can shut off all VMs in a zone to see how your application behaves.

Configure a read replica for your Cloud SQL instance in a different zone than the master, and then manually trigger a failover while monitoring KPIs for our REST API.

Connect Google Data Studio to BigQuery. Create a dimension for the users and a metric for the amount of queries per user.

In the BigQuery interface, execute a query on the JOBS table to get the required information.

Use 'bq show' to list all jobs. Per job, use 'bq ls' to list job information and get the required information.

Use Cloud Audit Logging to view Cloud Audit Logs, and create a filter on the query operation to get the required information. 

Use Terraform to create the managed instance group and a startup script to install the OS package dependencies.

Create a custom VM image with all OS package dependencies. Use Deployment Manager to create the managed instance group with the VM image.

Use Puppet to create the managed instance group and install the OS package dependencies.

Use Deployment Manager to create the managed instance group and Ansible to install the OS package dependencies.

Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts', and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery jobUser. Share the appropriate dataset with view access with each respective analyst country-group.

Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts', and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery jobUser. Share the appropriate tables with view access with each respective analyst country-group.

Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts', and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery dataViewer. Share the appropriate dataset with view access with each respective analyst country- group.

Create a group per country. Add analysts to their respective country-groups. Create a single group 'all_analysts', and add all country-groups as members. Grant the 'all_analysts' group the IAM role of BigQuery dataViewer. Share the appropriate table with view access with each respective analyst country-group.

Local SSD for customer session state data. Lifecycle-managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.

Memcache backed by Cloud Datastore for the customer session state data. Lifecycle-managed Cloud Storage for log archives, thumbnails, and VM boot/data volumes.

Memcache backed by Cloud SQL for customer session state data. Assorted local SSD-backed instances for VM boot/data volumes. Cloud Storage for log archives and thumbnails.

Memcache backed by Persistent Disk SSD storage for customer session state data. Assorted local SSD-backed instances for VM boot/data volumes. Cloud Storage for log archives and thumbnails.

StatefulSets

Role-based access control

Container environment variables

Persistent Volumes

Customize the cache keys to omit the protocol from the key.

Shorten the expiration time of the cached objects.

Make sure the HTTP(S) header "Cache-Region" points to the closest region of your users.

Replicate the static content in a Cloud Storage bucket. Point CloudCDN toward a load balancer on that bucket.

All admin and VM system logs are automatically collected by Stackdriver.

Stackdriver automatically collects admin activity logs for most services. The Stackdriver Logging agent must be installed on each instance to collect system logs.

Launch a custom syslogd compute instance and configure your GCP project and VMs to forward all logs to it.

Install the Stackdriver Logging agent on a single compute instance and let it collect all audit and access logs for your environment.

Deploy the update using the Instance Group Updater to create a partial rollout, which allows for canary testing.

Deploy the update as a new version in the App Engine application, and split traffic between the new and current versions.

Deploy the update in a new VPC, and use Google's global HTTP load balancing to split traffic between the update and current applications.

Deploy the update as a new App Engine application, and use Google's global HTTP load balancing to split traffic between the new and current applications.