cloud-armor

ACM/ASM Workshop

Demo repo with Terraform code to make a RedHat Linux Compute Virtual Machine on Google Cloud Platform using Load Balancer with Cloud Armor

GKE Private Cluster | Terraform IaC | CI/CD: GitHub Actions + WIF (zero SA keys) | Observability: Grafana 11 + Cloud Monitoring + GKE dashboard | DR: Velero + GCS — RTO 4s, RPO <24h | Spot e2-small

Because We don't have $3,000/month for Cloud Armor Enterprise.

Google Cloud Armor provider for octorules

Terraform infrastructure for routing external HTTPS traffic to a private GKE cluster across two GCP projects using this flow: Cloud Armor → External ALB → PSC → Internal NLB → Private GKE → Nginx Ingress Controller → App

This repository provides a Python-based Intrusion Prevention System (IPS) for Google Cloud, automatically blocking malicious IPs via Pub/Sub notifications and dynamically managing firewall rules in your GCP VPC.

netsec-cloud-armor 🛡️⚡ : Network Security # Cloud Armor # Load Balance

Terraform module for Google Cloud Armor with WAF rules, rate limiting, geo-blocking, bot management, and adaptive protection

Terraform-based Multi-tier Web Application on Google Cloud with CI/CD, Load Balancing, Cloud Armor, and Monitoring

Google Cloud security study cases with Cloud Armor, NGFW, BeyondCorp, KMS, logging, monitoring, VPC Flow Logs, and audit-ready evidence.

A seed and a demo project about how to implement a fail2ban kind functionality in a cloud environment

GKE Autopilot with Terraform — Workload Identity, VPC-native, Cloud Armor WAF, Managed Prometheus

Secure GitHub Actions CI/CD pipeline for GKE: Checkov IaC scanning, Trivy container scanning, Workload Identity Federation, Binary Authorization, and Cloud Armor — all gated before prod deploy

canstd 🕸️🛡️⛈️ : NetSec Threat Detection # Cloud Armor # XSS # SQLi