Certification Prep and Procedure

0:00The associate cloud engineer course has a whole bunch of objectives.

0:03Unfortunately, most of them assume that you have a cloud environment all set up

0:08and also completely empty, which is a weird state to be because cloud accounts

0:14don't just grow on trees.

0:15They form in the clouds, I guess.

0:18No, but this skill is going to be designed to get us to the point where we

0:22can start figuring out the objectives for the ACE certification.

0:26And we're going to do that by creating Google accounts and making sure that we

0:30can log in and we have everything set up so we can actually do all of the

0:34things required to get the objectives covered so that we can get this

0:37certification.

0:00The associate cloud engineering course or certificate used to be the entry

0:05level Google certification when it comes to their cloud platform that changed a

0:09while back though, and I think it was for the better.

0:12And that's because while the ACE certification does start at the very beginning

0:17like you start with an empty environment and you design it from scratch.

0:22It has some expectations like the person should have some experience in the

0:28cloud and they have experience managing things that are already deployed into

0:32the cloud.

0:33Whereas the cloud digital leader certification and course is designed for folks

0:39who are IT savvy but don't have a real grasp for what takes place in the cloud

0:45or the different types of scenarios that cloud computing can represent because

0:50cloud computing.

0:51By itself can mean a wide variety of things from multi cloud deployments to

0:56hybrid deployments.

0:57All these different things are all included in what it means to be in the cloud

1:03and so the cloud digital leader is a certification that just kind of gives you

1:08that foundation, thus the term foundational certification.

1:12And so if you're not comfortable talking about cloudy things around the water

1:16cooler, something like digital cloud leader will probably be a better fit to

1:21start with it kind of just gives you that foundational understanding of cloud

1:25computing.

1:26Now, this course is for the cloud engineer, the associate cloud engineer.

1:32And even though it used to be the entry level course, it is pretty robust and

1:37it talks about a wide variety of actual deployment into the cloud, not just

1:41concepts but actual demonstrable things that we're going to do.

1:46And so this does expect you to have that foundational understanding. Now, after

1:51that, you can go to the more advanced certifications. So this is kind of like

1:57This is step number one, and then this is step number two, and then step number

2:02three is going to be any of these professional level certifications.

2:06So if you want to eventually get these certifications for Google cloud platform

2:11.

2:12The first step is to get that associate cloud engineer, because that's a

2:17broader, but not quite as deep as the different certifications at the

2:21professional level.

2:22So I expect when we go into this course that you understand the terms when I

2:27say things like, well, this is going to be for a hybrid installation or we're

2:31talking about different regions for load balancing.

2:34We're talking about data lakes. So we're talking about a data warehouse. What

2:39all those terms mean should be comfortable or at least not so foreign that you

2:44're a little bit dear in the headlights look right.

2:47So if you can talk about those things, but haven't actually done a lot of

2:50implementation, you're in the right place.

0:00The ACE certification or Associate Cloud Engineer certification, I'll probably

0:05refer to it as ACE

0:06for the bulk of this course. It is a very well-rounded certification, meaning

0:12that it covers a wide

0:14variety of topics that are going to need to be understood in order to be

0:17successful as a

0:18cloud engineer. The problem with rounded or circular things is that it's often

0:24difficult to know

0:25where to start. Let me show you what I'm talking about. This is part of the

0:29objectives from the

0:31actual ACE course, and you'll see that section one has some pretty basic things

0:36like create a

0:37resource hierarchy, apply organizational policies, grant members, roles within

0:42a project, manage users,

0:44enable API, all of these things are well and good, but they assume that you

0:50have a cloud console that

0:51you can start doing things in right away. But of course, we have to get to that

0:57point before we can

0:58actually do any of these well-rounded objectives that are going to get us into

1:03the cloud. So while

1:06it's pretty clear that we're going to start by creating some resources, we need

1:10to have a place

1:11to do that. And there's a couple different ways that we can go about getting

1:15our empty environment

1:17going. So what we're going to do is approach it from a couple different ways.

1:21But I want to start

1:22simply before we kind of try and dive into this elaborately configured system,

1:30because we should

1:31be able to know how to elaborately configure it before we just kind of dive in

1:36headfirst.

1:37So while you may already have a Google workplace that you're a part of, or you

1:42might already have

1:43some elaborate system set up, I encourage you to actually start with a fresh

1:50account. And this may

1:51seem a little counterintuitive. But if you start with just a plain old Gmail

1:56account, just something

1:58at gmail.com, it's going to give you some advantages. Because if you mess

2:02something up, first of all,

2:04you're not messing up any cloud environment that you may be a part of, you're

2:08going to have full

2:10administrator access, because your Gmail account is going to be the owner of

2:15the entire cloud

2:16infrastructure. And so even though it's going to limit us in some ways, I think

2:21that a great place

2:22to start is to create a brand new Gmail account, or possibly two or three,

2:27depending, let me talk

2:29about that in a second, but if you start with a Gmail account, it's going to

2:32give us some advantages

2:34that make the disadvantages worthwhile. So first of all, creating a Gmail

2:38account,

2:38you've probably done this. But if you haven't done it in a while, there's a

2:42couple things you need

2:42to know one, you're probably going to be limited to four Gmail accounts that

2:48you own. And I say

2:49probably because it's not really clear from Google how they set up the

2:54limitations on how many Gmail

2:56accounts you can verify. And that's the key. Verification requires a phone, or

3:02specifically a

3:04cell phone or a mobile device that you can get a text message that will verify

3:08you're an actual

3:09human being not just trying to create tons and tons of Gmail accounts. Now,

3:13supposedly, you're

3:15limited to four Gmail accounts that you can create per cell phone or per mobile

3:21number. Now,

3:23I feel like over the years I have created more than that. So either those

3:27limitations came into

3:28place after I did that, or possibly the number resets. But there's a couple

3:33ways to get around

3:34this one, you could get a new cheap SIM for a month or whatever, so that you

3:40can verify a fresh

3:41account. Like I had a, I had a small secondary phone that I was playing with

3:46and it gave me a

3:47number and then I could verify it I didn't at the time, but I could have used

3:50that to verify like

3:51a burner phone, right? You can set that up to create accounts. Or what I did

3:56the one time I got

3:57a message that I couldn't create another account is I used my spouse's cell

4:01phone number for the

4:02verification, because she doesn't have any desire to set up multiple accounts.

4:06And so I just used

4:07her number, which allowed me to verify it and then I could use it without any

4:11issues. So if you

4:12create at least one brand new Gmail account, you're going to be able to use

4:18that account for your

4:20training. And some more advantages are, if you have a Gmail account, you can

4:25create a cloud console

4:27service and that you can then start a free trial. Now the free trial, it used

4:34to be a full year.

4:35Now the free trial from Google Cloud platform is only 90 days, but in that 90

4:40days, you have $300

4:43of credit that you can use to spin up machines and do all of the various things

4:49in Google Cloud

4:51platform that we're going to cover in this course without spending any of your

4:55money because this

4:56$300 US credit is truly that it is money that you can spend on Google Cloud

5:03platform, real services,

5:05real devices, live IP addresses, it's a real environment that we're going to be

5:10setting up.

5:11The one caveat is that you do have to have a credit card so that it can verify

5:16that again,

5:16you are a human, but it's also important to know that this credit card is not

5:20going to be charged

5:22if you run out of the 90 days or you spend the $300. It's whichever one of

5:27these comes first is

5:28when your free trial ends. But if you do run out of days or run out of credit,

5:33it's not going to

5:34just automatically start charging, you actually have to activate your billing.

5:39So yes, they have

5:39your credit card information, but it's not set up to start billing that credit

5:44card unless you

5:46go and make that billing arrangement in your cloud platform. So you don't have

5:50to worry that

5:52even though you're putting in your credit card to verify that you are a human

5:54being,

5:55you're not going to incur charges until you go through the process of

6:00purposefully setting that

6:02up past your 90 days or past your $300 of usage. Hopefully that makes sense.

6:07And so that's why I

6:08recommend you start with a fresh Gmail account, even if you already have a

6:12Gmail account,

6:13because this ACE course is going to be something that you set up, but you're

6:18probably not going to

6:20want long term, right? We're just going to be setting stuff up that is

6:24arbitrary. And then

6:25once your 90 days or $300 is up, you can kind of abandon Google Cloud platform

6:30on that Gmail

6:31account and keep the Gmail account or just abandon the Gmail account to every

6:35time you start a course,

6:37assuming you can get another Gmail account created. It's a great way to get $

6:41300 worth of credit

6:43that you can play with in the Google Cloud platform.

0:00Okay, so I just opened up a new Chrome profile and I'm going to click sign in

0:06and since this is

0:07creating a new account, we're just going to simply press the create account

0:11button. And to do that,

0:13we're going to specify which type of account and this is important. If you want

0:17the free trial,

0:18what you do, you have to say a personal use account. Now, if you're doing this

0:24for business,

0:25like you're being paid for your business and they are sponsoring this, you may

0:31not be able to

0:31select for personal use. You have to select for work or business and then they

0:35might have to pay

0:36for your your Google Cloud credits. But assuming that you're doing this on your

0:41own and you want

0:41to have that $300 free trial credit, we need to say for personal use because a

0:47business account is

0:49not eligible for the free trial. So for personal use is what I'm going to say.

0:54And I'm going to say

0:55my first name is Sean, my last name is powers. I'm going to put in my birthday,

1:05I might blur this

1:06out, click next, it's going to give me some options for what this Gmail address

1:11would be. I'm going

1:12to say create your own Gmail address and I'm just going to say, CBT, ace. Sean.

1:20Looks like that's

1:21available. So very cool password. And now this is the part where it confirms I

1:26'm not a robot and I

1:28have to enter a cell phone number that can receive a text message. So I'm going

1:32to try my actual

1:33number, I'm going to blur it out. And we'll see if I'm able to create one with

1:36my account, otherwise

1:37we'll have to or with my cell phone number, otherwise we'll have to come up

1:40with something else creative.

1:41It let me do that. So now I'm going to check my phone and I should be getting a

1:47code and I did.

1:49It's right here on my phone. I don't even have to blur this because it's going

1:53to be expired by the

1:54time you're watching this. And now a recovery email address is it's a good idea

2:00to put one in here

2:01that is valid so that if we lose our login information or something like that,

2:06this is a way that we

2:06can recover the email address like also if it's compromised or something like

2:10that. So recovery email

2:12address, I'm going to put in one of my existing email addresses, I'm going to

2:18say next. And so

2:19sure enough, CBT ace. Sean at gmail.com is my new Gmail account. So it's all

2:25set up it worked. It

2:26allowed me to use my phone, which is awesome. If it doesn't, again, you can use

2:30somebody else's

2:30phone or or get a burner phone or something that you can receive an SMS on, you

2:34'll just need to do

2:35that if you're going to create a fresh Gmail account. Next, yes, we read all of

2:39this, I'm going to agree.

2:40That's not encouraging. Try again. Oh, no, I didn't work. Let's see if it

2:47actually created

2:48the account. That was a little unsettling, wasn't it? All right, let's try to

2:51sign into the account

2:52that we just made, which was CBT ace. Sean.

3:03Okay, thankfully did let me log in even though I got a 404 page. So yes, my

3:07account did work.

3:08And yes, I'm in. I'll turn on sync. Okay. And here we are. I'm logged in

3:13apparently it

3:14chose pink as my color, but that's fine. You'll see I'm logged in here. Hi,

3:18Sean CBT ace. Sean

3:20at gmail.com. And now what I want to do though, number, I said there are some

3:24nuances like, for

3:25example, you should have a recovery email address put in there. But also we

3:29should enable multi-factor

3:31auth or two factor auth. And that's going to make it so that our account, which

3:37is going to have

3:38our credit card information in it, if it's compromised, it will make it more

3:42difficult to

3:43compromise, right? So I have a username and password right now. But I also want

3:46to have

3:47another layer of security. And so we're going to go into

3:50our account, manage my Google account. Over here, we're going to click on

3:55security.

3:57If you look down here, it says two step verification again, two factor auth,

4:02multi factor auth,

4:04two step verification. Basically, it's a way that we can

4:07require not only our username and password, but our username, password, and

4:13something else.

4:14Usually it's something we know, which is our password and something we have,

4:16which can be like a

4:17security key we put in or a text message we receive or Google will often send

4:24us an approval thing

4:25if we have an existing Google app on our mobile device. So there's multiple

4:30ways that we can do this.

4:31However, we definitely want to turn two factor auth on. So click on that and it

4:36says I could

4:36add a phone number. But what I want to do is turn on two step verification. So

4:41click there.

4:42So here is where it's going to ask me that phone number to get that text

4:46message that will

4:47allow me to log in. And so I'm going to put in that same phone number that I

4:51use to verify this

4:52account. Now, if you look, assuming that the blurring is good, it says you can

4:56use a Google

4:56voice number for this. However, if you lose access to your Google account, well

5:01, you can't

5:02you want to have access to the Google voice number, right? So it's good to use

5:06a cell phone

5:07from a carrier to use this number for two factor authentication. So when I do

5:12that, and I know

5:13that this will work because I use this number again to create the account. So

5:17if I look at my phone

5:18again, I have that number in zero two one eight two six. All right, and I'm

5:26going to click verify.

5:28Okay, so now it says I am connected with two factor verification right there. I

5:33'm going to

5:34click done. But if we look down here, notice that there are other ways that we

5:39can secure our account,

5:40right? There's pass keys and security keys. This would be like a USB key if you

5:44have like a

5:45UB key or something like that. Google Authenticator, this is the kind of thing

5:49where

5:49it'll ask you for like a six digit code as you're logging in, you have 30

5:53seconds to enter it. So

5:55this is a good one that you could use instead of the text message. Because

5:59while it's good,

5:59you know, SMS is a good form of multifactor off. The problem is if your phone

6:04number is compromised,

6:06like if somebody calls and pretends to be you with your cell phone provider and

6:11they convince them to

6:12move your number to a different SIM card and then they have access to that,

6:16well, then you can be

6:17in trouble. So it's good to have different ways to get into your account. One

6:20of the ones that you

6:21should definitely do though is this one called backup codes on the bottom. If

6:24you click on that,

6:25it's going to give you here. I'll just click get backup codes. And you'll see

6:31here that these codes,

6:33which I'm going to click the trash can as soon as we're done. So I'm not these

6:36aren't blurred out.

6:37But basically these codes will act as a multifactor off. If you for some reason

6:44lose access to your

6:45phone, so you can't get that SMS off, or if you set up a different form of two

6:49factor off and you

6:51don't have access to it, you can use these codes and you get 10 of them. And

6:54they're single use. So

6:56as soon as you use one of these as your, you know, multifactor off, it's no

6:59good. But you can use these

7:02and save your account if it gets compromised or whatever. Or like I said, if

7:06you if you lose

7:07access to your cell phone, you can use these codes to log in. And generally, I

7:12recommend that

7:13you print them and there's even a button there that'll print it directly onto a

7:16piece of paper.

7:17You take that piece of paper and put it in a safe so that a fireproof safe so

7:22that you will

7:23almost never need it. But if you do, it's somewhere you know where it is and it

7:27's secured. Because

7:28these numbers will function just as a, you know, as your phone text for a

7:33multifactor off. So

7:34you don't want these numbers to leak anywhere because then you've completely

7:38eliminated

7:39the benefit of having multifactor off. Okay, so these are the the codes that

7:44you can get. I

7:44recommend doing this. Like I said, I'm going to erase those because they're

7:49just on this video.

7:50So backup codes are something to do. If you go down here, Google prompt, they

7:55should prompt you

7:56on your phone and they might do that instead of the text message. If you have a

8:01Google app that's

8:01logged in on your phone, instead of sending you a text message, they will just

8:05send you a prompt

8:07and you can approve it that way. Yeah, my phone number is there, backup codes,

8:13and we can also do

8:13the Google Authenticator or Authy if you're familiar with Authy. And this is

8:17that thing where every 30

8:18seconds it creates a new token. You have to use that when you log in. So it's

8:22okay to have lots of

8:24different options set up like we can set up authenticator here in your app.

8:28Like in my case,

8:29it's going to be Authy. I use Authy instead of Google Authenticator. If you

8:34scan that QR code,

8:35it will put it in there and it will generate those tokens which can act as

8:39another way to log in.

8:41So your your first level of security is always going to be your password. And

8:45then your second

8:46factor can be it can be the authenticator app. It could be the Google prompt

8:51and one of your

8:52logged in devices on your phone. It could be an SMS message and that will give

8:57you a code that

8:57you can log in. But you want to make sure that you have more than just your

9:01password securing

9:03your account. Now you might want to set up multiple Gmail accounts. But once

9:07you have your account

9:08created and you can log in, go ahead and head over to console.cloud.google.com.

9:16And this is where when you're activating the Google Cloud console, you're going

9:22to have to agree

9:22to the terms of service, continue. And this right here is where it says you

9:26could try Google Cloud

9:27with $300 in free credits, which is truly just money that you can spend. So I'm

9:32going to say try

9:33for free. And it's going to walk me through the process of getting those $300

9:40of credit. And notice

9:42I said it says right here, just like I said, it does not auto charge after the

9:46free trial ends.

9:47We're going to put in a credit card number. But you don't have to worry that it

9:50's just going to

9:50start charging your credit card without you going through the process of

9:53activating it for billing

9:55specifically. So here, I'm in the United States payment verification. I need to

10:02create a new payment

10:04profile. Again, I'm going to choose individual. That's my name. I'm going to

10:09kind of blur out the

10:10rest of this. All right, that's my address. And now I need to add a payment

10:14method. You can either

10:16add a credit, a debit or a bank account bank accounts take a long time to

10:21approve because they like

10:22send a couple pennies and then you need to report how many pennies showed up in

10:25your account. So

10:27that can take like three or four days in order to get that set up. So I'm going

10:32to just add a credit

10:32or a debit card. Definitely gonna blur this one out. I'm literally just using

10:36one of my personal

10:37credit cards. And we'll find out in a second if this works. But I actually have

10:41a gift card,

10:42a Visa gift card that someone has given me that counts as a debit card. So let

10:46's see it. I just,

10:47you know, you just keep these at the grocery store. So I'm going to see if this

10:50works.

10:50If so, then that's just more information for us. But I haven't tried this in

10:54advance. So we'll

10:55see. Maybe it won't work. Maybe it will. The code on the back. It says prepaid

11:00cards can't be used.

11:01Well, now we know we've learned that together. So I'm news actually one of my

11:04real credit cards,

11:05a little bit unsettling, but we're going to do that. All right, there we go.

11:09That worked. It

11:10took my bank's debit card information. But again, it's not going to be charging

11:15me. So I'm going to

11:15say start free. It's setting up my account. What best describes my organization

11:23or needs? I'm going

11:24to say other doesn't really match any of these learning Google cloud. Who

11:32brought you to Google

11:34cloud? I'm going to say learn about specific products. I don't know why it

11:38wants all this

11:38information from me. What are you're interested in doing? I'm going to say I'm

11:43not sure yet.

11:44Best describes your role. I'm going to say system administrator. What the heck?

11:49All right. So here we

11:50are. It's set up Google Cloud Platform for us. It created a project. We're

11:54going to talk about

11:54projects a little bit later. But my free trial has started. Okay. So it is it

12:00is already going.

12:01And if we go to our dashboard, here we go. We see that we have everything

12:06active.

12:07A Google Cloud Platform status all surfaces are normal. We're going to be going

12:09through this for

12:10the entire course, but it is set up right now. And while doing it this way,

12:17does limit us in some

12:18ways, it's going to give us a lot of advantages, specifically those $300 in

12:22credit, which are just

12:24great. And if we screw something up here, it's not going to be affecting

12:27anything real in our lives,

12:29right? This is a brand new account that we created specifically to learn the

12:32Google ACE certification.

0:00Like I said, when you have just a Gmail account that you're using for training,

0:04it does have a couple major limitations.

0:07And unfortunately, those limitations are things that you need to understand

0:13specifically for the ACE certification.

0:16The biggest issue is when you are an individual user, again, that's the thing

0:21that gives you the ability to use that $300 in free credit.

0:25Anyway, if you are an individual just using a Gmail account, you don't have an

0:31organization. Now that seems obvious, but it's kind of significant too.

0:36And we're going to learn a more about this, but I just want to explain what we

0:39're

0:39setting up the scenario that we're going to find ourselves and how we're going

0:43to use that to our advantage instead of just like, well, I just have a solo

0:48account.

0:49So I can't learn the other stuff.

0:51Oh, yes, you can.

0:51You can learn the other stuff and it's going to be better this way in the long

0:55run.

0:55Trust me.

0:56So the specific limitation that we have when we're using just a Gmail account

1:01is the problem with inheritance.

1:04And when I talk about inheritance, I mean the policies and the roles that we

1:09give at different levels in Google Cloud platform are inherited all the way

1:15down,

1:16which means that if we were to set up policy, which is a set of roles that

1:22includes a bunch of permissions, so like we set a policy for who has access to

1:27SQL, for example, if we set it all the way up here, that is going to trickle

1:33down

1:33to every single aspect of our Google Cloud platform.

1:38That policy will be in place for everyone because every single step along the

1:43way

1:43inherits the policy and there are three main levels that we have.

1:49OK, we have the organization, which is like in our case here that I just I

1:54called it

1:54fish coe. So fish coe would be the organization and then this organization

2:00would

2:00have a domain.

2:02So this would be something like fish coe.com, which is probably an actual place

2:08.

2:08So don't go there.

2:09I hope it's not an inappropriate site, but there would be a domain associated

2:13with

2:13this and that's going to be important when we learn about how the organization

2:18works.

2:18Now, unfortunately, if you don't have an organization and you don't have that

2:23top

2:23level domain, you don't have the ability to create the next layer, which is

2:30folders.

2:30So inside an organization, there can be folders just like folders on your

2:34computer

2:35and just like we can attach a policy up at the top level, we can attach a

2:40policy to

2:41any one of these folders as well.

2:43And then if this has a policy attached to it, so like we have organized our

2:48organization, organized organization into different folders, the printing part

2:54of the

2:54factory could have a policy and then any project that is underneath is going to

3:00inherit whatever we set up.

3:02So let's say in this printing folder, we set a policy that the users in the 3D

3:09filament group all have access to start and stop print jobs.

3:14Well, that means every time we create a project, whether it's an existing

3:17project

3:18or a new project underneath this printing folder, this policy will be inherited

3:23.

3:23So anybody in the submission project,

3:26anybody who is in that one group is going to have the ability to start or stop

3:32job,

3:32same in the job sender project over here.

3:35If it was set up here in printing, it's going to be inherited all the way down.

3:39Now, there's some nuance here.

3:41For example, every single object in our tree here, so this assembly, it can

3:47only

3:47have one single parent, which makes sense, right?

3:50It's the thing that it branches off of.

3:53So assembly's parent is going to be factory.

3:56Printing's parent is going to be factory as well.

3:59They're going to have the same parent.

4:01This our track project is going to have a parent of HR.

4:05And basically that seems self-explanatory when you see it written out.

4:09But it basically means that we can't have something like this, right?

4:13That can't exist because an individual unit can only have a single parent.

4:20So that can exist.

4:21It just has to go down and every single object has one parent device.

4:25That way it knows how to inherit the policies that can be set at any level.

4:30And then so that's the that's the big limitation since we're just using a

4:35single

4:35Gmail account, we do not have an organization.

4:39In fact, it tells us that our organization name is no organization.

4:42And because we don't have an organization, we can't set the level of a

4:47hierarchy here.

4:48We have no ability to create folders.

4:51What we do have is projects.

4:53We can create projects and then they are directly tied to our no organization.

4:58But because it's no organization, we can't apply a policy there either.

5:02So we basically have to apply policies to every one of our projects in our

5:09current

5:10Google Cloud installation that we just set up and then we have $300 in credit

5:14for.

5:14So we're going to be able to understand how policies and roles work because we

5:18're

5:18going to be setting them up on our projects, but that hierarchical stuff isn't

5:23going to work out of the box.

5:25And you might be thinking, Sean, why didn't we just set it up with an

5:28organization?

5:29The reason is, remember I mentioned that Fishco would have a domain associated

5:33with it as well?

5:34Well, in order to set up a Google Cloud platform with that organization and

5:39folders, we have to have an actual internet domain, like something.com or

5:44something.org.

5:45We have to have that own it.

5:47We have to configure it, prove that we own it, tie it to Google Cloud.

5:51And all of those things are more and more expenses and more expenditures on top

5:56of

5:56things plus for the ACE certification, you don't need to understand how the

6:03underlying

6:04domain name system with all of the text records in a DNS, you don't have to

6:10understand

6:11all that.

6:11That's above and beyond what the certification requires.

6:14So since we are setting up from scratch, we're going to do it in a way that is

6:19easily

6:19repeatable and isn't going to cost a lot of time and effort learning how the

6:24DNS

6:25system and domain registrars work, but also we do need to learn that.

6:29So what are we going to do?

6:31Because it makes sense that we set it up so we can individually create our free

6:36account.

6:37But if we need to learn the stuff, how do we get to the point we can learn that

6:40stuff?

6:41If we don't get the problem, well, here's how we're going to solve it.

6:45We have three different options for setting up Google Cloud platform.

6:50OK, the first, I mean, the one that we set up is is this, right?

6:54This is what we already went over.

6:56Just setting up Gmail accounts, which will give us the ability to get that $300

7:01and in free credits, but also it's going to allow us to do other stuff, too.

7:06We have other

7:09Gmail accounts or Google accounts.

7:11And this is there's a subtle difference here.

7:13They look like the same.

7:14A Gmail account is something where you get email at gmail.com.

7:18You can also set up a Google account.

7:20And let's say you already have like a Yahoo account.

7:22You can create a Google account that doesn't offer email, but you can still log

7:29into Google using a different email address.

7:33Don't worry too much if that seems confusing, but basically, let's say you

7:36you already have email at Yahoo.com and you don't want to have gmail.com for

7:41email.

7:42What you can do is log into Google using your Yahoo account.

7:47You still have to create an account, but they just don't give you email.

7:51You can log into Google with your existing email account somewhere else,

7:55but you don't get a Gmail account.

7:57You don't get email through Google, which is fine if you're just looking to log

8:01in

8:01and do things in the cloud.

8:02So anyway, you have a Gmail accounts and then Google accounts.

8:05And then if you want to group things together, which is another aspect of best

8:11practices that we're going to learn about for this ACE certification, you need

8:16to

8:16assign permissions and roles to groups of users instead of individual users.

8:21So if a if a new user comes into your organization, you can just put them in

8:25the proper group instead of setting up all the new permissions and roles for

8:29individual users, even if you only have a single user in that group, it's great

8:35to assign the roles to groups instead of individual users because users come

8:40and go.

8:41But ideally, your groups will stay and they're already configured.

8:44So anyway, you can set up Google groups for groups of people, even if you don't

8:50have an organization.

8:51So this is the option that we're doing out of the box, but that doesn't give us

8:55organizational features.

8:57And we do need to learn about those organizational features.

9:00And that's where there are two other ways that we can do it.

9:03Google workspace, this used to be called G Suite.

9:06So if you have a G Suite at work and a lot of people do, you know, where you

9:10have

9:10the company calendars and Google Docs and Google Meet and all that stuff,

9:14Google workspace allows you to have users and groups and your individual users

9:20have to create an account on their own with a SMS code that they get from

9:26Google.

9:27Right.

9:27It's an organization, they're paying per user so you can create users and

9:32groups.

9:32There's also some automatic group creation where if you're in the organization,

9:38you know, the Google workspace organization, which also requires a domain.

9:42If you're in there, then there's automatic group relations for any users

9:46created inside the organization.

9:48And of course, then you are an organization with a domain and you can create

9:53folders

9:53and sign policies to your organizational level or the folders beneath it,

10:00which then contain the projects underneath that.

10:02So that does give us that ability to do.

10:05But this is a this is a pricey way to go about it, right?

10:08This is you pay per user.

10:09There's no free option for Google workspace.

10:11There used to be, but there's not anymore.

10:13OK, so that's a paid service.

10:15The other way that we could do it is with cloud identity.

10:19Now, cloud identity does not give users email, but it is a free option.

10:27Now, there is the ability to pay for like pro features of cloud identity,

10:31but cloud identity itself is a free service that you can set up in Google Cloud

10:37.

10:37And it gives you users and groups and it gives you the ability to have an

10:42organization

10:43and therefore have those folders underneath for containing your projects.

10:48And you can assign those individual policies and permissions to the folders

10:52and get that hierarchy that we need to understand and learn about.

10:56The issue here is not cost.

10:58The issue here is cloud identity still requires you to have a domain and set up

11:03that registrar information in your DNS settings and tie them to Google Cloud.

11:08So this kind of goes above and beyond the scope of what you need

11:13to understand to pass the ACE certification stuff.

11:16So I am going to set up cloud identity and you can follow along.

11:21I'll have a domain.

11:22We'll set it up so you can see how it works.

11:24But even if you don't go through the process of setting up cloud identity

11:29or Google workspace all on your own just for learning how to pass the

11:34certification.

11:35Following along with me should be enough so that you understand how things work

11:39and you'll be able to make those best practice decisions when it comes to

11:43assigning policies and stuff like that.

11:45Again, if you want to take that Gmail account that we just created together

11:49and you want to add cloud identity on top of that, that's something that you'll

11:55be

11:55able to do when we go over me setting one up later on.

11:59You'll just have to buy your own domain.

12:01You'll have to figure out the DNS stuff, tie it together, activate it and all

12:05that stuff.

12:05And then your training Gmail account will be a little less disposable at the

12:11end

12:11of training, right?

12:12I mean, you're going to actually have an organization.

12:14It's going to be tied to a domain.

12:15So it's going to get more complicated, but you you can do that.

12:19You can follow along and do that if you want to.

12:21But I don't think you're really going to need to set up your own cloud identity

12:26or especially Google workspace, which does incur a fee.

12:31Plus you have to have all the domain stuff set up, right?

12:34So just having the Gmail account that we created and possibly create another

12:39one

12:39so that you can assign permissions to another user inside your environment, or

12:44you

12:45could use your existing Gmail account as a subsequent user or like another user

12:51that is that has permission inside your Google cloud.

12:55You could do that as well.

12:56Having a couple of accounts is going to be helpful, but I don't think that you

13:01're

13:01going to need to worry about cloud identity.

13:04Hopefully that clears up why we set it up, the way we set it up and how we're

13:07going

13:08to handle exactly how we're going to learn about stuff if we don't have our

13:12whole

13:12organization set up from scratch.

0:00Okay, so I've started by being logged into my new account. So this is CBTA Sean

0:06at gmail.com.

0:07I'm logged in and this is right after we created our Google Cloud platform and

0:13used that $300. Okay,

0:15so the first thing I'm going to do is go up to this navigation menu at the top

0:19and I'm going to start

0:21if we go to cloud overview, I'm going to start at the dashboard. This is

0:25generally where we're

0:26going to start when we are looking how to use various products inside the

0:31Google platform. So

0:33we're in here and the first thing we see is our project info. Okay, so we can

0:38see that the project

0:39name is my first project. There's the number, there's the ID. Let's poke around

0:44and see what

0:45we can find now. We could get documentation, which would be an ideal way to

0:48figure out how to change

0:49the name. That's our first task is how to change this name. We could add people

0:54to the project,

0:55but now the first thing we want to do is change that name. So let's go into the

0:59project settings

1:00right here. And inside here, oh, look at there. Right here, the project name is

1:06my first project.

1:07We can change that now it's kind of interesting to note, we cannot change the

1:11project ID. So Google

1:14will always create something. There's a couple of random words and then some

1:17numbers. So possible

1:18Sun is the name of this project and that are the the idea of that project and

1:23we cannot change that.

1:24We also can't change the project number. All right, but the project name we can

1:29. So let's call this

1:31fishmonger 13. I have no idea why. All right, so fishmonger 13 and then we're

1:39going to click save.

1:40We've successfully named it. We got a whole bunch of notifications. Now let's

1:44go back to the dashboard

1:48and we can click off here. Sure enough, there it is our project and it's now

1:53named fishmonger 13.

1:55You'll notice up here, this is where we could switch between projects, but we

1:58only have the one.

1:59It's called fishmonger 13. So number one is checked off. Number two is find out

2:05how much money is left

2:06on your free trial and how many days are remaining. And remember that our free

2:12trial runs out when

2:14either we've used up to $300 or we've gone all 90 days, whichever comes first,

2:19then our trial is

2:21going to end. All right, now again, when we first logged in, it kind of gave us

2:25that information on

2:26the front page. But if we wanted to look for it, we should probably go into

2:31billing because that's

2:33where the free trial, like what it's talking about, right? It's like, are we

2:36going to get billed or

2:37we're not going to get billed? So if we go and click billing right here, it's

2:43going to take us

2:44into the billing section and our total costs here, of course, 000, 000, that's

2:50all well and good.

2:51If we scroll down, we're going to see all of the like where we can create

2:57budget alerts, we'll do

2:57that later. Billing health checks, it looks like everything is okay. And if we

3:02scroll all the way

3:03to the bottom, we're going to see our free trial credit. And it's going to tell

3:07us exactly what we

3:08have remaining. Now, after we start using stuff and we get billed for it, this

3:12number will decrease.

3:14Okay, so we can go here and find out what we currently have left, both in

3:19dollar amounts and

3:20also in days remaining. Now, apparently they gave us 91 days instead of 90 days

3:25, maybe that's just

3:26like their way of like if you signed up late in the day on the first day, that

3:30day doesn't count. I

3:32don't know, but we have 91 days remaining in the trial or $300, whichever comes

3:37first. Okay, so that's

3:39where we find it. It's in the billing section and just scroll all the way down

3:42and find it. Now,

3:43number three, we know that automatic billing will not start until our free

3:49trial ends. In order to

3:51keep using our cloud infrastructure after the trial expires, we need to

3:55activate our billing

3:56account. But we don't need to actually activate it right now. Just find out

4:01where to go about doing

4:02that. And as I'm talking, you've probably noticed this giant blue button right

4:07here that kind of

4:09said all that same stuff, right? The free trial period cannot be paused or

4:12extended. The free trial

4:14ends after you know what we just talked about. If we want to activate so that

4:19we can continue to

4:20use our platform, but get pricing incurred, that's where we would click

4:26activate. And it's going to

4:28allow us to actually activate it. We would keep our cloud services running

4:32uninterrupted. We keep

4:33any remaining credits during our free trial. So this is interesting to note. If

4:37we were to

4:38activate this like right now, we would still get $300 in credit that we could

4:44use in that first

4:4591 days. Okay, if we don't use that free credit, it's going to go away even if

4:50we've activated

4:52our account. But what this what this would do if I were to click activate is it

4:56would start

4:57billing once the free trial ends either by us using up the money or the the

5:02days disappearing.

5:03Okay, so that is nice that if you do activate it early, you don't lose that $

5:07300. You just have

5:09to use it within that first 90 days. All right, so I'm going to click cancel. I

5:11don't want to

5:12activate it, but that's the answer to number three. And now number four is our

5:16bonus question. And it

5:18is find what role has been assigned to your user for the my first project

5:22project or whatever we

5:24named it to. So in our case, fishmonger 13. All right, this is one we're gonna

5:27have to poke around a

5:28little bit. So I'm gonna go back to the menu up here, click, I'm going to cloud

5:32overview and click

5:33it's going to take us back to the dashboard. Okay, now for the project, fish

5:38monger 13, we want to find

5:40out what role our user has been assigned. So since we're talking about the

5:45project,

5:45again, we could get information here. But what we want to do is probably go

5:50down to project settings

5:52again. So if we click on project settings, we're inside here, but we don't see

5:57any permissions or

5:59any roles assigned. That's going to be and this is where it just requires some

6:03poking. I am if we

6:06click on I am, that's going to take us to the I am I am page for the project

6:11that we happen to be

6:12selected. So it's our only project. So we're currently in the fishmonger 13

6:16project. And if we click on I am,

6:19it's going to bring us to permissions for that project. In that case, we can

6:24see we only have the

6:25one user, which is CBTA dot Sean at gmail.com. And the role that I have

6:31assigned automatically is

6:33owner. And we're going to learn more about roles and stuff. But that is the

6:36answer to our bonus

6:37question. Number four, I hope you got all four of them. I hope you've hooked

6:40around enough to find

6:41this challenge one because it was not quite clear how you get there. But I am

6:46will get us to that

6:47information on what role was assigned.