Before you or your organization's users can start working with Trusted Cloud, you must complete some key setup tasks.
The tasks you need to perform depend on whether you're setting up a whole new organization, or if you need to start working with an existing organization. These tasks include:
Tasks that are typically completed by platform admins and IT administrators to get your organization ready for Trusted Cloud.
These are tasks that are only completed once for the whole organization.
Tasks that are typically completed by app operators, platform admins, and other technical practitioners to configure tools and workflows for use with Trusted Cloud.
These are tasks that are completed as-needed for users to access and use Trusted Cloud.
Set up a new organization
One-time core tasks that are typically completed platform admins or IT administrators before others can access and use Trusted Cloud include:
-
You must configure an identity provider (IdP) so that members of your organization can sign in to Trusted Cloud, and be authorized to use services and resources with Identity and Access Management. You use your own identity provider using Workforce Identity Federation, which lets you continue to use existing user IDs and groups if required.
-
When you first onboard to Trusted Cloud, you are provided with a new empty organization. You must configure this organization with projects, a network, and other resources before users can start to deploy and run applications. We also recommend that you configure the Google Cloud CLI as part of setting up your organization.
Complete foundational tasks from the Trusted Cloud by S3NS Setup guided flow
Configure an initial environment to support applications and scalable workloads. The guided flow can help you create a foundational architecture that follows our best practices.
Set up tools and workflows
After an organization has been set up, the following tasks are typically performed by developers, app operators, and other technical practitioners who need to interact with Trusted Cloud:
-
Trusted Cloud APIs help you programmatically access services from the command line, through automated scripts, or in your own applications.
-
The gcloud CLI is Trusted Cloud's command line tool for interacting with services and resources. Using the gcloud CLI with Trusted Cloud requires some one-time configuration to work with Trusted Cloud services and your organization's identity provider.
-
Trusted Cloud provides client libraries for interacting with services programmatically. As with the gcloud CLI, you must specify your target universe when using client libraries. If you're already familiar with using client libraries in Google Cloud, this guide also explains some key differences when using these libraries in Trusted Cloud.