Create Production GCP Project
Budget: $10 – $30 USD
Description
We are now preparing the production environment for our project. The following steps must be followed exactly to ensure secure, GDPR-compliant production deployment:
Step 1 — Create Production GCP Project
Project name: vankazo-production
Use Infrastructure-as-Code (Terraform or Deployment Manager) wherever possible.
Provision the following resources:
Compute Engine / GKE / App Engine for backend & admin portal
Cloud SQL (PostgreSQL/MySQL) with private IP only
VPC network isolation
Storage Buckets (for product photos, documents, etc.)
Secret Manager (for all DB/API keys)
Load Balancers / DNS as needed
Step 2 — Service Accounts Setup
Create dedicated service accounts for:
app-prod-service-account
admin-portal-prod-service-account
Each service account should have minimal IAM permissions necessary for its service.
Step 3 — Cloud SQL Security
Use Cloud SQL IAM authentication instead of static DB passwords.
No static credentials should be embedded inside applications.
Service accounts authenticate via IAM.
Step 4 — Developer Temporary Access
Grant developers Editor access for provisioning only.
This access will automatically expire after provisioning is complete (max 5 working days).
Once provisioning is complete, notify me directly.
Step 5 — Post-Provisioning Access Lockdown
After initial provisioning:
Developers will be downgraded to Viewer role.
Deployment access only via CI/CD pipeline.
I will retain Owner role.
Step 6 — Logging & Auditing
Enable full Cloud Audit Logs on:
IAM
Cloud SQL
Secret Manager
Compute Engine
App Engine
Enable security event notifications if any IAM policy changes happen.
Step 7 — Documentation Deliverable
After provisioning is complete:
Provide a full IAM permission map.
List of created service accounts.
Description of deployment pipeline for production.
DB users and privileges summary.
Acceptance Criteria:
Production environment fully provisioned.
Developers downgraded to Viewer.
IAM permissions documented.
App deployed & secrets secured.
Cloud Audit Logs enabled.
Security checklist signed off.
Security hardening & GDPR compliance is critical as we move into production and investor readiness.
We are now preparing the production environment for our project. The following steps must be followed exactly to ensure secure, GDPR-compliant production deployment:
Step 1 — Create Production GCP Project
Project name: vankazo-production
Use Infrastructure-as-Code (Terraform or Deployment Manager) wherever possible.
Provision the following resources:
Compute Engine / GKE / App Engine for backend & admin portal
Cloud SQL (PostgreSQL/MySQL) with private IP only
VPC network isolation
Storage Buckets (for product photos, documents, etc.)
Secret Manager (for all DB/API keys)
Load Balancers / DNS as needed
Step 2 — Service Accounts Setup
Create dedicated service accounts for:
app-prod-service-account
admin-portal-prod-service-account
Each service account should have minimal IAM permissions necessary for its service.
Step 3 — Cloud SQL Security
Use Cloud SQL IAM authentication instead of static DB passwords.
No static credentials should be embedded inside applications.
Service accounts authenticate via IAM.
Step 4 — Developer Temporary Access
Grant developers Editor access for provisioning only.
This access will automatically expire after provisioning is complete (max 5 working days).
Once provisioning is complete, notify me directly.
Step 5 — Post-Provisioning Access Lockdown
After initial provisioning:
Developers will be downgraded to Viewer role.
Deployment access only via CI/CD pipeline.
I will retain Owner role.
Step 6 — Logging & Auditing
Enable full Cloud Audit Logs on:
IAM
Cloud SQL
Secret Manager
Compute Engine
App Engine
Enable security event notifications if any IAM policy changes happen.
Step 7 — Documentation Deliverable
After provisioning is complete:
Provide a full IAM permission map.
List of created service accounts.
Description of deployment pipeline for production.
DB users and privileges summary.
Acceptance Criteria:
Production environment fully provisioned.
Developers downgraded to Viewer.
IAM permissions documented.
App deployed & secrets secured.
Cloud Audit Logs enabled.
Security checklist signed off.
Security hardening & GDPR compliance is critical as we move into production and investor readiness.