3 ms·
https://cloud.google.com/sql/docs/mysql/private-ip https://cloud.google.com/sql/docs/mysql/private-ip. CloudSQL does, in fact, have private IP. This is the righ
by diceduckmonk 4y ago
https://cloud.google.com/sql/docs/mysql/private-ip https://cloud.google.com/sql/docs/mysql/private-ip. CloudSQL does, in fact, have private IP. This is the right approach if you're serious about security and principal of least privilege.
You're suggesting using a public IP then work backwards with an authorized list. This misses the point. This models starts with maximum privilege and scales back. Furthermore, you have to pay extra for a public IP and GCP once again forces people to pay extra to access the stuff they are already paying for. For example, the Serverless VPC connector requiring 2+ VMs defeats the scale-to-zero claim of CloudRun and the free-tier.