Set up a cloud solution environment

Official references for this objective

• Google Cloud — Google Cloud Setup guided flow  |  Get started  |  Google Cloud Documentation

  Enhanced security : Includes all tasks in the Production foundation, as well as Cloud KMS with Autokey configuration in the Security task.

• Google Cloud — Roles and permissions  |  Identity and Access Management (IAM)  |  Google Cloud Documentation

  you can't create a new custom role with the same ID in the same organization or project until after the 44-day deletion process has completed

• Google Cloud — Create projects  |  Resource Manager  |  Google Cloud Documentation

  use the --organization or --folder flags. As a resource can only have one parent, only one of these flags can be used

• Google Cloud — Create and manage custom roles  |  Identity and Access Management (IAM)  |  Google Cloud Documentation

  Use the gcloud iam list-testable-permissions command to get a list of permissions that are available for custom roles in a specific project or organization.

• Google Cloud — Enable, disable, or change billing for a project  |  Cloud Billing  |  Google Cloud Documentation

  this indicates that the link between the project and its Cloud Billing account is locked. Before you can disable billing on the project, you must

• Google Cloud — Create a new self-serve Cloud Billing account  |  Google Cloud Documentation

  Choose your country (and currency) carefully, as you can't change these selections later. If you need to edit the country on an existing Cloud Billing

• Google Cloud — Secure the link between a project and its billing account  |  Cloud Billing  |  Google Cloud Documentation

  On the project : Project Billing Manager and Project Browser or Project Owner AND On the linked Cloud Billing account : Billing Account User and

• Google Cloud — View projects linked to Cloud Billing accounts  |  Google Cloud Documentation

  linked projects are listed under Projects linked to this billing account

• Google Cloud — gcloud projects create  |  Google Cloud SDK  |  Google Cloud Documentation

  --set-as-default Set newly created project as [core/project] property.