Projects as resource containers in GCP - Mini Project: Build & Apply

Understanding GCP Projects as Resource Containers

📖 Scenario: You are working in Google Cloud Platform (GCP) and want to organize your cloud resources properly. GCP uses Projects as containers to hold resources like virtual machines, storage buckets, and databases. Each project has a unique ID and name.Think of a project like a folder on your computer where you keep related files together. This helps you manage and control access easily.

🎯 Goal: Create a simple representation of a GCP project as a dictionary in Python. Then add a configuration variable for the project's billing account. Next, add a list of resource names inside the project. Finally, complete the project dictionary by adding a label to identify the environment.

📋 What You'll Learn

Create a dictionary called gcp_project with keys project_id and project_name with exact values.

Add a variable called billing_account with the exact billing account string.

Add a list called resources inside gcp_project with exact resource names.

Add a labels key to gcp_project with an environment label set to development.

💡 Why This Matters

🌍 Real World

GCP projects help organize and manage cloud resources securely and efficiently. Understanding how to represent and configure projects is essential for cloud management.

💼 Career

Cloud engineers and administrators use projects to separate environments, control billing, and manage access. This foundational knowledge is critical for roles involving cloud infrastructure.

1

Create the initial GCP project dictionary

Create a dictionary called gcp_project with the keys project_id set to "my-sample-project-123" and project_name set to "Sample Project".

GCP

# Create the gcp_project dictionary with project_id and project_name
# Your code here

Hint

Use curly braces {} to create a dictionary. Add keys and values separated by colons.

2

Add the billing account variable

Add a variable called billing_account and set it to the string "0123-4567-890A-BCDE".

GCP

gcp_project = {
    "project_id": "my-sample-project-123",
    "project_name": "Sample Project"
}
# Add billing_account variable below
# Your code here

Hint

Assign the billing account string to the variable using the equals sign.

3

Add a list of resources inside the project

Add a key called resources to the gcp_project dictionary. Set it to a list containing the exact strings: "vm-instance-1", "storage-bucket-1", and "sql-database-1".

GCP

gcp_project = {
    "project_id": "my-sample-project-123",
    "project_name": "Sample Project"
}
billing_account = "0123-4567-890A-BCDE"
# Add resources list to gcp_project below
# Your code here

Hint

Use square brackets [] to create a list. Add it as a new key-value pair inside the dictionary.

4

Add environment label to the project

Add a key called labels to the gcp_project dictionary. Set it to a dictionary with the key environment and value "development".

GCP

gcp_project = {
    "project_id": "my-sample-project-123",
    "project_name": "Sample Project",
    "resources": ["vm-instance-1", "storage-bucket-1", "sql-database-1"]
}
billing_account = "0123-4567-890A-BCDE"
# Add labels dictionary with environment key below
# Your code here

Hint

Labels are dictionaries inside the project dictionary. Add the environment label as a key-value pair inside labels.

Practice

1. What is the main purpose of a project in Google Cloud?

easy

A. To store files permanently

B. To run virtual machines only

C. To organize and manage cloud resources

D. To replace user accounts

Solution

1. Step 1: Understand the role of projects

   Projects act as containers that hold and organize all cloud resources.

2. Step 2: Compare options

   Only To organize and manage cloud resources correctly describes the main purpose of projects; others describe specific services or unrelated functions.

3. Final Answer:

   To organize and manage cloud resources -> Option C

4. Quick Check:

   Project = Resource container [OK]

Hint: Projects group resources for easy management [OK]

Common Mistakes:

• Thinking projects store files directly
• Confusing projects with virtual machines
• Believing projects replace user accounts

2. Which of the following is the correct way to create a new project using the gcloud CLI?

easy

A. gcloud projects new --name my-project

B. gcloud projects create my-project

C. gcloud project new my-project

D. gcloud create project my-project

Solution

1. Step 1: Recall gcloud project creation syntax

   The correct command to create a project is 'gcloud projects create PROJECT_ID'.

2. Step 2: Match options with correct syntax

   Only gcloud projects create my-project matches the correct syntax; others use wrong command order or keywords.

3. Final Answer:

   gcloud projects create my-project -> Option B

4. Quick Check:

   Correct CLI syntax = gcloud projects create my-project [OK]

Hint: Use 'gcloud projects create' to make projects [OK]

Common Mistakes:

• Swapping 'create' and 'projects' keywords
• Using 'new' instead of 'create'
• Incorrect command order

3. Given the following commands, what will be the output of gcloud projects list --filter="name:my-project" if a project named 'my-project' exists?

gcloud projects create my-project
 gcloud projects list --filter="name:my-project"

medium

A. A blank list with no projects

B. An error saying project not found

C. A list of all projects ignoring the filter

D. A list showing details of the project named 'my-project'

Solution

1. Step 1: Understand project creation and listing

   After creating 'my-project', it exists in the project list.

2. Step 2: Apply filter in list command

   The filter 'name:my-project' will show only projects matching that name, so it will show 'my-project'.

3. Final Answer:

   A list showing details of the project named 'my-project' -> Option D

4. Quick Check:

   Filter shows matching project = A list showing details of the project named 'my-project' [OK]

Hint: Filter lists only matching projects [OK]

Common Mistakes:

• Expecting error if project exists
• Thinking filter is ignored
• Assuming blank output after creation

4. You tried to create a project with the command gcloud projects create 123project but got an error. What is the most likely cause?

medium

A. Project ID cannot start with a number

B. You need to be logged in first

C. Project names must be longer than 10 characters

D. You must specify a billing account

Solution

1. Step 1: Check project ID naming rules

   Project IDs must start with a letter and can contain letters, numbers, and hyphens.

2. Step 2: Analyze the given project ID

   '123project' starts with numbers, violating the naming rule, causing the error.

3. Final Answer:

   Project ID cannot start with a number -> Option A

4. Quick Check:

   Project ID rules = Project ID cannot start with a number [OK]

Hint: Project IDs must start with a letter [OK]

Common Mistakes:

• Assuming login error without checking ID
• Thinking billing is required at creation
• Confusing project name with project ID rules

5. You want to organize your company's cloud resources by department and control access separately. Which approach using projects is best?

hard

A. Create one project per department and assign access roles per project

B. Create one project for the whole company and use folders for departments

C. Create multiple projects but assign all users full access to all projects

D. Use a single project and manage access only with IAM policies on resources

Solution

1. Step 1: Understand project use for organization and access

   Projects act as containers to group resources and control access via roles.

2. Step 2: Evaluate options for department separation and access control

   Creating one project per department allows clear separation and role assignment per project, matching best practice.

3. Final Answer:

   Create one project per department and assign access roles per project -> Option A

4. Quick Check:

   Separate projects = separate access [OK]

Hint: Use projects to separate departments and access [OK]

Common Mistakes:

• Giving all users full access defeats separation
• Relying only on IAM on resources is complex
• Using folders alone does not isolate resources