bCloud GCP Central FAQ

bCloud Service information can be found here.

You use your @berkeley.edu address to login to the GCP Console.

You can request a new GCP Billing ID by filling out our on-boarding form.

GCP Support Plans

Email: bcloud-gcp-central-announce+subscribe@lists.berkeley.edu to join the bCloud GCP Central Distribution List.

• Log in to the console then click the Navigate Menu button on the top left.
• Navigate to Billing > Account management.
• Click the three dots to the right of the project you want to change the billing account for then select Change billing.
• Select the new billing account you want to use for this project from the drop down menu then click SET ACCOUNT.

• Log in to the console then click the Navigate Menu button on the top left.
• Navigate to IAM & Admin > Manage Resources.
• Check the box to the left of your folder.
• Click ADD PRINCIPAL on the far right.
• Enter the email address of the account you want to be able to create new projects in the New principals field.
• Enter Project Creator in the Select a role field then click SAVE.

Email cloud-ticket@berkeley.edu to request a VPC network be created in the ucb-shared-vpc project for your project.

• The only change is how bills are processed. 
• Berkeley IT processes the main bill then recovers costs from the provided chart of accounts.
• All discounts are automatically applied (Negotiated savings, Spending based discounts, Promotions)

• Log in to the console then click the Navigate Menu button on the top left.
• Navigate to VPC network > VPC networks.
• Click the VPC network name you want to enable flow logs on.
• Check the box to the left of the subnet you want to enable flow logs on.
• Click the FLOW LOGS drop down then configure.
• Set the Aggregation Interval and Sample rate (or leave default) then click save.

• Log in to the console then click the Navigate Menu button on the top left.
• Navigate to Billing > Reports
• In the right pane, select: Time range : Invoice month From/To : Select desired month
• Group by :Project (if running multiple projects and checking for cost per project) Service (if checking for cost of consumed services)

The Campus ISO Team is receiving raw logs from all accounts in the Berkeley Organization and are using ArcSight Enterprise Security Manager to scan logs for security vulnerabilities.

This isn't P3 and P4 ready monitoring or certified environment. Users will still have to enable a flow log for all VPC's in their environment to forward logs to the Berkeley IT Prisma Cloud instance.

• Best practices for managing GCP Service Account keys

• GCP Identity & Security

• Security best practices

• GCP Pricing Calculator

• GCP products

• GCP Service Health