Securing Containerized GCP Web Apps

45 minutes
  • 6 Learning Objectives

About this Hands-on Lab

A critical step in software development security is to identify vulnerabilities within container images and running web apps. In this hands-on lab, you’ll identify security vulnerabilities within a container image and perform web app security vulnerability scanning using Web Security Scanner.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Enable Container Registry

Enable the Container Registry service using the GCP console.

Docker Pull, Tag, and Push Container Image

Using the Cloud Shell, perform the following tasks:

  1. Pull the DVWA Docker image.
  2. Tag the DVWA Docker image.
  3. Push the DVWA Docker image.
View Vulnerabiilties

Use Container Registry to view the vulnerabilities associated with the container image.

Deploy Container on a VM Instance

Create a new Compute Engine VM instance, using the newly pushed image, in the GCP console.

Reserve Static IP Address
  1. From the GCP console, navigate to the IP Addresses page.
  2. Reserve a static IP address for the newly created VM instance.
Create and Run Scan Using Web Security Scanner
  1. Enable the Web Security Scanner service using the GCP console.
  2. Create a Web Security Scanner scan.
  3. Run the newly created Web Security Scanner scan.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?