DEV Community: Annkur Agrawal

Preparing for GCP Security Certification? Here's What Actually Worked for Me

Annkur Agrawal — Sat, 20 Dec 2025 02:19:06 +0000

When I decided to attempt the Google Cloud Security Engineer exam, I leaned on my AWS background and previous GCP certifications. Here’s the exact roadmap I followed and the mindset that helped me succeed.

My Cloud Journey So Far

Before diving into the Security exam, I had already completed several GCP certifications in sequence:

Cloud Digital Leader
Associate Cloud Engineer
Professional Cloud Architect

This progression, combined with my Cloud experience, gave me a strong foundation in cloud architecture, IAM, networking, and compliance. That continuity made it easier to absorb GCP’s security-specific nuances.

📚 Resources I Used

Here’s what I relied on during my prep:
✅ Google’s official training for the Security exam
Structured, focused, and aligned with the exam blueprint.
✅ Partner-exclusive training slides
These internal resources offered deeper insights into real-world scenarios and security best practices.
✅ Practice tests on YouTube and Google Search
I explored multiple mock exams to understand question patterns and reinforce key concepts.
✅ Sample papers from Google
These were especially helpful in aligning my expectations with the actual exam format.

Reference Links:

🧠 Mindset Matters: How I Tackled the Exam

Beyond resources, the most crucial part was developing the right mindset:

Success in the exam comes from reading questions carefully, identifying phrases that signal real-world requirements, and avoiding common traps.
The focus should be on understanding the scenario rather than memorizing facts.
Adopting a solution-oriented mindset—evaluating the best way to meet challenges securely and efficiently—transforms each question into a real-world problem rather than a simple checkbox exercise.

This shift enables approaching each question as a real-world problem rather than a checkbox exercise.

🎯 Final Thoughts

If you're preparing for the GCP Security exam:

Build on your existing cloud knowledge—especially IAM, networking, and compliance.
Use a mix of official and community resources.
Practice with intention: don’t just answer questions, understand why the right answer is right.
Most importantly, train your mindset to think like a security engineer solving real problems.

Lastly, the Google Cloud Security certification stands out as one of the most challenging exams. The scenario-based questions, with multiple closely related options, can create significant confusion and demand careful analysis. This complexity makes the exam both rigorous and mentally stirring, truly testing depth of understanding and decision-making skills.

If you're working on multi-cloud security strategies or planning your next certification, let’s connect!
LinkedIn

[AWS DB] AWS DBaaS: A Comprehensive Guide for Beginners#3

Annkur Agrawal — Sat, 21 Oct 2023 04:10:10 +0000

As a follow-up to blogs#1 and #2, we talked about the on-prem databases, associated responsibilities, and challenges followed by different thinking with the evolution of Cloud computing. We'll go into great detail on AWS's database services now.
In today's rapidly evolving tech landscape, databases are the backbone of nearly every application. Database as a Service (DBaaS) is one of the database services provided by Amazon Web Services (AWS). In this beginner-friendly guide, we’ll demystify DBaaS and examine how it can completely transform your data management in this approachable tutorial.

What is Database as a Service (DBaaS)?

DBaaS, or Database as a Service, is a cloud computing service model that provides users with access to a database without the need for them to set up, manage, or maintain the underlying infrastructure. Essentially, it's like having your own database expert in the cloud, handling all the technical aspects.

Why Choose AWS DBaaS?

1. Simplicity and Ease of Use
With DBaaS, you don't need to worry about the nitty-gritty details of database administration i.e., daily tasks. As an AWS fully managed service, AWS takes care of tasks like provisioning, patching, and backups, allowing you to focus on using your databases effectively.

2. Scalability and Performance
AWS offers options to scale your database resources up or down based on your needs. This means you can handle sudden spikes in traffic or scale down during quieter periods, optimizing costs and performance.

3. High Availability and Reliability
AWS offers robust features for high availability and data durability. With options like multi-availability Zone deployments, automated backups, and point-in-time recovery, your data remains secure and accessible.

4. Security and Compliance
Every organization from different domains has security as a top concern. So, AWS takes security seriously. Their services include features like encryption at rest, network isolation, and fine-grained access control. This ensures your data remains secure and compliant with industry standards.

Reference - RDS

Types of AWS DBaaS Offerings

AWS offers a diverse range of managed database services to cater to different requirements. Here are some of the key offerings:

Amazon RDS (Relational Database Service)
Amazon RDS is a managed database service that supports several well-known database engines, including MySQL, PostgreSQL, Oracle, SQL Server, MariaDB, and Amazon Aurora, as we previously discussed in our blog. It's a great solution for companies of all sizes because of features like high availability, scalability choices, and scheduled backups.

Amazon Aurora
Amazon Aurora is a relational database compatible with MySQL and PostgreSQL that is designed for performance and availability. It combines the availability and speed of high-end commercial databases with the ease of use and affordability of open-source databases.

Amazon DynamoDB
At any scale, DynamoDB is a fully managed NoSQL database service that offers smooth and reliable performance. It's designed to handle large amounts of data and high traffic loads, making it a go-to choice for applications with rapidly changing data needs.

Amazon Neptune
For those in need of a graph database, Amazon Neptune is a purpose-built, high-performance graph database engine optimized for handling highly connected data. It supports both Property Graph and RDF graph models.

Amazon ElastiCache
Amazon ElastiCache is a fully managed, in-memory caching service provided by Amazon Web Services (AWS). It is designed to enhance the performance and scalability of web applications by allowing you to retrieve information from fast, managed, in-memory data stores, instead of relying on slower disk-based databases.

Amazon Redshift
Amazon Redshift is a fully managed, petabyte-scale data warehousing solution that allows you to analyze large datasets. It's designed for online analytic processing (OLAP) and offers high performance, scalability, and cost-effectiveness.

Getting Started with AWS DBaaS

Sign Up for AWS: If you don't already have an AWS account, sign up for one. You may be eligible for the AWS Free Tier, which provides limited usage of many AWS services, including DBaaS.

Select the Right Database: Depending on your application's requirements (e.g., relational, NoSQL, graph), choose the appropriate AWS DBaaS offering.

Provision Your Database: Using the AWS Management Console, you can easily create and configure your chosen database. AWS also offers another method to provision your resources using AWS CLI, AWS Cloudformation, AWS CDK, etc.

Connect and Use: AWS provides connection details that you can use to connect your application to the database. From there, you can start creating tables, inserting data, and running queries.

Conclusion
AWS DBaaS is revolutionary for businesses seeking effective and hassle-free database management. Regardless of the size of the company, from tiny startups to large conglomerates, AWS offers a range of managed database services that can be customized to satisfy your unique needs.

By using DBaaS, you can focus more of your time and resources on developing innovative solutions whilst feeling secure knowing that all of your information is in capable hands. Don't wait to start utilizing AWS DBaaS to take your data governance up to the next level! Let's toast to databasing!

Important - The information shared above will help you further in the future blog post in the series. This is also going to help you if you are planning for AWS Certified Database Speciality Exam as these will contain a few questions asked in the exam. Refer to details on the exam here.

In case any help is required connect me over LinkedIn

References:

[AWS DB] Why AWS Databases/RDS #2

Annkur Agrawal — Sun, 09 Apr 2023 02:54:40 +0000

In the last blog post, we mentioned the On-Prem (Bare Metal) database servers and AWS RDS service. If you haven't gone through the first article then go through the same first. URL

Now we will continue with the advantage of using AWS RDS a PaaS Service by AWS, but we can’t ignore some cons as well with RDS to discuss.

Here, I am going to compare the cloud and on-prem in a dramatic way. Say, we have two companies named “ABC” and “XYZ”, both got a pre-requirement from their project about an On-Prem DBMS system.

This requirement is understanding came in the initial phase of the project discussion with the customer along with some other application, which the customer is planning to outsource to either company ABC or XYZ.

As this is an initial requirement, clarity is missing regarding server capacity (CPU/RAM/Storage, etc.), Database flavor, and how soon H/W is required in turn vendors associated.

Here company ABC is calm and proceeding with further discussion, on the other hand, XYZ is moving here and there with different technical teams/vendors, etc, and is worried about requirements.

Company XYZ is not clear on the hardware requirement as this is the initial phase and talking with vendors with different RFP with different configurations. Vendors respond with cost and varied time per requirement, by which they can deliver the hardware.

At the same time, XYZ is finding out the team as below:

System Admin
DBA
Backup team

Which is again time-consuming in the case of on-prem.

Now big picture, considering procuring a server at one point in time was too costly and you can think of all hardware. There was a case when a team kept waiting for a RAM increase from 128GB to 256GB for a month or two and similarly for storage devices. And this was far costlier and the company has to invest beforehand i.e., HIGH CAPEX.

Yes, you are right, how we can ignore the space required and associated cost to install the new servers and provision necessary requirements like Air-Conditioning 😊.

In addition to physical infrastructure, you need multiple teams to install/manage/maintain the complete infra from start to end as we already discussed in the previous blog.

On the other hand, company, ABC is calm and proceeds with further discussion with customers. ABC is playing its part efficiently, and instead of On-prem they were talking about Cloud since initially and that is the secret of their calmness.

Refer below picture for a comparison.

Yes, again got it right. Cloud gives you flexibility where you don’t have to worry about launching your infrastructure without worrying about finding the vendor, long wait time, or huge cost investment i.e., CAPEX beforehand.

But you can launch your server with different configurations within minutes with just a few clicks and no more wait/vendor discussion etc. Even this hardware is not purchased in advance on-prem, so no big investment and can’t be discontinued when not required saving cost.

In addition, the capacity requirement is not a big challenge now, anytime you can upgrade your servers as and when required within seconds. How? This will be discussed later considering databases. So, keep following 😊.

Cloud also reduces your administrative overhead, which we are responsible in case of on-prem as below:

- Database administrative burden.
• Backup
• OS patching
• Database patching (Optional)
• Internal hardware maintenance.

Amazon RDS Features
• Lower administrative burden. Easy to use
• Performance. General Purpose (SSD) Storage
• Scalability. Push-button compute scaling
• Availability and durability. Automated backups
• Security. Encryption at rest and in transit
• Manageability. Monitoring and metrics.
• Cost-effectiveness. Pay only for what you use.

Cloud Benefits:
• Faster time to market
• Scalability and flexibility
• Cost savings
• Better collaboration
• Advanced security
• Data loss prevention

Of course, like any technology, there are pros and cons to cloud computing.

Disadvantages of cloud computing include:
• risk of vendor lock-in
• less control over underlying cloud infrastructure
• concerns about security risks like data privacy and online threats
• integration complexity with existing systems
• unforeseen costs and unexpected expenses.

Note– Just refer to the “Shared Responsibility Model” diagram shared in part-1.

In conclusion, company ABC won the bid and the customer is more focused on their application release.

Important to think about the information shared above and this will help you further in future blog post. This is also going to help you if you are planning for the AWS Certified Database Speciality Exam as these will contain a few questions asked in the exam.

Important - The information shared above will help you further in the future blog post in the series. This is also going to help you if you are planning for the AWS Certified Database Speciality Exam as these will contain a few questions asked in the exam. Refer to details on the exam here.

In case any help is required connect me over LinkedIn and topmate.io.

Please share your thoughts/feedback, which definitely matters the most to make the blog post more refined and useful.

Happy Learning and Sharing...

[AWS DB Series] On-Prem DB Vs AWS RDS #1

Annkur Agrawal — Sat, 25 Mar 2023 17:56:19 +0000

In this blog post, we talk about AWS Relational Database Service (RDS) and why should be considered RDS as an alternative to On-prem traditional databases.

Note- This is a start and there will be more on the way. So subscribe/follow.

But before starting on AWS RDS, it is also necessary to discuss the traditional database system.

Traditional Databases:
When we start thinking about the traditional or on-prem databases worked on, a picture comes to mind where a Server (Bare Metal) with huge hardware having supported OS (Operating System) with RPM/Packages installed as recommended by the database vendor before proceeding for database installation followed by configuring. Even we know the challenges during installation till configuration to connecting applications and performance. Typically, it looks like below:

Now we need different teams to be involved to maintain all levels of this infrastructure starting with:
(1) Hardware Team
(2) System Administrator (For OS related activities)
(3) Database Administrator (DBA)
(4) Security

An important factor we definitely have to consider with this architecture is the huge CAPEX in setting up the server and administration overhead with the risk associated and a few indirect tasks.

Also, it’s important to know about different Cloud models including the responsibilities of AWS and Customers through the diagrammatic presentation below:

AWS Relational Database Service (RDS):
Amazon Relational Database Service (Amazon RDS) is a collection of managed services that makes it simple to set up, operate, and scale databases in the cloud.

AWS RDS falls under PaaS Category i.e., blocks in RED need to be managed by the Customer and green blocks will be managed by Cloud provider AWS.

Now compare the On-Prem database discussed initially with the AWS RDS considering PaaS.

In the case of AWS RDS, many of the administrative tasks required to keep the database running smoothly will be handled by AWS RDS itself.

Having AWS RDS is definitely advantageous instead of managing own relation databases on-prem. How? We will come to know about it in a future blog post.

Ref:

AWS RDS

Important - The information shared above will help you further in the future blog post in the series. This is also going to help you if you are planning for AWS Certified Database Speciality Exam as these will contain a few questions asked in the exam. Refer to details on the exam here.

In case any help is required connect me over LinkedIn and topmate.io.

Please share your thoughts/feedback, which definitely matters the most to make the blog post more refined and useful.

Happy Learning and Sharing...

Preparation Tips - AWS Certified Database Specialty exam

Annkur Agrawal — Sun, 12 Mar 2023 14:35:14 +0000

Based on requests from many people over LinkedIn/topmate/offline contacts, here I am trying to share as much information possible that will help you to go through the exam.

Let’s start…

When I started working as a database administrator, the relational database was only in boom and predominant technology. Lots of stuff to do and everything was so challenging doing on-premises i.e., a kind of preparing food from completely raw material not ready to cook (AWS) 😊.

I worked mostly on commercial databases like Oracle/MSSQL and open-source databases like PostgreSQL. And every application was dependent on a relation database whether it’s Oracle/MSSQL/MySQL/Postgres etc.

Today, modern applications application architecture constitutes a broader set of database technologies aligned to the type of data like relational or non-relational, access, and processing patterns required by businesses they support in terms of better performance.

Here comes an AWS database with multiple database options to select from, according to the business requirement starting from relation databases (Oracle/MSSQL/Postgres/MySQL/MariaDB/Aurora) to key-value, document, in-memory, graph, time series, and ledger databases.

Now certification “AWS Certified Database – Specialty” validates a candidate’s expertise in depth on all the database options mentioned above to pick one best suited for your use case and analyze requirements considering multiple AWS Well-Architected frameworks and design databases appropriately.
I recently prepared and cleared the “AWS Certified Database – Specialty”, my previous background as a database administrator helped me a bit.

Definitely, this was a tough one, after all, it’s specialty and testing your expertise specifically only on databases from a range of different database options AWS provides.

First, I give you a glimpse of the percentage each domain constitutes of.

For more details, check out the exam guide.

This is really important to go through, even when online courses explain it, though you should go through it and understand each and every domain and percentage.

Starting point I started with digital training “Exam Readiness: AWS Certified Database – Specialty” from AWS skill builder. These 4 hrs. of training were really good.

Sharing links found useful while preparing to start from digital courses to practice exams to blogs/FAQs.

Understand which workloads are best suited to each of the purpose-built database services on AWS. References:
- Building with Purpose-Built Databases: Match Your Workload to the Right Database
Understand strategies for disaster recovery and high availability.
- Disaster recovery options in the Cloud
Understand how database solution deployments can be automated. Automation of everything is called to be best practice to avoid human error that may occur especially during repeated work. Here IaC (Infrastructure as a Code) tools are handy and fit best to perform activity whether it’s AWS CloudFormation or Terraform.
- Using CloudFormation to configure auto-scaling for Amazon DynamoDB
- CloudFormation User Guide
Determine data preparation and migration strategies. Here exams focus on the understanding of migration strategies, for which you definitely need to understand the different methods we use to backup, restore, and replication options keeping in mind “Which option from multiple is best? And why?” to maximize efficiency. Also need to understand the data sources/targets, Schema conversion using tools like DMS/SCT.
- Migrating a commercial database to open source with AWS SCT and AWS DMS
- Cross-Engine Database Replication Using AWS Schema Conversion Tool and AWS Database Migration Service
Determine backup and restore strategies

Backup and restore is one the important requirements to ensure
Business Data is protected and ready to face challenges or able
to recover in case of any disaster. But strategies will vary
according to AWS database services. This may include manual
backup, Automated or continuous backup, but again it changes as
per the requirement of RTO/RPO.
Manage the operational environment of a database solution.

Now AWS provides fully managed database services, where AWS manages the many aspects of database management on your behalf like applying patches to the database and underlying operating system, and performing scheduled backups with ease. Definitely, this is good decreasing admin overhead on the other hand may restrict your control. So you need to understand, How these individual database services handle updates and configuration changes as these varied with databases.
- Maintaining a DB instance.
Determine monitoring and alerting strategies.

Monitoring and alerting is not hidden requirement these days, this is one of the critical services that is required in each and every environment. Similarly, AWS has its own services like CloudWatch, CloudTrail, and the collection of custom metrics which makes monitoring more flexible and approachable to handle the application efficiently.
- Performance Insights dashboard documentation
Understand how you can optimize database performance.

Here exam checks your understanding/ability to troubleshoot database performance issues, tunning databases, and how you identify tools and use them considering the cost per database scenario.
- AWS RDS Read Replicas.
- Sharding with Amazon Relational Database Service
Encrypt data at rest and in transit.

Security is always on high priority these days and encryption both at rest and transit belongs to data protection. AWS provides a unique service for the encryption of data and implementation may again vary. AWS Key Management Service (AWS KMS) for encryption key management to create encryption keys and define the policies that control the use of these keys.
- AWS KMS
- Amazon RDS Security
Determine access control and authentication mechanisms.

Now the last part, which is Authentication service in AWS i.e. AWS Identity and Management Service (IAM). You need understand the way of authentication in different databases and how they work? And other supporting service like AWS Secrets Manager. AWS Secret manager allows to create secrets and use them instead of hard coding in application or Infrastructure as a code (CloudFormation/Terraform).
- IAM Database Authentication

Study Material Referred:
(1) Udemy Course - Ultimate AWS Certified Database Specialty 2023
(2) Cloud Academy – AWS Certified Database Specialty.
(3) Udemy - AWS Certified Database Specialty Practice Exams.
(4) AWS APN - Exam Readiness: AWS Certified Database – Specialty

AWS FAQs – I suggest a few to must go through as it is having a higher percentage in exams.

There are FAQs for other AWS database services as well to refer to.
Some important pointers to consider before taking the exam to focus on:

(1) Provisioning database
(2) Backup strategy
(3) Unencrypted/Encrypted databases.
(4) Sharing database backup between AZs/Regions/Accounts.
(5) Restoring database.
(6) High Availability – Multi-AZ
(7) Latency – Read/Write and different options.
(8) Migration – DMS, SCT, Database Native Tools.
(9) Authentication and Authorization mechanism

I must congratulate you at this point because you have gone through the above preparation part. This simply means you are really passionate about this certification accomplishment.

Now I start by giving some information about the exam structure and tips.

The Exam: Structure
• Taken in a testing centre or online proctored
• Exam duration is 180 minutes
• There is a total of 65 questions
• There will be 15 unscored questions
• Questions are all multiple choice or multiple response
• There is no penalty for guessing
• You can mark a question for future review
• Before submitting, you can review all of your answers
• Reported as a score of 100-1000(minimum passing: 750)
• Certification lasts 3 years
• For more information, refer to the Exam Guide

Exam Tips
•Read both the question and the answers in full, one time through.
•Look for specific words that are doing the “heavy lifting”. Questions won’t deliberately be left ambiguous.
•Pay attention to qualifying clauses such as “in the most cost-effective way”, or “will best fulfil”; these clauses are likely to eliminate certain answers.
•Try to find out the distractor using key words observed from previously.
•Lastly, you may feel tense in first go through, but complete this phase asap

Now comes the next and final important part – the actual exam. Remember, preparation is key but it's not the only thing that will determine your success. You need to approach the exam with a positive mindset and confidence in your abilities.

Here are some tips to help you ace the certification exam:

Relax and stay calm: Don't panic before the exam. Take deep breaths and calm your nerves.
Read the instructions carefully: Before starting the exam, read the instructions thoroughly. Ensure you understand the format of the exam, how long it takes, and how many questions are there.
Time management: Make sure you manage your time well throughout the exam. Don't spend too much time on a single question as it can impact the rest of the exam.
Answer all questions: Make sure you answer all the questions. If you're unsure about an answer, make an educated guess.
Double-check: After answering all the questions, double-check your answers. Ensure you haven't missed any questions and that you've answered them correctly.
Stay focused: Avoid distraction during the exam. Focus on the questions and avoid any external factors that can impact your concentration.
Celebrate your success: Once you've completed the exam, celebrate your success. It's a great achievement, and you deserve to be proud of yourself.

In conclusion, passing a certification exam requires a combination of knowledge, preparation, and the right mindset. With these tips, I'm sure you'll do great on your exam. All the best!

In case any help is required connect me over LinkedIn and topmate.

Please share your thoughts/Questions in the comments or if anything you observed missing and found in the exam.