Google Announces Cloud Functions' Native Integration with Secret Manager - Build What's Next
Blog

Google Announces Cloud Functions’ Native Integration with Secret Manager

3273

Of your peers have already read this article.

2:00 Minutes

The most insightful time you'll spend today!

Considering customer feedback on writing custom codes while integrating with Secret Manager, Google Cloud announces Cloud Functions' native integration with the fully-managed storage system. Read to explore the benefits of native integration!

Google Cloud Functions provides a simple and intuitive developer experience to execute code from Google Cloud, Firebase, Google Assistant, or any web, mobile, or backend application. Oftentimes that code needs secrets—like API keys, passwords, or certificates—to authenticate to or invoke upstream APIs and services.

While Google Secret Manager is a fully-managed, secure, and convenient storage system for such secrets, developers have historically leveraged environment variables or the filesystem for managing secrets in Cloud Functions. This was largely because integrating with Secret Manager required developers to write custom code… until now. We listened to customer feedback and today we are announcing Cloud Functions has a native integration with Secret Manager!

This native integration has many key benefits including:

  • Zero required code changes. Cloud functions that already consume secrets via environment variables or files bundled with the source upload simply require an additional flag during deployment. The Cloud Functions service resolves and injects the secrets at runtime and the plaintext values are only visible inside the process.
  • Easy environment separation. It’s easy to use the same codebase across multiple environments, e.g., dev, staging, and prod, because the secrets are decoupled from the code and are resolved at runtime.
  • Supports the 12-factor app pattern. Because secrets can be injected into environment variables at runtime, the native integration supports the 12-factor pattern while providing stronger security guarantees.
  • Centralized secret storage, access, and auditing. Leveraging Secret Manager as the centralized secrets management solution enables easy management of access controls, auditing, and access logs.

Cloud Functions’ native integration with Secret Manager is available in preview to all Google Cloud customers today. Let’s take a deeper dive into this new integration.

Example

Suppose the following cloud function invoked via HTTP uses a secret token to invoke an upstream API:

  const https = require('https');
const token = process.env.TOKEN;

exports.secretDemo = (req, res) => {
  https.get(`https://upstream-api.example.com?token=${token}`, (innerRes) => {
    innerRes.on('end', () => { res.send('OK') });
  }).on('error', (err) => {
    res.send(`Error: ${err}`);
  });
}

Without Cloud Functions’ native integration with Secret Manager, this function is deployed via:

  $ gcloud functions deploy "secretDemo" \
    --runtime "nodejs14" \
    --trigger-http \
    --allow-unauthenticated \
    --set-env-vars "TOKEN=abcd1234"

This approach has a number of drawbacks, the biggest of which being that anyone with viewer permissions on the Google Cloud project can see the environment variables set on a cloud function.

To improve the security of this code, migrate the secret to Secret Manager in the same project:

  $ gcloud secrets create "token" \
    --replication-policy "automatic" \
    --data-file - <<< "abcd1234"

Finally, without changing any code in the function re-deploy with slightly different flags:

  $ gcloud beta functions deploy "secretDemo" \
    --runtime "nodejs14" \
    --trigger-http \
    --allow-unauthenticated \
    --set-secrets "TOKEN=my_token:latest"

It’s truly that easy to migrate from hard-coded secrets to using secure secret storage with Secret Manager! To add even more layers of security, consider running each cloud function with a dedicated service account and practice the principle of least privilege. Learn more in the Secret Manager Best Practices guide.

Making security easy

Security and proper secrets management are core pillars of modern software development, and we’re excited to provide customers a way to improve the security of their cloud functions. To learn more about the new native integration, check out the Cloud Functions documentation. You can also learn more about Cloud Functions or learn more about Secret Manager.

Case Study

Reducing Data Costs by 80% with Google Cloud: Inshorts’ Success in the Indian Mobile News Market

2789

Of your peers have already read this article.

3:30 Minutes

The most insightful time you'll spend today!

inshorts has successfully shortened product cycles from one month to one week to roll out new features faster for its users, reduced data costs by 80%, and achieved six-fold latency improvements with Google Cloud. Learn more!

About inshorts

Mobile news platform inshorts condenses the latest national and international news into 60-word briefs in English and Hindi. With 10 million downloads so far, it’s expanding to cater to millions more on-the-go Indians reading news on mobile devices.

Industries: Media & Entertainment
Location: India

Across India, hundreds of millions of people turn to their smartphones for news that will enhance their lives and help them achieve their goals. According to Professor Rasmus Kleis Nielsen, Director of the Reuters Institute for the Study of Journalism: “The past few years have seen explosive growth in mobile internet access, and the rapid move to digital media will have profound implications for the practice of journalism, the business of news, media institutions, and thus by extension political and public life in India.” The Institute reports that Indians with internet access have risen from 100 million to 500 million in the past decade alone. The report identifies India’s news industry as “a mobile-first market,” with 66% of Indians citing smartphones as the device they most frequently use to access online news.

Seeing an opportunity to meet the growing need for news on the go, inshorts developed a mobile news platform for Indians on the move who want to stay informed but don’t have time to read long articles. The inshorts solution condenses news, from politics to cricket, into briefs of under 60 words and has been well received, with 10 million downloads since launching in 2013.

“There’s a new wave of 300 to 400 million first-time mobile users projected for India. We want to capture those users, and Google Cloud is helping us succeed.”
-—Manish Bisht, Head of Technology, inshorts

To keep the attention of its always-on news consumers and attract more users for continued growth, inshorts knows it must continuously evolve and improve its platform. The company turned to Google Cloud in 2016 in order to free its developers from time-consuming infrastructure maintenance tasks and enable them to focus on creating innovative applications instead. It was also looking for powerful yet cost-effective data and scaling tools to reach more remote corners of India and found this in Google Cloud.

“There’s a new wave of 300 to 400 million first time mobile users projected for India,” says Manish Bisht, Head of Technology at inshorts. “We want to capture those users, and Google Cloud is helping us succeed.”

“Dataflow freed a lot of our development and instance management time, because we can process data in real time now. And that means giving users what they want instantly.”
-—Manish Bisht, Head of Technology, inshorts

Freeing up resources for new solutions

By migrating to Google Cloud, inshorts has been able to free up its development team to experiment with new ideas, without worrying about backend management or costs. The company worked with cloud consultancy Searce, a Google Cloud Premier Partner, to define the best solutions for achieving its goals. Searce partners with clients to help them scale their business by leveraging Cloud, AI/ML, and data analytics while reducing the operational IT infrastructure spend. Because it specializes in AI/ML, Anthos, and Cloud Search, inshorts chose it as the ideal partner for futurifying its business on Google Cloud. According to Manish, the Searce team was focused not only on helping inshorts to migrate and adopt a on-demand computing mindset, but helping it to decrease monthly costs as well. “There’s always a positive push from Searce, to help us move forward, and to really put our company’s priorities first,” he says.

Through the application development solutions of Firebase, for example, inshorts is able to test new features in a rapidly shifting market. The product’s ease-of-use and built-in data analytics mean that inshorts can now allocate its developer resources more efficiently across multiple projects, instead of needing an entire team to focus on one project. Product cycles are now just one week long, instead of one month, and each backend and frontend developer in the team of four is able to focus on a separate project, meaning that more work gets done in a shorter time.

“We simply moved to Dataproc, provisioned the machines, and let Google Cloud take over all the management for us. This one change translated into labor savings of up to six hours a day.”
-—Manish Bisht, Head of Technology, inshorts

Dataflow, which enables real-time data processing, has been a major factor in allowing inshorts to instantly recommend content to users. Previously, the company had managed its own instances, first manually recording what users were doing and later pushing out recommendations. That all changed with Dataflow. “Dataflow freed a lot of our development and instance management time, because we can process data in real time now,” says Manish. “And that means giving users what they want instantly.”

Perhaps one of the biggest time savings came from using Dataproc, which released the inshorts team from the task of managing clusters. “We simply moved to Dataproc, provisioned the machines, and let Google Cloud take over all the management for us,” says Manish. “This one change translated into labor savings of up to six hours a day.”

Where costs are concerned, inshorts is happy to report that Google Cloud has led to not just time savings, but monetary savings as well. The company had begun its cloud journey with a leading provider, but soon found that data analytics services were driving up costs. Meanwhile, the service required high levels of technical expertise to manage the growing infrastructure, which meant it needed to hire a DevOps expert. After switching to Google Cloud products such as Google Kubernetes Engine (GKE), Cloud Deployment Manager, and Cloud Build, inshorts has now reduced most of its DevOps burden.

“At the time, we were spending around USD100,000 per month in data analysis and data-related fields alone. We had to pursue a cost optimization drive,” recalls Manish. “We had no idea how much we would save just by migrating to Google Cloud. We brought down our costs for the entire infrastructure to around USD20,000 per month.”

The company now uses BigQuery with Looker Studio to analyze and predict its tech expenditure. With Looker Studio, it can easily visualize infrastructure costs and break them down by team, services, and project stakeholders.

Processing millions of images quickly, delivering news instantly

inshorts cites the move to GKE as one of its most important moves. “At one point, we were processing a quarter of a million images per day. Because images are uploaded by our users, traffic is unpredictable; planning the exact amount of compute needed in a given moment is almost impossible. Load balancing itself was no longer enough,” shares Manish. “Google Kubernetes Engine makes life easier for our developers, reducing the need for them to be ever present, and giving them a tool that’s easy to work with.”

The inshorts team moved to GKE primarily to gain this ease of use, where its team can now push a few configurations, then spin up clusters, tell them how to handle the load and what kind of machines to provision, and manage resources effectively. The team has reduced its dependency on DevOps since there’s no need for developers to worry about what size of machines they need for their applications. “The size of machine needed depends on the specific job, and with Google Kubernetes Engine it’s very easy to accommodate a whole range of jobs. We simply optimize our resources, scaling up or down as needed,” says Manish.

As inshorts’ platform becomes more feature-rich and sophisticated, it is taking advantage of the global network of Google Cloud. With its data center in the United States, the platform had begun to experience latency of about 600ms, too great a lag in an age of instant news. Because Google Cloud has regional data centers around the world, inshorts was able to simply move its data center closer to home, bringing down average latency to 100 ms. “We achieved significant app performance improvements thanks to being able to migrate our data center,” says Manish. “The loading was faster; everything was faster.”

Mapping the future with localized news

Being able to develop features even faster is enabling inshorts to pursue its goal of expanding into every corner of India. To capture the wave of new mobile consumers, inshorts realizes that it needs to start by finding out exactly where they are. Using Google Maps Platform, the company has launched a location-based social video app called Public, which offers news that’s highly localized to specific Indian communities and relevant to what they want to read.

As a developing nation, India’s mapping landscape is constantly changing. There were 722 administrative regions when inshorts began its work, but by 2018, 10 new districts had been added to this number. Because Public serves rural and suburban audiences, it’s crucial that it can stay on top of these rapid and sometimes confusing changes. According to Manish, Google Maps Platform not only offers granular geo-location through the Geolocation API but adapts to mapping changes in near real time. It’s a capability that inshorts is harnessing to make the Public app into its next success. “The app is experiencing tremendous growth in the tier two and three cities,” shares Manish, “In the short span of six months, it has already become the category’s number-one ranked app on the Google Play store.”

Tell us your challenge. We’re here to help.

Blog

What to Look for from Cloud CISO Perspective

6606

Of your peers have already read this article.

2:30 Minutes

The most insightful time you'll spend today!

From cloud security highlights, industry insights on risk governance on digital transformation in the cloud to a lineup of talks and keynotes from Googlers at RSA, there are plenty of thoughts shared with the Cloud CISO perspectives. Learn more.

May is a big month for the security industry. It’s been over a year since we gathered for RSA in San Francisco for one of 2020’s last major in-person events. While we likely won’t be together in person this year, it’s an important time for the security community to come together and reflect on many accomplishments, and to consider the challenges still ahead of us. As the world focuses on security incidents and all the risks that still need resolving, it is important to stand back, on occasion, and also note that immense progress has been made by large numbers of small, medium and large enterprises to protect themselves and their customers against increased threats. What is also amazing is to see organizations do this while accelerating their digital transformations, supporting and protecting customers and managing ongoing remote working challenges. We are privileged to play our part in supporting those great teams. 

It’s also been a busy month for us here at Google Cloud since our inaugural CISO perspectives blog post in April. Today, I’ll recap our cloud security and industry highlights, a sneak peak of what’s ahead from Google at RSA and more. 

Thoughts from around the industry 

  • Risk Governance of Digital Transformation in the Cloud – In our latest Office of the CISO whitepaper, we shared guidance on both the challenges and opportunities of cloud transformation for Chief Risk Officers, Chief Compliance Officers, Heads of Internal Audit and their teams. A misconception we sometimes see among these executives is that moving to the cloud creates more risk to manage. Having held these leadership positions in previous roles, I believe that the cloud is as much a means of managing security, resilience and other risks as it is a risk in its own right. The whitepaper dives deep into considerations for each of these leadership functions as their organization embarks on a digital transformation journey. 
  • The importance of meeting global compliance requirements – Compliance is critical for building trust with customers in regulated industries, especially the public sector. It is worth remembering that in any critical industry, where there can be material impact from incidents, strong industry practices and standards to protect customers are vital (I wrote about this last summer). At Google Cloud, we’re regularly adding new compliance and security certifications to meet our customers’ needs globally. Recently, we expanded our list of FedRAMP High-certified products to include Cloud DNS, and helped our customers in the Asia-Pacific region address various compliance requirements to meet new government regulations for security and data protections. Google Cloud was also the only cloud service provider to complete an annual pooled audit with the Collaborative Cloud Audit Group (CCAG), which is a syndicate of 39 leading European financial institutions and insurance companies who depend on cloud infrastructure and technologies to deliver innovative solutions and experiences for their customers. Having spent most of my career in the financial services industry, I know firsthand the importance of managing risk assessments for outsourced vendors to provide the necessary assurances customers need from their cloud providers. 

RSA 2021 

We have a great lineup of speaking sessions and keynotes from Googlers at RSA this year. Below are the highlights you don’t want to miss: 

  • I’ll be doing a session on May 20 about supply chain resilience, where a panel of experts will dive into how we can adjust risk and security initiatives to handle the next “punch to the supply chain.” Additionally, on May 18 I’ll join many of my esteemed CISO leaders from various industries and governments for a keynote discussion on our top security insights, lessons learned and best practices for how we move forward as an industry to address the next wave of challenges. 
  • Google’s Senior Director of Information Security Heather Adkins will deliver a session on how to build secure and reliable systems at scale, which will cover principles from Google’s Site Reliability Engineering book with the same title (available for free download here). I’m most looking forward to Heather’s advice for how we as an industry can reshape our security thinking, based on modern architectures and technologies that can help organizations design scalable and reliable systems that are fundamentally secure.
  • Nelly Porter, Senior Product Manager at Google Cloud Security, will participate in a panel discussion with security experts on the importance of Confidential Computing technology, how it’s changing the security landscape and where it’s headed. Google Cloud has made great progress in delivering a Confidential Computing portfolio for our customers in regulated industries over the past year, and we’re excited for new milestones in 2021. 

Google cloud security highlights

  • Infrastructure and SRE spotlight – Before I joined Google Cloud, I always admired the infrastructure and benefits this organization delivers that are uniquely Google – from the subsea cable innovations to SRE inventions and principles. Security and resiliency are baked into every layer of our infrastructure. Many of the Googlers who build and support our platform have sat in the same seat as our customers, so they understand those needs intimately. Over the last few months it’s been amazing to watch our technical infrastructure team grow, and the direct reliability, operational resilience and security benefits that team brings to our customers. For example, we’ve opened a new region in Polandannounced the first subsea cable that will directly connect the U.S. to Singapore with fiber pairs over an express route, and released an SRE book focused on how organizations can complete a successful cloud migration.
  • New security foundations blueprint guide – As part of our mission to deliver the industry’s most trusted cloud, we strive to operate in a shared-fate model for risk management in conjunction with our customers. This includes sharing opinionated step-by-step guidance with key decision points and focus areas for how our customers deploy workloads in Google Cloud. This is why we’ve updated our Google Cloud security foundations guide and corresponding Terraform blueprint scripts. These blueprints are tremendously helpful to many stakeholders within an enterprise, like a CISO that needs to understand our key principles for cloud security, or a C-Suite business leader that needs to quickly identify the skills their teams need to meet an organization’s security, risk, and compliance needs on Google Cloud. 

When we think about the types of features to build into products, we have many principles we follow. But the two that I keep coming back to as crucial are:

  1. The need for secure products not just security products. All products should have security built in and while we do build great security products our security and other teams remain focused on constantly enhancing the base levels of security and the security features in all our products. 
  2. Defense in Depth. We don’t just focus on defense in depth from attacks – for ourselves and our customers. We also prioritize defense in depth from configuration errors or other hazards. 

As you see below in some of the highlights of new features and products, these represent our commitment to secure products and all forms of defense in depth. 

  • Workload identity federation – Service account keys are powerful credentials, and can represent a security risk if they are not managed correctly. A safer approach is to use workload identity federation, using IAM to grant external identities IAM roles, including the ability to impersonate service accounts. This lets you access resources directly and eliminates the maintenance and security burden associated with service account keys. We also offered related overall guidance on the best way to use and authenticate service accounts on Google Cloud.
  • VPC-SC Directional Policies – With VPC Service Controls (VPC-SC), admins can define a security perimeter around Google-managed services to control communication to and between those services. Using VPC-SC, you can isolate your production GCP resources from unauthorized VPC networks or the internet. But what if you need to transfer data between isolated environments that you’ve set up? VPC-SC directional policies is a new secure data exchange feature that allows you to configure efficient, private, and secure data exchange between isolated environments. 
  • Anthos service mesh supports VMs as well as clusters – Most enterprise compute resources are still in VMs and many will remain there for a long time to come. In Anthos 1.7,  your VM-based workloads can now take advantage of the same mesh functionality as your container-based workloads.
  • Cloud Spanner CMEK and Access Approvals – Cloud Spanner is Google Cloud’s fully managed relational database that offers unlimited scale, high performance, strong consistency across regions and high availability. Spanner now supports customer-managed encryption keys (CMEK) and Access Approval, Google Cloud’s industry-leading controls to require approval before access to your content by Google support and engineering teams.
  • External Key Manager enhancements – In early 2020 we launched Cloud External Key Manager (Cloud EKM), the industry’s leading Hold-Your-Own-Key (HYOK) product. Using Cloud EKM, the keys used to protect your data stored and processed in Google Cloud are completely hosted and managed outside of Google Cloud infrastructure. Cloud EKM initially launched with support for BigQuery and GCE/PD;  we expanded support for Cloud SQLGKEDataflow Shuffle, and Secret Manager, with CMEK support currently in beta. We also provided in-depth documentation on the functionality, architecture and use cases for Cloud EKM in a new whitepaper.
  • Web App and API Protection solution –  Web applications and public APIs are increasingly important to how organizations interface with their customers and partners, and we’ve seen increased investment in tools to protect these resources from fraud and abuse. Google Cloud’s new Web App and API protection solution is based on the same technology Google uses to protect its public-facing services against web application exploits, DDoS attacks, fraudulent bot activity, and API targeted threats. It provides protection across clouds and on-premises environments.
  • Threat Intel for Chronicle – Most threat intelligence feeds require security teams to do the implementation and legwork. With our new Threat Intel for Chronicle offering, however, our intelligence insights are applied automatically across your security telemetry to present unique observations within your environment. Threat Intel for Chronicle is exclusively curated for enterprise customers by Uppercase, Google Cloud’s intelligence research and applications team to provide our perspective on threats across the internet and surface them as relevant alerts.

That wraps up another month of thoughts and highlights. If you’d like to have this Cloud CISO Perspectives post delivered every month to your inbox, click here to sign-up, and we’ll see you in June!

Case Study

Held Back by Database Scalability, This Financial Services Company Switches to Google Cloud and Cloud Spanner

11566

Of your peers have already read this article.

4:30 Minutes

The most insightful time you'll spend today!

Financial services provider, Azimut Group, turns to Google Cloud and Google Cloud Spanner. The result? It can scale up databases in two minutes instead of one day, and it saves 35% on cloud provider costs.

Azimut Group operates an international network of companies handling investment and asset management, mutual funds, hedge funds, and insurance. Founded in Milan, Italy in 1988, Azimut Group today has branches in fifteen countries, including Brazil, China, and the USA.

“We have subsidiaries and manage funds all over the world,” explains Simone Bertolotti, IT Manager at Azimut Holding S.p.a. “That means that any technology that we put in place has to cover needs from many different countries.”

“When complicated analysis has to be executed, we have to increase our table space in a couple of minutes so that the AI can drill down into the data and deliver the information we need.”

Simone Bertolotti, IT Manager, Azimut Holding S.p.a.

Azimut manages its funds with investment advisors who use information sourced from Bloomberg, Reuters and others. “They use a huge amount of data,” says Simone. “They work with spreadsheets, algorithms, formulae and they analyse data in minutes.” In finance, every second is crucial, which is why Azimut decided to develop a risk management dashboard that can process information even more quickly, then distribute it worldwide.

“When an advisor manages data, that data is used to make immediate decisions on funds, capital movements or whether to sell stock,” says Simone. “They have to be ready to make recommendations for any amount of data that comes to them. For our dashboard, that means that when additional information arrives or complicated analysis has to be executed, we have to increase our table space in a couple of minutes so that the AI can drill down into the data and deliver the information we need.”

Generating insights at speed

Investors and investment managers make decisions based on the most accurate, up-to-date information possible. For Azimut Group, information sourced through financial data vendors such as Bloomberg and Reuters provided only part of the data that the group required.

“We looked to collect information from a range of different providers,” explains Simone, “then analyse it to develop a predictive algorithm that could work faster than an advisor stationed at the terminal. We set ourselves the challenge to try to manipulate that data to add new insights into our matrix, so that every one of our branches across the world can see risk information about the funds in real-time.”

“We compared Google Cloud Platform’s performance with our previous cloud provider, and saw huge benefits of switching to Google. For me, the key performance issue is scaling. With Google Cloud Platform I know that I can increase and decrease my infrastructure quickly, when I need it.

Simone Bertolotti, IT Manager, Azimut Holding S.p.a.

The first cloud provider Azimut used to build its system struggled to scale quickly to meet different kinds of data challenges. “If we wanted to add more cores, that was fine,” says Simone. “But the previous cloud provider made it complicated to raise the amount of space in a database infrastructure and scale up to demand. Scaling up for more in-depth analysis would take a day, and our need was immediate.”

That’s why Azimut switched one year ago to Google Cloud Platform to run the 150 VMs on its risk analysis platform. “We compared Google Cloud Platform’s performance with our previous cloud provider, and saw huge benefits of switching to Google. For me, the key performance issue is scaling,” says Simone. “With Google Cloud Platform I know that I can increase and decrease my infrastructure quickly, when I need it. Instead of waiting a day to scale up infrastructure, we can request and add space to our database in a couple of minutes.”

The infrastructure of Azimut’s solution handles around 800TB of data per month, and Google’s global network of servers and high-speed connections ensure that it gets to where it’s most needed by the most direct route. Impressed by the speed, security and availability of Google Cloud Platform, Azimut has moved its intranet on to Google Cloud Platform, too, eliminating the need for staff to login with VPNs.

“Instead of waiting a day to scale up infrastructure, we can request and add space to our database in a couple of minutes.”

Simone Bertolotti, IT Manager, Azimut Holding S.p.a.

Driving ahead with Noovle

For Azimut, migrating the risk management dashboard is the latest of many Google product collaborations with cloud consultancy Noovle. “Everything started five years ago,” says Simone, “when Noovle assisted us in migrating to Gmail from our on-premise email solution. From G Suite to Google Cloud Platform, we’ve had a great relationship. Noovle provides consultancy services, support for mobility, and external advisors who work on our premises, such as when they trained us how to broadcast our meetings on Google Hangouts. As an independent company, we know we can trust them for transparent advice. All they care about is the best way to get a job done and to help us reach our goals.”

New app, new customers

In a business case comparison, Google Cloud Platform cost Azimut 35% less to run than the previous cloud provider. Now the group is building a major new mobile application on Google App Engine to be released in 2018.

“The new mobile application will allow customers to trade directly, without human advisors, by proposing different investment solutions depending on targets the customers set,” says Simone. “So if a customer aims to make money with investments, they enter their relevant personal information and we carry out the necessary regulatory checks and suggest what they could buy. The entire project will be based on Google Cloud Platform, so customers can control their investments through the app while we manage the fund, using Google Cloud Spanner on the backend.”

Blog

Speed Up Data-driven Innovation in Life Sciences with Google Cloud

4276

Of your peers have already read this article.

1:30 Minutes

The most insightful time you'll spend today!

Healthcare and life sciences organizations have transformed the way they function by embracing innovation. The industry is set to reap the benefits of cloud technology and overcome the existing barriers to innovation. Read how Google Cloud helps.

The last few years have underscored the importance of speed in bringing new drugs and medical devices to market, while ensuring safety and efficacy. Over this time, healthcare and life sciences organizations have transformed the way they research, develop, and deliver patient care by embracing agility and innovation.

Now, the industry is set to reap the benefits of cloud technology and overcome the existing barriers to innovation.

Watch a 2-min overview of how Google Cloud helps life sciences accelerate innovation across the value chain.

What’s holding back innovation?

Costly clinical trials: The process of trialing and developing new drugs and devices is still long and costly, with more than 1 in 5 clinical trials failing due to a lack of funding.1 The high failure rate comes as no surprise when you consider the average clinical trial costs $19 million and takes 10-15 years (through all 3 phases) to be approved.2

Stringent security requirements: Pre-clinical R&D and clinical trials use large volumes of highly sensitive patient data – making the life sciences industry one of the top sectors targeted by hackers.3 On top of this, the FDA and other regulatory bodies have strict requirements for medical device cybersecurity.

Unpredictable supply chains: Global supply chains are becoming increasingly complex and unpredictable. This can be brought on by anything from supply shortages, to geo-political events, and even bad weather. Making things worse is the lack of visibility into medical shipment disruptions – so when disaster strikes you’re often caught off guard.

Google Cloud for life sciences

At Alphabet, we’ve made significant investments in healthcare and life sciences, helping to tackle the world’s biggest healthcare problems, from chronic disease management, to precision medicine, to protein folding.

Together with Google, you can transform your life sciences organization and deliver secure, data-driven innovation across the value chain.

  • Accelerate clinical trials to deliver life-saving treatments faster and at less cost. Clinical trials require relevant and equitable patient cohorts that can produce clinically valid data. Solutions like DocAI can enable optimal patient matching for clinical trials, helping organizations optimize clinical trial selection and increase time to value. How that patient data is collected is also important. Collection in a physician’s office captures a snapshot of the participant’s data at one point in time and doesn’t necessarily account for daily lifestyle variables. Fitbit, used in more than 1,500 published studies–more than any other wearable device–can enrich clinical trial endpoints with new insights from longitudinal lifestyle data, which can help improve patient retention and compliance with study protocols. We have introduced Device Connect for Fitbit, which empowers healthcare and life sciences enterprises with accelerated analytics and insights to help people live healthier lives. We are able to empower organizations to improve clinical trials in key ways:
  1. Enable clinical trial managers to quickly create and launch mobile and web RWE collection mechanism for patient reported outcomes
  2. Enable privacy controls with Cloud Healthcare Consent API and, as needed, remove PHI using Cloud Healthcare De-identification API
  3. Ingest RWE and data into BigQuery for analysis
  4. Leverage Looker to enable quick visualization and powerful analysis of a study’s progress and results
  • Ensure security and privacy for a safe, coordinated, and compliant approach to digital transformation. Google Cloud offers customers a comprehensive set of services including pioneering capabilities such as BeyondCorp Enterprise for Zero Trust and VirusTotal for malicious content and software vulnerabilities; Chronicle’s security analytics and automation coupled with services such as Security Command Center to help organizations detect and protect themselves from cyber threats; as well as expertise from Google Cloud’s Cybersecurity Action Team. Google Cloud also recently acquired Mandiant, a leader in dynamic cyber defense, threat intelligence and incident response services.
  • Optimize supply chains and enhance your data to prepare for the unpredictable. With a digital supply chain platform, we can empower supply chain professionals to solve problems in real time including visibility and advanced analytics, alert-based event management, collaboration between teams and partners, and AI-driven optimization and simulation.

Ready to learn more? We’ll be taking a deep dive into each of the challenges outlined above in our life sciences video series. Stay tuned.

  1. National Library of Medicine
  2. How much does a clinical trial cost?
  3. Life Sciences Industry Becomes Latest Arena in Hackers’ Digital Warfare
Blog

Cloud on Europe’s Terms: How Google Sets to Deliver Cloud Services for Driving Digital Sovereignty

5157

Of your peers have already read this article.

1:30 Minutes

The most insightful time you'll spend today!

Google Cloud's overarching goal of delivering sustainable, digital transformation for European organization will be met as per Europe's terms! After a discussion with the policy makers and customers, Google unveils ways to make it happen.

Cloud computing is globally recognized as the single most effective, agile and scalable path to digitally transform and drive value creation. It has been a critical catalyst for growth, allowing private organizations and governments to support consumers and citizens alike, delivering services quickly without prohibitive capital investment. European organizations—in both the public and private sectors—want a provider to deliver a cloud on their terms, one that meets their requirements for security, privacy, and digital sovereignty, without compromising on functionality or innovation.

Last year, we set out an ambitious vision of sovereignty along three distinct pillars: data sovereignty (including control over encryption and data access), operational sovereignty (visibility and control over provider operations), and software sovereignty (providing the ability to run and move cloud workloads without being locked-in to a particular provider, including in extraordinary situations such as stressed exits). After extensive dialogue with customers and policymakers, we are today unveiling ‘Cloud. On Europe’s Terms’. As part of  this initiative, we will continue to demonstrate our commitment to deliver cloud services that provide the highest levels of digital sovereignty, all while enabling the next wave of growth and transformation for Europe’s businesses and organizations.

Google Cloud’s baseline controls and security features offer strong protections, meet current robust security and privacy requirements, and address many customer needs. Yet each country in Europe has its own characteristics and expectations. Certain customers in Europe may require more flexibility than current public and private cloud offerings may provide. We want to deliver a platform that allows customers to deploy workloads with the desired local control, without losing the transformational benefits of the public cloud.

We are now delivering on this new vision collaboratively with trusted local technology providers in Europe, starting with T-Systems in Germany. Today, together with T-Systems, we announced a partnership to build a Sovereign Cloud offering in Germany for private and public sector organizations. The offering will become available in mid 2022 with additional features being added over time.  

In this new joint offering, T-Systems will manage sovereignty controls and measures, including encryption and identity management of the Google Cloud Platform. In addition, as part of their offering, T-Systems will operate and independently control key parts of the Google Cloud infrastructure for T-Systems Sovereign Cloud customers in Germany.

We are committed to building trust with European governments and enterprises with a cloud that meets their digital sovereignty, sustainability and economic objectives. We are starting with T-Systems today and will continue by partnering with trusted technology providers in selected markets across the region. 

Customers in other markets across Europe will be able to use these trusted partner offerings or use Google Cloud’s controls to exercise autonomous control over data access and use; exercise choice over the infrastructure that is used to process that data; and avoid cloud vendor lock-in. 

With Google Cloud, our customers also automatically benefit from sustainable business transformation on the cleanest cloud in the industry. Today, we are the largest annual corporate purchaser of renewable energy globally, and by 2030, we aim to operate entirely on 24/7 carbon-free energy in all of our cloud regions worldwide. 

We’ll continue to listen to our customers and key stakeholders across Europe who are setting policy and helping shape requirements for customer control of data. Our goal is to make Google Cloud the best possible place for sustainable, digital transformation for European organizations on their terms—and there is much more to come.

More Relevant Stories for Your Company

Case Study

Quilkin: How the Open-source UDP Proxy Enables High-performance Multiplayer Gaming

Traditionally, dedicated game servers for real time multiplayer games have used bespoke UDP protocols for communication and synchronization of gameplay among the players within a game. This communication is most often bundled into monolithic game servers and clients, pairing the technical functionality of communication protocols, such as custom network physics synchronisation, security,

Blog

How AI-powered ML Models Helps Run Unemployment Claims Verification at Scale

With unemployment application submissions reaching record numbers over the past year, state and local agencies in the United States have faced the challenge of processing unprecedented numbers of claims per week. The digital infrastructure most agencies have in place is unable to handle this volume, resulting in constituents waiting longer,

Research Reports

Forrester Study Finds 72% ROI from Moving Expensive, Traditional OS and Software to Google Cloud!

Google Cloud commissioned Forrester Consulting to conduct a Total Economic Impact™ (TEI) study and examined the potential return on investment (ROI) for companies that have migrated to Google Cloud. The study evaluates the risks, benefits and costs associated with Google Cloud migration and the experiences of five customers with large,

Case Study

How Ather Energy is leveraging the Cloud to build and scale smart mobility solutions for India

In 2013, long before the world was discussing clean energy and sustainable practices, two IIT Madras graduates — Swapnil Jain and Tarun Mehta — had an idea to develop India’s first-ever electrical scooter. This was at a time when auto manufacturers were still focusing on fossil-fuel-driven vehicles and ‘eco-friendly’ mobility

SHOW MORE STORIES