Cloud
[GCP] Two Types of Firewall Services
→ 日本語版を読むTwo Types of Firewall Services in GCP
GCP has two types of firewall services.
They are VPC Firewall Rules and Firewall Policies.
The following link explains the differences between them clearly.
In Terraform:
- google_compute_firewall is for VPC Firewall Rules, and
- google_compute_firewall_policy is for Firewall Policies.
For development environments, VPC Firewall Rules are simple, easy to use, and seem sufficient for most needs.
When you want to manage firewalls company-wide in a centralized manner, Firewall Policies would be the way to go.
That's all.