Locking Down BigQuery: IAM Design, VPC Service Controls, CMEK, and Audit Logs
October 12, 2026 · BQBrains Team
The security layer outside the warehouse: dataset-scoped IAM and authorized views, a dry-run VPC Service Controls perimeter, customer-managed keys that can actually be revoked, and audit-log queries that answer “who read this table”.
Read more