Create a tokenizer service and store only tokenized data.

Create separate projects that only process credit card data.

Create separate subnetworks and isolate the components that process credit card data.

Streamline the audit discovery phase by labeling all of the virtual machines (VMs) that process PCI
data.

Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the
auditor

Deploy each microservice as a Deployment. Expose the Deployment in the cluster using a Service, and use the Service DNS name to address it from other microservices within the cluster.

Deploy each microservice as a Deployment. Expose the Deployment in the cluster using an Ingress, and use the Ingress IP address to address the Deployment from other microservices within the cluster.

Deploy each microservice as a Pod. Expose the Pod in the cluster using a Service, and use the Service DNS name to address the microservice from other microservices within the cluster.

Deploy each microservice as a Pod. Expose the Pod in the cluster using an Ingress, and use the Ingress IP address name to address the Pod from other microservices within the cluster.

Identify self-contained applications with external dependencies as a first move to the cloud.

Identify enterprise applications with internal dependencies and recommend these as a first move to the
cloud.

Suggest moving their in-house databases to the cloud and continue serving requests to on-premise
applications.

Recommend moving their message queuing servers to the cloud and continue handling requests to
on-premise applications.

Use Cloud SQL for time series data, and use Cloud Bigtable for historical data queries.

Use Cloud SQL to replace MySQL, and use Cloud Spanner for historical data queries.

Use Cloud Bigtable to replace MySQL, and use BigQuery for historical data queries.

Use Cloud Bigtable for time series data, use Cloud Spanner for transactional data, and use BigQuery
for historical data queries.

Sharding

Read replicas

Binary logging

Automated backups

Semisynchronous replication

Add each tier to a different subnetwork.

Set up software based firewalls on individual VMs.

Add tags to each tier and set up routes to allow the desired traffic flow.

Add tags to each tier and set up firewall rules to allow the desired traffic flow.

Migrate the web application layer to App Engine, and MySQL to Cloud Datastore, and NAS to Cloud
Storage. Deploy RabbitMQ, and deploy Hadoop servers using Deployment Manager.

Migrate RabbitMQ to Cloud Pub/Sub, Hadoop to BigQuery, and NAS to Compute Engine with
Persistent Disk storage. Deploy Tomcat, and deploy Nginx using Deployment Manager.
ge

Implement managed instance groups for Tomcat and Nginx. Migrate MySQL to Cloud SQL, RabbitMQ
to Cloud Pub/Sub, Hadoop to Cloud Dataproc, and NAS to Compute Engine with Persistent Disk
storage.

Implement managed instance groups for the Tomcat and Nginx. Migrate MySQL to Cloud SQL,
RabbitMQ to Cloud Pub/Sub, Hadoop to Cloud Dataproc, and NAS to Cloud Stora

They should enable Google Stackdriver Debugger on the application code to show errors in the code.

They should add additional unit tests and production scale load tests on their cloud staging environment.

They should run the end-to-end tests in the cloud staging environment to determine if the code is
working as intended.

They should add canary tests so developers can measure how much of an impact the new release causes
to latency.