Zero-Trust Voting on Cloud Run

Vote-integrity path: CDN edge to Go services, KMS signing, continuous monitoring

Zero-Trust Voting on Cloud Run Vote-integrity path: CDN edge to Go services, KMS signing, continuous monitoring Google Cloud / production private service network Voters · web + mobile · Architecture component · public Voters web + mobile public Cloud CDN · edge cache + WAF · Google Cloud / production · edge Cloud CDN edge cache + WAF edge API Gateway · GraphQL + gRPC · Google Cloud / production · auth API Gateway GraphQL + gRPC auth Go Services · Cloud Run · Google Cloud / production › private service network · stateless Go Services Cloud Run stateless Cloud KMS · vote signing key · Google Cloud / production › private service network · signing Cloud KMS vote signing key signing Signed Votes · Spanner · Google Cloud / production › private service network · immutable Signed Votes Spanner immutable Command Center · continuous monitor · Google Cloud / production · SCC Command Center continuous monitor SCC HTTPS TLS GraphQL + gRPC sign vote store signed vote telemetry Legend External Cloud Security Backend Database

Request Path

  • • Voters reach only the managed CDN edge
  • • Gateway terminates GraphQL and gRPC with auth
  • • Go services on Cloud Run stay stateless and private

Vote Integrity

  • • Each vote is signed by a Cloud KMS key
  • • Signed votes land in immutable Spanner rows
  • • No path writes an unsigned vote

Continuous Assurance

  • • Security Command Center monitors the runtime
  • • Telemetry is a side channel, not the hot path
  • • Zero-trust: every hop is authenticated

Architecture diagram • Built with Archify • Create yours ↗ • Hover to trace • R route • Click to focus • +/− zoom • M radar • [/] views • P play story • T theme • E export