Google Cloud
Compute Engine, Cloud Storage, global VPC, Spanner, Cloud Run, GKE, IAM, and operations
Core Compute — Compute Engine & MIGs
Run VMs on Google's infrastructure and scale them with Managed Instance Groups.
Object Storage — Cloud Storage
Store objects in buckets with one API across storage classes and global/regional location.
Networking — VPC, Subnets & Firewall Rules
Use Google's global VPC with regional subnets and control traffic via firewall rules.
Managed Databases — Cloud SQL, Spanner & Firestore
Pick managed relational (Cloud SQL), global relational (Spanner), or serverless NoSQL (Firestore).
Serverless — Cloud Functions & Cloud Run
Run event-driven functions (Cloud Functions) or any container serverlessly (Cloud Run).
Containers — Google Kubernetes Engine (GKE)
Run Kubernetes the way Google designed it, in Standard or fully-managed Autopilot mode.
Identity & Access — Cloud IAM
Grant least-privilege roles to members across a project/folder/organization hierarchy.
Observability — Cloud Operations Suite
Collect metrics, logs, and traces with Cloud Monitoring, Logging, and Trace to run reliable systems.
Messaging & Events — Pub/Sub & Eventarc
Decouple services with one global messaging service, and know how its delivery guarantees actually behave.
API Management — API Gateway & Apigee
Put a managed gateway in front of serverless backends, and know when the heavier product is justified.
Content Delivery — Cloud CDN & Cloud Armor
Cache at Google's edge and filter hostile traffic before it reaches the origin.
DNS & Traffic Routing — Cloud DNS
Host zones on anycast nameservers and understand why GCP leans on load balancing rather than DNS for failover.
Load Balancing — Global and Regional
Use the global load balancer and its single anycast IP, and know which balancer suits which protocol.
Caching — Memorystore for Redis
Pick the right Memorystore product, reach it privately from GKE and Cloud Run, and plan for maintenance and failover — not just the cache-aside code.
Streaming & Analytics — Dataflow & BigQuery
Process streams and batches with one programming model, and query petabytes without managing a cluster.
Orchestration — Workflows & Cloud Composer
Coordinate multi-step processes with retries and compensation, at the right weight for the job.
Block & File Storage — Persistent Disk & Filestore
Choose between block, file and object storage, and size a disk for the throughput it actually needs.
Encryption & Secrets — Cloud KMS & Secret Manager
Encrypt with managed keys, keep credentials out of code, and authenticate workloads without any key at all.
Infrastructure as Code — Terraform & Config Connector
Manage Google Cloud infrastructure with Terraform — state in Cloud Storage, one project per environment, and both layers of deletion protection on stateful resources.
CI/CD — Cloud Build & Cloud Deploy
Build once with Cloud Build, then let Cloud Deploy promote that same release through environments, with approvals, canaries and one-command rollback.
NoSQL Data Modelling — Firestore & Bigtable
Model for the queries each store can actually answer, and design a Bigtable row key that does not create a hotspot.
Resilience & Disaster Recovery — Zones, Regions & Multi-region
Choose zonal, regional or multi-region versions of each resource on purpose, replicate the data tier to match the RPO, and let the global load balancer move users without DNS.
Cost Optimisation & the Architecture Framework
Cut Google Cloud spend without cutting capability, using the discounts that apply automatically, right-sized machines and BigQuery's scan-based pricing.
Organization Policy & Security — Hierarchy, VPC-SC & SCC
Organise projects under an organization, set constraints nobody can escape, and detect what IAM cannot prevent.