Cloud / GCP

Useful — Provides substantive networking and troubleshooting labs for a specialist learning path, not certification by completion alone.

A sixteen-activity learning path for Google Cloud networking

Courses, labs, and skill badges for practicing Google Cloud network configuration, operation, and troubleshooting in preparation for the Professional Cloud Network Engineer exam. Completing the learning path is not itself certification.

Essential — Explains practical keyless workload admission, narrow IAM grants, and the distinction between workload identity and user authorization.

Keyless authentication from external CI/CD systems to Google Cloud

A practical guide to exchanging deployment-platform OIDC tokens for short-lived Google Cloud credentials with explicit admission and IAM controls.

Essential — Complements federation setup with trust hardening, credential-lifetime threats, and audit controls.

Trust, least-privilege, and audit controls for external workloads

Google's security guidance for hardening federated workload trust against spoofing, privilege escalation, weak audit trails, and malicious credential configurations.

Essential — The wider Serverless Expeditions collection uses concrete examples to explain compensation, safe releases, runtime choice, and data-system decisions.

Fourteen episodes on service choice, architecture, scaling, state, security, operations, and delivery

Serverless design and operations through concrete examples: choosing a runtime, ordering events, managing relational state, undoing failed workflows, protecting secrets, and deploying changes safely. The selection also includes two AI-agent examples covering tools and database access.

Essential — Provides a broad workload-review framework connecting architecture, security, reliability, operations, and cost.

Six pillars for reviewing cloud architecture and operations

A six-pillar review framework for designing and operating secure, reliable, efficient, high-performing, cost-effective, and sustainable cloud workloads.

Essential — Explains organization-wide controls and their implementation; adapt its large-team operating assumptions to your environment.

A Terraform-backed baseline for enterprise governance and security

Google's reference foundation for consistent resource hierarchy, identity, networking, logging, policy, secrets, keys, and threat detection at enterprise scale.

Useful — Explains real case constraints and migration boundaries; reported results are specific to the participating systems.

Ten case studies on scale, service boundaries, data platforms, machine learning, and security

Ten 2021–2023 case studies explain how teams handle global storage, concurrent requests, service boundaries, media ingestion, analytics migration, machine learning, healthcare data, and security response. Results describe the participating organizations' systems, not universal performance guarantees.

Essential — Across the Pub/Sub Best Practices collection, episodes explain acknowledgement, flow control, redelivery, and recovery trade-offs; feature limits reflect the recorded series.

Publishing, subscribing, feature, latency, client-library, and testing trade-offs

Six 2023 episodes explain Pub/Sub trade-offs in batching, retries, ordering, flow control, retention, regional placement, and testing. Recommendations reflect the client libraries and service behavior discussed in that series.

Context — Serves as a short service glossary, with less depth than the fuller introductory resources.

Twelve one-minute orientations across compute, data, operations, networking, and security

Twelve short primers introduce the roles of Google Cloud compute, storage, databases, messaging, analytics, observability, networking, and access controls. These 2020–2022 overviews help orient service choices rather than provide deployment recipes.

Context — Illustrates domain boundaries and data flows through proposed architectures and demos rather than measured production outcomes.

Five 2022 architecture snapshots for banking, commerce, edge, and social applications

Five 2022 presentations explore banking, e-commerce, restaurant-edge, and photo-sharing systems. Proposed architectures and demonstrations connect application requirements to service boundaries, data flows, and deployment choices.

Context — Offers a broad service-orientation route; its historical service comparisons are not a current deployment guide.

Eight concise orientations to compute, storage, containers, projects, delivery, logs, and errors

Eight 2020–2022 explainers introduce compute, storage, containers, Firebase projects, build tools, logging, and error reporting through the workloads each service supports.

Essential — Across the Engineering for Reliability collection, episodes connect SLOs, error budgets, logs, and observability costs; historical console steps need current documentation.

Twenty-three substantive episodes on SLOs, telemetry, alerting, investigation, and operations

Twenty-three 2021–2022 episodes connect user-facing reliability targets to metrics, logs, traces, and alerts. Examples show instrumentation, Prometheus collection, quota monitoring, GKE investigation, and observability cost controls.

Context — Collects older quickstarts with useful individual tasks, but less continuity than a structured introduction.

Twelve practical entries spanning docs, networking, storage, IAM, cost, data, workflows, and APIs

Twelve 2018–2022 introductions use small tasks to explain networking, persistent storage, access control, BigQuery queries and cost limits, object versions, sensitive-data inspection, workflow orchestration, and speech transcription.

Useful — Explains cost ownership, alerts, and commitment trade-offs; pricing and product-specific details are historical.

Eleven episodes on resource ownership, billing analysis, budgets, commitments, and GKE efficiency

Eleven 2019–2021 episodes explain who owns cloud spending, how to analyze it, and where commitments and GKE sizing can reduce waste. Budget alerts notify teams; they do not impose a spending cap.

Useful — Introduces shared responsibility, workload identity, and audit readiness through historical GCP examples.

Shared responsibility, identity, data, platform, logging, and audit foundations

Ten 2020–2021 episodes explaining how provider protections and customer controls fit together: identity, data access, hardware, service accounts, security logging, and audit trails.

Useful — Builds a coherent introductory model of message delivery and replay before the more focused best-practices series.

A ten-episode progression through topics, subscriptions, clients, endpoints, and replay

Ten 2019–2020 episodes follow a message from publication to independent subscription backlogs, delivery, acknowledgement, and replay. Examples compare push and pull consumers and connect them to serverless endpoints.

Context — Preserves investigation examples from 2019; provider configuration and console steps are historical.

Five historical walkthroughs of scanning, detection, data protection, and security posture

Five 2019 walkthroughs show how vulnerability scans, anomalous activity, sensitive-data findings, and configuration checks lead to investigation and remediation. A finding signals something to investigate, not proof of a breach.