Cloud / GCP

A sixteen-activity learning path for Google Cloud networking

A practical learning path spanning Google Cloud networking fundamentals, routing, load balancing, security, architecture, hybrid connectivity, observability, GKE, and skill-badge labs.

Keyless authentication from external CI/CD systems to Google Cloud

A practical guide to exchanging deployment-platform OIDC tokens for short-lived Google Cloud credentials with explicit admission and IAM controls.

Trust, least-privilege, and audit controls for external workloads

Google's security guidance for hardening federated workload trust against spoofing, privilege escalation, weak audit trails, and malicious credential configurations.

Fourteen episodes on service choice, architecture, scaling, state, security, operations, and delivery

A reviewed selection from Serverless Expeditions that moves from Cloud Run and functions through event ordering, relational state, workflow compensation, secrets, least privilege, infrastructure as code, alerting, and safe deployment. Two newer AI-agent examples form a fast-moving appendix rather than part of the stable serverless core.

Six pillars for reviewing cloud architecture and operations

A six-pillar review framework for designing and operating secure, reliable, efficient, high-performing, cost-effective, and sustainable cloud workloads.

A Terraform-backed baseline for enterprise governance and security

Google's reference foundation for consistent resource hierarchy, identity, networking, logging, policy, secrets, keys, and threat detection at enterprise scale.

Ten case studies on scale, service boundaries, data platforms, machine learning, and security

Ten reviewed architecture case studies spanning global storage, bursty concurrency, microservices, media ingestion, analytical migration, low-latency ML, regulated healthcare, and security response. The guide extracts transferable patterns while attributing organization and vendor claims and requiring current technical and domain review for its 2021–2023 examples.

Publishing, subscribing, feature, latency, client-library, and testing trade-offs

Six reviewed episodes on publishing and subscription design, delivery features, regional latency and reliability, client-library behavior, experimentation, and testing. The series provides a compact decision framework while keeping its 2023 retention, limits, API behavior, performance, and pricing claims explicitly time-bounded.

Twelve one-minute orientations across compute, data, operations, networking, and security

Twelve reviewed one-minute primers spanning Compute Engine, GKE, Cloud Run, Storage, Spanner, Pub/Sub, Dataflow, BigQuery, observability, VPC, IAM, and VPC Service Controls. They form a compact service-choice map, not implementation guidance; historical names, behavior, limits, and pricing require current documentation.

Five 2022 architecture snapshots for banking, commerce, edge, and social applications

Five reviewed architecture presentations covering Google Cloud orientation and example banking, e-commerce, restaurant-edge, and social-photo systems. The collection separates demonstrated behavior from proposed designs and treats service, partner, product, performance, and benefit claims as presenter or vendor snapshots from 2022.

Eight concise orientations to compute, storage, containers, projects, delivery, logs, and errors

Eight reviewed Google Cloud Tech explainers on cloud orientation, compute and storage choices, container platforms, Firebase and Google Cloud projects, build tools, centralized logging, and error reporting. The collection emphasizes durable service-selection concepts while marking 2020–2022 product boundaries and procedures as historical.

Twenty-three substantive episodes on SLOs, telemetry, alerting, investigation, and operations

Twenty-three reviewed episodes that connect user-centered SLIs and SLOs to metrics, logs, traces, alerting, Prometheus, OpenTelemetry, quota headroom, GKE diagnosis, and observability cost. The learning sequence excludes the non-substantive trailer and treats all 2021–2022 interfaces, schemas, defaults, and pricing as historical.

Twelve practical entries spanning docs, networking, storage, IAM, cost, data, workflows, and APIs

A reviewed twelve-item route through quickstarts, VPCs, persistent disks, IAM, IAP, BigQuery cost and data patterns, object versioning, sensitive-data handling, Workflows, and Speech-to-Text. It preserves useful concepts while directing every 2018–2022 procedure to current product documentation.

Eleven episodes on resource ownership, billing analysis, budgets, commitments, and GKE efficiency

A reviewed eleven-item FinOps route through resource hierarchy, billing permissions, reports, exports, invoices, budgets, committed use, and four concrete GKE efficiency levers. Budgets are notifications rather than hard caps, and all 2019–2021 interfaces, policy details, pricing, and autoscaling mechanics are historical.

Shared responsibility, identity, data, platform, logging, and audit foundations

Ten reviewed Google Cloud Tech episodes on shared responsibility, access and data risks, platform and hardware controls, IAM, service accounts, security logging, and audit logs. The 2020–2021 product roles, defaults, interfaces, and procedures are historical context; current Google Cloud documentation remains the authority for implementation.

A ten-episode progression through topics, subscriptions, clients, endpoints, and replay

Ten reviewed episodes that build a Pub/Sub mental model from topics and independent subscription state through publisher and subscriber behavior, push versus pull, serverless endpoints, and replay. The architectural principles remain useful, but the 2019–2020 limits, defaults, credentials, interfaces, and commands require current-documentation checks.

Five historical walkthroughs of scanning, detection, data protection, and security posture

Five reviewed 2019 walkthroughs covering Cloud Security Scanner, anomaly detection, Event Threat Detection, data-loss prevention, and Security Health Analytics. Use the collection to understand the detection and posture-management boundaries, not as current guidance for product editions, roles, detectors, interfaces, or remediation steps.