Caching: Memorystore (Redis) and Legacy Serverless Connectors ☁ GCP 🔥 Intermediate Memorystore Redis Cloud Functions Serverless VPC Access Scenario Your serverless API is experiencing high latency querying BigQuery. You want to introduce a caching layer. You will deploy GCP’s managed…

Data Exfiltration Prevention: VPC Service Controls ☁ GCP 🔥 Advanced VPC-SC Security Perimeter Zero Trust Scenario Your organization handles highly sensitive PII data in Cloud Storage and BigQuery. You are worried that a malicious insider with `roles` could simply download…

Advanced IAM: Custom Roles and IAM Conditions ☁ GCP 🔥 Intermediate IAM Custom Roles Conditions Security Scenario The predefined `roles` role grants too much power. You want a “Bucket Manager” role that can create and delete buckets, but cannot read…

Asynchronous Execution: Cloud Tasks and Cloud Run ☁ GCP 🔥 Intermediate Cloud Tasks Cloud Run Push Queue OIDC Token Scenario Your serverless API application lets users generate reports. Report generation takes 3 minutes. If you run this synchronously, the user’s…

Secure Auth: Workload Identity Federation (Keyless APIs) ☁ GCP 🔥 Intermediate Workload Identity Security IAM GitHub Actions Scenario Your GitHub Actions CI/CD pipeline needs to deploy files to Google Cloud Storage. Previously, you would generate a JSON Service Account Key…

Data Engineering: Pub/Sub to BigQuery Streaming Pipeline ☁ GCP 🔥 Intermediate Pub/Sub BigQuery Dataflow Data Pipeline Scenario Your IoT devices publish thousands of telemetry events to a Pub/Sub topic per second. You need to stream these events directly into a…

Secrets: Google Secret Manager ☁ GCP 🟢 Beginner Secret Manager Sensitive Data IAM Scenario Your application needs to securely connect to a 3rd-party API using a token. Hardcoding credentials in code or storing them raw in Terraform state isn’t secure.…

Compute Engine: Deploying a VM with Firewall Rules ☁ GCP 🟢 Beginner Compute Engine Firewall Network Tags Scenario You are deploying a simple Nginx web server on Google Cloud Platform. You need to provision a Compute Engine virtual machine (VM)…