Google Cloud Fundamentals
Google Cloud is a cloud computing platform that provides on-demand compute, storage, networking, data, security, and managed application services. You use its projects, APIs, and global infrastructure to build and operate workloads without owning the underlying data centers.
itCloud computing | OpenSkills.info
Course pathWalk it in order
Look it upDip in anytime
Go furtherLeaves this page
Don't Panic
Don't Panic: Google Cloud Fundamentals
Google Cloud is a collection of services for running applications, storing data, connecting systems, analyzing information, controlling access, and observing workloads. The name sounds like a single machine with a very large lobby. It is instead a platform whose useful unit of organization is the project.
A project holds resources, settings, permissions, metadata, and its link to a billing account. It is the working boundary that stops a workload, team, or environment becoming an accidental communal cupboard. Above it, an organization and optional folders provide governance. Below it, enabled services expose APIs and create resources. This chain matters more than memorizing a catalogue that changes while you are looking at it.
Every request has an identity behind it. Authentication establishes the principal. IAM then decides which role permits that principal to act on which resource. A broad role high in the resource hierarchy can reach many descendants, which is why the narrowest useful role is less a slogan than a way to avoid a surprise with excellent paperwork.
Location has its own opinions. Some resources are global, some regional, and some zonal. That scope affects compatibility, latency, failure behavior, and recovery. A second zone or region is not magic redundancy: the application and data need independent capacity and a plan for the failure they are meant to tolerate.
Managed services change the work split. Google protects the cloud infrastructure. You still own data, identities, access choices, configuration, and application behavior. Billing and operations join that same chain. Budgets notify rather than cap spending; metrics show behavior; audit logs help show who changed what. Clouds are very good at being literal.
Read the intro for the full operating chain and shared-responsibility model. Use the slides for the project, service, identity, location, operations, and billing sequence. Keep the cheatsheet nearby when choosing a scope, role, service family, or first operational signal. The quiz checks whether the map has stuck before the individual products begin demanding their own vocabulary.
Where this skill leads
Relevant careers
See how this topic contributes to broader role-level skill maps.
Sources
- https://docs.cloud.google.com/docs/overview
Supports
- Google Cloud provides services that applications combine into infrastructure and managed capabilities
- Projects contain resources, settings, permissions, and metadata and are associated with billing accounts
- Projects have a name, project ID, and Google-assigned project number
- Google Cloud exposes console, CLI, client library, and API interfaces
- Regions contain zones and resources can have global, regional, or zonal scope
- https://cloud.google.com/products
Supports
- Google Cloud groups products across compute, storage, databases, analytics, networking, security, developer tools, operations, and artificial intelligence
- Compute Engine, Google Kubernetes Engine, Cloud Run, Cloud Storage, Cloud SQL, and BigQuery represent different service families
- https://docs.cloud.google.com/docs/geography-and-regions
Supports
- Regions are independent geographic areas containing zones, and a zone is a deployment area and failure domain within a region
- Applications can be distributed across zones to tolerate a zonal failure
- Location choice affects latency, availability, durability, data handling, and disaster recovery
- Services and resources can be zonal, regional, or managed across multiple regions
- https://docs.cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy
Supports
- The hierarchy uses organization, optional folders, projects, and service resources
- Each resource except the hierarchy root has one parent
- Access and organization policies can inherit through the hierarchy
- Projects are fundamental organizing entities for service resources
- https://docs.cloud.google.com/service-usage/docs/overview
Supports
- Service Usage lists and manages APIs and services for projects
- Most Google APIs must be enabled in a project before use
- Services can be managed through the console, Google Cloud CLI, or API
- https://docs.cloud.google.com/service-usage/docs/enabled-service
Supports
- Enabling a service associates it with the project and can enable billing
- Using a service requires a project, an enabled API, and authentication credentials
- Service enablement and IAM authorization are separate controls
- https://docs.cloud.google.com/iam/docs/overview
Supports
- IAM controls who can do what on which resources
- Principals receive roles containing permissions on resources through allow policies
- Container resource policies can be inherited by descendants
- https://docs.cloud.google.com/docs/authentication
Supports
- Authentication establishes identity and authorization determines allowed access
- Service accounts represent workloads rather than people
- Attaching a user-managed service account is recommended for production code running on Google Cloud where supported
- Application Default Credentials lets libraries discover credentials from the environment
- Service account keys create security and lifecycle risk
- https://docs.cloud.google.com/billing/docs/concepts
Supports
- Cloud Billing tracks, explains, pays, and helps optimize Google Cloud spending
- Billing tools include reports, forecasts, anomalies, budgets, and optimization views
- https://docs.cloud.google.com/billing/docs/how-to/budgets
Supports
- Budgets compare actual or forecasted cost with a configured amount
- Threshold rules trigger notifications
- A budget does not automatically cap usage or spending
- https://docs.cloud.google.com/monitoring/docs/monitoring-overview
Supports
- Cloud Monitoring provides metrics, dashboards, alerting, uptime checks, and synthetic monitoring
- Monitoring helps expose application and service health, behavior, and performance
- https://docs.cloud.google.com/logging/docs/audit
Supports
- Cloud Audit Logs helps answer who did what, where, and when
- Audit log types include Admin Activity, Data Access, System Event, and Policy Denied
- Admin Activity logs are always written
- Data Access logs other than BigQuery are generally disabled by default
- https://docs.cloud.google.com/docs/security/overview/whitepaper
Supports
- Google protects the underlying cloud infrastructure
- Customers remain responsible for their data and for responsibilities that follow from service configuration and use
- The responsibility boundary varies across infrastructure, platform, and software service models
- https://docs.cloud.google.com/architecture/framework
Supports
- The framework addresses operational excellence, security, reliability, cost, performance, and sustainability
- The framework applies to cloud-native, migrated, hybrid, and multicloud workloads
- Managed services can reduce operational complexity
- https://docs.cloud.google.com/shell/docs
Supports
- Cloud Shell provides a browser-based shell with the Google Cloud CLI and common tools installed
- Cloud Shell provides authenticated access for interactive work
- https://cloud.google.com/blog/products/gcp/reflecting-on-our-ten-year-app-engine-journey/
Supports
- Google announced App Engine in 2008 as an early managed application platform.
- https://gsuite-developers.googleblog.com/2010/05/google-storage-service-for-developers.html
Supports
- Google introduced a preview of Google Storage for Developers in May 2010.
- https://cloud.googleblog.com/2012/05/google-bigquery-brings-big-data.html
Supports
- Google made BigQuery publicly available in May 2012 after a limited preview.
- https://cloudplatform.googleblog.com/2012/06/google-compute-engine-launches.html
Supports
- Google announced Compute Engine in limited preview in June 2012 as a general-purpose virtual machine service.
- https://cloud.google.com/blog/products/containers-kubernetes/building-the-future-with-google-kubernetes-engine
Supports
- Google co-founded the Cloud Native Computing Foundation in 2015 as a vendor-neutral home for Kubernetes.
- https://cloud.google.com/blog/topics/inside-google-cloud/introducing-google-cloud
Supports
- Google introduced the Google Cloud portfolio in September 2016, including Google Cloud Platform, machine learning tools, APIs, and other services.
- https://cloud.google.com/blog/products/gcp/google-cloud-functions-a-serverless-environment-to-build-and-connect-cloud-services_13
Supports
- Google announced the public beta of Cloud Functions in March 2017.
- https://cloud.google.com/blog/topics/hybrid-cloud/new-platform-for-managing-applications-in-todays-multi-cloud-world
Supports
- Google introduced Anthos in April 2019 as a platform for managing applications across environments.
- https://cloud.google.com/blog/products/ai-machine-learning/google-cloud-launches-vertex-ai-unified-platform-for-mlops
Supports
- Google announced the general availability of Vertex AI in May 2021.
