Google Cloud Engineer (covers Associate, Data Engineer, Professional)
Section 0. Basics of Cloud
0.1 What is Cloud?
0.2 Why Cloud
0.3 DevOps Concepts
0.4 Agile
Section 1. Setting up a Google cloud solution environment
1.1 Setting up cloud projects and accounts. Activities include:
Creating projects
Assigning users to predefined IAM roles within a project
Managing users in Cloud Identity
Enabling APIs within projects
Configuring a metrics scope
1.2 Managing billing configuration. Activities include:
Creating one or more billing accounts
Linking projects to a billing account
Establishing billing budgets and alerts
Setting up billing exports to estimate daily/monthly charges
1.3 Installing and configuring the command line interface (CLI), specifically the
Cloud SDK (e.g., setting the default project).
Section 2. Planning and configuring a cloud solution
2.1 Planning and estimating Google Cloud product use using the Pricing Calculator
2.2 Planning and configuring compute resources. Considerations include:
Selecting appropriate compute choices for a given workload (e.g., Compute Engine,
Google Kubernetes Engine, App Engine, Cloud Run, Cloud Functions)
Using preemptible VMs and custom machine types as appropriate
2.3 Planning and configuring data storage options. Considerations include:
Product choice (e.g., Cloud SQL, BigQuery, Cloud Spanner, Cloud Bigtable)
Choosing storage options (e.g., Standard, Nearline, Coldline, Archive)
2.4 Planning and configuring network resources. Tasks include:
Differentiating load balancing options
Identifying resource locations in a network for availability
Configuring Cloud DNS
Section 3. Deploying and implementing a cloud solution
3.1 Deploying and implementing Compute Engine resources. Tasks include:
Launching a compute instance using Cloud Console and Cloud SDK (gcloud) (e.g.,
assign disks, availability policy, SSH keys)
Creating an autoscaled managed instance group using an instance template
Generating/uploading a custom SSH key for instances
Configuring a VM for Cloud Monitoring and Cloud Logging
Assessing compute quotas and requesting increases
Installing the Ops Agent for monitoring and logging
3.2 Deploying and implementing Google Kubernetes Engine resources. Tasks include:
Deploying a Google Kubernetes Engine cluster
Deploying a container application to Google Kubernetes Engine using pods
Configuring Google Kubernetes Engine application monitoring and logging
3.3 Deploying and implementing App Engine, Cloud Run, and Cloud Functions resources.
Tasks include, where applicable:
Deploying an application, updating scaling configuration, versions, and traffic
splitting
Deploying an application that receives Google Cloud events (e.g., Pub/Sub events,
Cloud Storage object change notification events)
3.4 Deploying and implementing data solutions. Tasks include:
Initializing data systems with products (e.g., Cloud SQL, Datastore, BigQuery, Cloud
Spanner, Pub/Sub, Cloud Bigtable, Dataproc, Dataflow, Cloud Storage)
Loading data (e.g., command line upload, API transfer, import/export, load data from
Cloud Storage, streaming data to Pub/Sub)
3.5 Deploying and implementing networking resources. Tasks include:
Creating a VPC with subnets (e.g., custom-mode VPC, shared VPC)
Launching a Compute Engine instance with custom network configuration (e.g.,
internal-only IP address, Google private access, static external and private IP
address, network tags)
Creating ingress and egress firewall rules for a VPC (e.g., IP subnets, tags,
service accounts)
Creating a VPN between a Google VPC and an external network using Cloud VPN
Creating a load balancer to distribute application network traffic to an application
(e.g., Global HTTP(S) load balancer, Global SSL Proxy load balancer, Global TCP
Proxy load balancer, regional network load balancer, regional internal load
balancer)
3.6 Using Google Cloud Marketplace. Tasks include:
Browsing Cloud Marketplace catalog and viewing solution details
3.7 Using Cloud Deployment Manager. Tasks include:
Deployment Manager templates
Section 4. Ensuring successful operation of a cloud solution
4.1 Managing Compute Engine resources. Tasks include:
Managing a single VM instance (e.g., start, stop, edit configuration, or delete an
instance)
SSH to the instance
Viewing current running VM inventory (instance IDs, details)
Working with snapshots, images
Working with instance groups (e.g., set autoscaling parameters, assign instance
template, create an instance template, remove instance group)
Working with management interfaces (e.g., Cloud Console, Cloud Shell, GCloud SDK)
4.2 Managing Google Kubernetes Engine resources. Tasks include:
Viewing current running cluster inventory (nodes, pods, services)
Browsing the container image repository and viewing container image details
Working with node pools (e.g., add, edit, or remove a node pool)
Working with pods (e.g., add, edit, or remove pods)
Working with services (e.g., add, edit, or remove a service)
Working with stateful applications (e.g. persistent volumes, stateful sets)
Working with management interfaces (e.g., Cloud Console, Cloud Shell, Cloud SDK)
4.3 Managing App Engine and Cloud Run resources. Tasks include:
Adjusting application traffic-splitting parameters
Setting scaling parameters for autoscaling instances
Working with management interfaces (e.g., Cloud Console, Cloud Shell, Cloud SDK)
4.4 Managing data engineering solutions. Tasks include:
Moving objects between Cloud Storage buckets
Converting Cloud Storage buckets between storage classes
Setting object life cycle management policies for Cloud Storage buckets
Executing queries to retrieve data from data instances (e.g., Cloud SQL, BigQuery,
Cloud Spanner, Datastore, Cloud Bigtable)
Estimating costs of a BigQuery query
Backing up and restoring data instances (e.g., Cloud SQL, Datastore)
Reviewing job status in Dataproc, Dataflow, or BigQuery
Working with management interfaces (e.g., Cloud Console, Cloud Shell, Cloud SDK)
4.5 Managing networking resources. Tasks include:
Adding a subnet to an existing VPC
Expanding a subnet to have more IP addresses
Reserving static external or internal IP addresses
Working with management interfaces (e.g., Cloud Console, Cloud Shell, Cloud SDK)
4.6 Monitoring and logging. Tasks include:
Creating alerts based on resource metrics
Creating custom metrics
Configuring log sinks to export logs to external systems (e.g., BigQuery)
Viewing and filtering logs in Cloud Logging
Viewing specific log message details in Cloud Logging
Using cloud diagnostics to research an application issue (e.g., viewing Cloud Trace
data, using Cloud Debug to view an application point-in-time)
Viewing Google Cloud status
Working with management interfaces (e.g., Cloud Console, Cloud Shell, Cloud SDK)
Section 5. Configuring access and security
5.1 Managing identity and access management (IAM).
5.2 Managing service accounts. Tasks include:
Managing service accounts with limited privileges
Assigning a service account to VM instances
Granting access to a service account in another project
5.3 Google cloud federated security
5.4 Viewing audit logs for project and managed services.
