Ultimate Google Certified Professional Cloud Developer 2025

Explore cloud APIs in the cloud console using the API Explorer sandbox to test compute engine actions like instance list and instance create, with project and zone details.

Learn how a native cloud mobile app enables production alerts, incident management, dashboards, logs, and billing insights while starting or stopping compute engine, app engine, and storage operations.

Set up cloud projects and accounts in Google Cloud Platform by configuring project basics, linking organizations and billing, enabling APIs, and managing quotas and resources.

Install and configure Google Cloud tools in Eclipse, including the Eclipse plugin and App Engine components, then create an App Engine project to run locally and deploy to Google Cloud.

Learn to configure IntelliJ with the Google App Engine plugin, set the App Engine and Cloud SDKs, and create projects from App Engine archetypes like guest book and opinion skeleton.

Learn to automate Google Cloud infrastructure with Deployment Manager using configuration files and templates to provision compute, database, storage, and networking resources.

Store docker images securely in Google Cloud Platform's container registry, build and deploy automatically, and use automatic scanning with private or public visibility.

Discover how Cloud Build automates building and deploying code from GitHub or Cloud Source Repositories, producing Docker images or jars and deploying to App Engine, Cloud Run, or Compute Engine.

Learn to set up cloud build triggers that monitor repositories, connect external or internal repos, choose branches or tags, and deploy via Cloud Build to Docker containers on Cloud Run.

Follow a simple cloud build demo that builds a container from a Dockerfile, pushes to the container registry, and deploys to Cloud Run, with troubleshooting and region considerations.

demonstrates a cloud build, continuous deployment pipeline: push code to a source repository, trigger a build, create and push a container to a registry, and deploy to cloud run.

Explore how Google Cloud API management unifies Apogee and cloud endpoints to expose internal and external APIs. Apply API discovery, contract definitions, security, analytics, and monetization across producers and consumers.

Design scalable, available, and reliable cloud-native apps on Google Cloud Platform. Secure applications, manage data across multiple storage options, and orchestrate distributed architectures across zones.

Explore portability and platform-specific design across dev, test, non-prod, and prod environments. Learn to minimize dependencies with configuration files and containers, and choose compute engine and App Engine for deployment.

Explore how Google Cloud Platform uses regions, zones, and a private fiber network to deploy apps near users, reducing latency with the nearest point of presence and intelligent load balancing.

Explore breaking a monolith into independently deployable microservices, enabling scalable, maintainable apps, with API gateways and polyglot persistence guiding database choices.

Design microservices behind an API proxy to protect backend resources with cloud endpoint, while enabling analytics, logging, monetization, and access control across endpoints.

Design performant microservice APIs by filtering payloads to required attributes, leveraging GraphQL over REST, and optimizing API management for reduced network load.

Learn how primary keys and index keys work in Cloud Spanner and other Google Cloud databases, and preview data storage concepts to be explored in upcoming lectures.

Design and implement session persistence to keep user state across login sessions. Choose from data store, Bigtable, or memory cache to meet your app’s persistence needs.

Design loosely coupled apps with cloud pub/sub, a managed messaging service that auto scales publishers and subscribers and routes messages to consumers and analytical targets.

Explore Google's enterprise design best practices for building performant cloud apps, covering identity and access management, networking, VPC and firewall rules, audit logs, and leveraging Google-provided sample code and docs.

Cloud Spanner provides a globally scalable relational database with schema and sql support, strong consistency, five nines availability, auto scaling, and interleaved tables across zones for high availability.

Cloud SQL on Google Cloud provides fully managed, highly available MySQL, PostgreSQL, and SQL Server databases. It supports backups, replication, read replicas, point-in-time recovery, automatic storage increases, and scalable performance.

Alloydb is a PostgreSQL-like database by Google Cloud that enables horizontal scale and OLTP/OLAP workloads, with separate compute and storage backed by Colossus and auto-managed performance.

Learn how Cloud Bigtable delivers low-latency, high-throughput NoSQL storage with native time-series support, autoscaling, and seamless HBase migration for real-time analytics and IoT workloads.

Explore cloud datastore, a managed, horizontally scalable store for hierarchical and key-value data, mapping to entities with properties and keys, and understanding strong and eventual consistency.

Explore how BigQuery handles batch and streaming data from sources like logs and billing, enabling analytics and reports, while learning cost controls, slots, partitioning, clustering, and query best practices.

Explore cloud database options for web, mobile, and game apps, including global stores like Cloud Spanner and Cloud Bigtable, analytics with BigQuery, and cloud storage for object data.

Learn cloud storage basics in Google Cloud, including buckets, objects, storage classes, durability, availability, access controls via IAM and ACL, signed URLs, and notifications with Pub/Sub or Cloud Functions.

Explore creating and configuring cloud storage buckets, applying fine-grained access controls, versioning, encryption, and retention policies, then upload objects and review observability, DLP, and data transfer options.

Analyze structured data in relational databases versus unstructured data like images and videos, and examine consistency, isolation, and durability in transactions, plus OLTP vs OLAP and cloud storage implications.

Design scalable data ingestion for streaming and batch data using Cloud Pub/Sub and Dataflow, delivering to backend sinks via cloud storage transfer options.

Set up your development environment, install Google Cloud libraries, and build and test applications with a continuous integration pipeline, covering testing, monitoring, and logging.

Configure budgets and alerts for projects, create and manage service accounts with IAM permissions, and understand quotas. Use gcloud, CLI, and API tools to deploy and control resources.

Explore compute engine basics, including vm instances, instance templates, disks, and images. Learn managed instance groups, health checks, migrations, reservations, and committed use discounts.

Learn to create a Compute Engine virtual machine from scratch or templates, configuring machine type, boot disk, network, service account, and security options, including spot and sole tenancy.

Explore deploying applications on Google Compute Engine by launching and managing a Linux virtual machine, configuring boot disks, networking, firewall rules, service accounts, and observability.

Explore compute engine components and subsystems, including the UI, Linux/Windows connections, disks and snapshots, container VM, IAM keys, access scopes, sole tenancy, confidential/shielded VMs, templates, autoscaling, and load balancer demos.

Explore Compute Engine machine types, from standard general purpose generations (n1, n2, n2d, e2, c3) to custom configurations, with per cpu memory, vcpus, and gpu considerations.

Container optimized OS in GCP runs containers out of the box with pre-installed docker runtime and cloud init, locked down by default with reduced attack surface and automatic weekly updates.

Learn how labels identify cloud resources and how tags attach firewall rules to Compute Engine instances within a VPC, using subnet- and tag-based firewalls to manage SSH and HTTPS access.

Learn how startup scripts on Google Cloud Compute Engine install binaries, update packages, and launch apps at boot, with inline, file-based, or cloud storage methods.

Learn to create instance templates defining machine type, image, startup script, and metadata for managed instance groups, and compare with unmanaged groups, autoscaling, and load balancer basics.

Explore shielded VM and confidential computing in Google Cloud, using secure boot, integrity monitoring, and Titan chip with TPM to protect data in use on AMD EPYC processors.

Explore how Google load balancers achieve high availability and auto scaling by routing DNS requests to healthy backend services. Distinguish external versus internal load balancers and SSL proxy options.

Explore configuring a global external load balancer for Compute Engine, including session affinity, client IP or cookies, web socket support, health checks, and instance groups with auto scaling.

Delete the load balancer first, then delete the instance group and all associated instances. Troubleshoot startup scripts and variable calls, and verify access with a strict external IP.

Explore how to configure a global SSL proxy load balancer for Compute Engine, including SSL termination, internal versus external load balancing, health checks, and instance group integration.

Launch a standard Kubernetes engine cluster with zonal or regional deployment, configure node pools and version, enable autoscaler, and review upgrade strategies including blue-green upgrade while deploying nginx workload.

Launch an autopilot cluster, explore its managed networking and services, deploy an nginx app, scale deployments, and retrieve credentials to manage pods and workloads.

Apply and identify Kubernetes objects using key-value labels and equality or set-based selectors, enabling targeted pod and node selection with kubectl queries and node selectors.

Explore how Kubernetes namespaces isolate objects within a cluster, enforce resource quotas and RBAC, and manage YAML-defined objects like pods, deployments, and services.

Understand the Kubernetes application lifecycle, including pod priority, preemption, and disruption budgets, and use rolling updates, recreate, blue-green, canary, plus autoscaling and node pools.

Learn how rolling updates manage deployment changes in Kubernetes Engine, update container images, monitor rollout history and events, and roll back to a specific revision.

Explore how Kubernetes services expose backend pods to clients, detailing cluster IP, node port, load balancer, and headless service, with selectors, target ports, and DNS addressing.

Ingress exposes http and https routes from outside the cluster to internal services. An ingress controller handles request forwarding and routing to backend pods via routing rules.

Learn how Kubernetes engine enables cloud logging and monitoring to capture standard out and standard error from containerized apps via the node agent and log router.

deploy your code to App Engine's zero-operations platform, choose flexible or standard environments, and manage traffic with versioned deployments and an internal load balancer.

Explore Google cloud storage and database services, including Cloud Spanner, Big Table, Data Store, and Mongo DB, plus data tools like Data Flow and Data Proc, and Cloud Pub/Sub messaging.

Learn to create and configure Cloud SQL data storage resources, including instance setup, region and zone selection, backups, high availability, machine and disk types, replicas, and connection endpoints.

Learn to create a BigQuery dataset and tables, run queries, view results and job details, and understand planning and deploying Cloud Spanner.

Launch a Cloud Spanner instance, selecting regional or multi regional hosting, and create tables with columns and primary or composite keys.

Create and manage a cloud storage bucket, assign per-object storage classes, and configure retention and lifecycle policies to move data between classes while controlling permissions and metadata.

Create and manage a Pub/Sub topic and subscription, publish and pull messages, and configure snapshots and bucket notification events for real-time messaging.

Explore cloud networking fundamentals with Google Cloud Platform, including VPC, load balancers, firewalls, DNS, interconnects, VPN, and global private networks, plus subnetting and IP ranges.

Deploy subnetworks as region-specific segments of a global VPC to isolate resources, enable internal IP communication, and enforce firewall and routing rules.

Explore how routes direct traffic between instances inside a VPC and to the internet, and how firewall rules enforce ingress and egress controls with network tags.

Discover how Google Cloud assigns internal and external IP addresses to virtual machines, including static versus dynamic IPs, subnet and region considerations, and DNS resolution.

Explore shared vpc concepts where a host project provides the network for service projects, and learn vpc pairing, quotas, bastion host, nat gateway, flow logs, and tier options.

Launch and manage cloud resources with Google Cloud Deployment Manager by writing configuration files and templates to automate deployments. Explore templates, imports, and marketplace deployments to provision resources.

Learn how to create and manage service accounts for VM instances and apps, assign fine-grained access with read and write roles, and apply permissions using gcloud.

Explore integrating Google Cloud Platform services with applications, focusing on data and storage options, persistent storage, relational databases and file storage, along with compute services and cloud APIs.

Explore Stackdriver applications across multi-cloud environments, configuring monitoring, logging, latency monitoring, and error reporting with dashboards, log search, and tracing to detect issues and improve response times.

Manage logs with Stackdriver logging, enabling alerting, log-based metrics, and custom logs. Export logs to cloud storage, BigQuery, or Pub/Sub, set retention, and build dashboards for audit and access-control insights.

Learn to view application performance metrics with Stackdriver Debug, install the debug agent, and enable in-production debugging using log points to diagnose issues without stopping the app.

Master cloud identity and access management in Google Cloud Platform, detailing fine-grained access controls and service accounts for secure cloud environments.

Explore cloud identity and access management on Google Cloud Platform, focusing on fine-grained access controls, service accounts, and essential concepts for security engineers.

Explore cloud iam roles to aggregate and grant permissions via primitive, predefined, and custom roles, attach roles to users, and tailor access with combined permissions for precise control.

Explore how IAM policies define access controls at the resource level, using bindings and conditional IAM conditions to grant or restrict access.

Understand how service accounts authenticate service-to-service calls in Google Cloud, replacing user credentials and enforcing least privilege. Compare Google managed and user managed service accounts, learn about keys and impersonation.

Learn how service account key rotation reduces risk when keys are leaked, using push and pull models for rotating keys and the required IAM permissions.

Explore short-lived service account credentials and impersonation to securely access cloud resources, generating tokens (ID tokens, JWTs) via OAuth2 and OpenID Connect, with role-based access, auditing, and key rotation.

Define organization-wide constraints on service accounts and keys, including disabling creation during sensitive periods. Audit IAM configurations, remove unnecessary keys, and monitor impersonation using policy intelligence.

Learn to implement cloud IAP as a centralized, identity-based access layer that enforces fine-grained policies, authenticates users, and extends access control to on-prem resources using context and device checks.

Explore network endpoint groups and private connectivity via private service connect. See Traffic Director as a cross-cluster control plane extending service mesh with gRPC and multi-environment routing.

Secure compute engine instances by configuring iam access scopes, service accounts, and firewall rules. Use sole tenancy, organization policies, and shielded vm and confidential computing to strengthen security.

Secure the Kubernetes engine by hardening the control plane and nodes, and implement least-privilege service accounts, workload identity, pod security policies, and continuous security posture scanning.

Explore shielded virtual machines in Google Cloud, detailing confidential computing, boot integrity with TPM Titan chip, secure boot, measured boot, and integrity policy baselines to prevent rootkits and secret exfiltration.

Detect sensitive information across cloud storage, BigQuery, and Firestore, and redact or tokenize it using de-identification, with automatic discovery and custom detectors.

Store and manage credentials securely with Secrets Manager, enabling versioning, encryption, and IAM integration. Learn its role-based access, audit logging, and hierarchical control across projects, folders, and organizations.