Ultimate Google Certified Professional Cloud Developer 2025

Install and configure Google Cloud tools in Eclipse, including the Eclipse plugin and App Engine components, then create an App Engine project to run locally and deploy to Google Cloud.

Follow a simple cloud build demo that builds a container from a Dockerfile, pushes to the container registry, and deploys to Cloud Run, with troubleshooting and region considerations.

demonstrates a cloud build, continuous deployment pipeline: push code to a source repository, trigger a build, create and push a container to a registry, and deploy to cloud run.

Explore how Google Cloud API management unifies Apogee and cloud endpoints to expose internal and external APIs. Apply API discovery, contract definitions, security, analytics, and monetization across producers and consumers.

Explore portability and platform-specific design across dev, test, non-prod, and prod environments. Learn to minimize dependencies with configuration files and containers, and choose compute engine and App Engine for deployment.

Explore how Google Cloud Platform uses regions, zones, and a private fiber network to deploy apps near users, reducing latency with the nearest point of presence and intelligent load balancing.

Design microservices behind an API proxy to protect backend resources with cloud endpoint, while enabling analytics, logging, monetization, and access control across endpoints.

Cloud Spanner provides a globally scalable relational database with schema and sql support, strong consistency, five nines availability, auto scaling, and interleaved tables across zones for high availability.

Alloydb is a PostgreSQL-like database by Google Cloud that enables horizontal scale and OLTP/OLAP workloads, with separate compute and storage backed by Colossus and auto-managed performance.

Explore cloud datastore, a managed, horizontally scalable store for hierarchical and key-value data, mapping to entities with properties and keys, and understanding strong and eventual consistency.

Learn cloud storage basics in Google Cloud, including buckets, objects, storage classes, durability, availability, access controls via IAM and ACL, signed URLs, and notifications with Pub/Sub or Cloud Functions.

Set up your development environment, install Google Cloud libraries, and build and test applications with a continuous integration pipeline, covering testing, monitoring, and logging.

Configure budgets and alerts for projects, create and manage service accounts with IAM permissions, and understand quotas. Use gcloud, CLI, and API tools to deploy and control resources.

Explore compute engine basics, including vm instances, instance templates, disks, and images. Learn managed instance groups, health checks, migrations, reservations, and committed use discounts.

Explore deploying applications on Google Compute Engine by launching and managing a Linux virtual machine, configuring boot disks, networking, firewall rules, service accounts, and observability.

Container optimized OS in GCP runs containers out of the box with pre-installed docker runtime and cloud init, locked down by default with reduced attack surface and automatic weekly updates.

Learn how labels identify cloud resources and how tags attach firewall rules to Compute Engine instances within a VPC, using subnet- and tag-based firewalls to manage SSH and HTTPS access.

Learn how startup scripts on Google Cloud Compute Engine install binaries, update packages, and launch apps at boot, with inline, file-based, or cloud storage methods.

Explore shielded VM and confidential computing in Google Cloud, using secure boot, integrity monitoring, and Titan chip with TPM to protect data in use on AMD EPYC processors.

Explore configuring a global external load balancer for Compute Engine, including session affinity, client IP or cookies, web socket support, health checks, and instance groups with auto scaling.

Launch an autopilot cluster, explore its managed networking and services, deploy an nginx app, scale deployments, and retrieve credentials to manage pods and workloads.

Apply and identify Kubernetes objects using key-value labels and equality or set-based selectors, enabling targeted pod and node selection with kubectl queries and node selectors.

Explore how Kubernetes namespaces isolate objects within a cluster, enforce resource quotas and RBAC, and manage YAML-defined objects like pods, deployments, and services.

Understand the Kubernetes application lifecycle, including pod priority, preemption, and disruption budgets, and use rolling updates, recreate, blue-green, canary, plus autoscaling and node pools.

Learn how rolling updates manage deployment changes in Kubernetes Engine, update container images, monitor rollout history and events, and roll back to a specific revision.

Explore how Kubernetes services expose backend pods to clients, detailing cluster IP, node port, load balancer, and headless service, with selectors, target ports, and DNS addressing.

Ingress exposes http and https routes from outside the cluster to internal services. An ingress controller handles request forwarding and routing to backend pods via routing rules.

Learn how Kubernetes engine enables cloud logging and monitoring to capture standard out and standard error from containerized apps via the node agent and log router.

deploy your code to App Engine's zero-operations platform, choose flexible or standard environments, and manage traffic with versioned deployments and an internal load balancer.

Learn to create and configure Cloud SQL data storage resources, including instance setup, region and zone selection, backups, high availability, machine and disk types, replicas, and connection endpoints.

Learn to create a BigQuery dataset and tables, run queries, view results and job details, and understand planning and deploying Cloud Spanner.

Launch a Cloud Spanner instance, selecting regional or multi regional hosting, and create tables with columns and primary or composite keys.

Create and manage a cloud storage bucket, assign per-object storage classes, and configure retention and lifecycle policies to move data between classes while controlling permissions and metadata.

Deploy subnetworks as region-specific segments of a global VPC to isolate resources, enable internal IP communication, and enforce firewall and routing rules.

Explore how routes direct traffic between instances inside a VPC and to the internet, and how firewall rules enforce ingress and egress controls with network tags.

Learn how to create and manage service accounts for VM instances and apps, assign fine-grained access with read and write roles, and apply permissions using gcloud.

Explore integrating Google Cloud Platform services with applications, focusing on data and storage options, persistent storage, relational databases and file storage, along with compute services and cloud APIs.

Explore Stackdriver applications across multi-cloud environments, configuring monitoring, logging, latency monitoring, and error reporting with dashboards, log search, and tracing to detect issues and improve response times.

Learn to view application performance metrics with Stackdriver Debug, install the debug agent, and enable in-production debugging using log points to diagnose issues without stopping the app.

Master cloud identity and access management in Google Cloud Platform, detailing fine-grained access controls and service accounts for secure cloud environments.

Learn how service account key rotation reduces risk when keys are leaked, using push and pull models for rotating keys and the required IAM permissions.

Explore short-lived service account credentials and impersonation to securely access cloud resources, generating tokens (ID tokens, JWTs) via OAuth2 and OpenID Connect, with role-based access, auditing, and key rotation.

Define organization-wide constraints on service accounts and keys, including disabling creation during sensitive periods. Audit IAM configurations, remove unnecessary keys, and monitor impersonation using policy intelligence.

Secure the Kubernetes engine by hardening the control plane and nodes, and implement least-privilege service accounts, workload identity, pod security policies, and continuous security posture scanning.

Detect sensitive information across cloud storage, BigQuery, and Firestore, and redact or tokenize it using de-identification, with automatic discovery and custom detectors.

Store and manage credentials securely with Secrets Manager, enabling versioning, encryption, and IAM integration. Learn its role-based access, audit logging, and hierarchical control across projects, folders, and organizations.