Associate Cloud Engineer — Architectural Takeaways

About This Edition: A clean, intermediate-level architectural guide covering all 12 Subsections and 93 Official Considerations of the Google Cloud Certified Associate Cloud Engineer curriculum, illustrated with Mermaid architecture blueprints and 186 custom-designed concept & architecture diagrams.

Chapter Plan at a Glance

Ch #
Chapter Title
Subsections
Considerations
Custom Diagrams
Core Focus
00
Overview
—
Mermaid
The Architectural Planes, plain-English guide to in-scope services, and the 10 Core Architectural Principles.
01
1.1, 1.2
16
32
Organization/Folder/Project hierarchy, Organization Policies, Cloud Identity, Billing accounts, budgets, alerts, labels, and BigQuery billing exports.
02
2.1
12
24
Compute Engine VM sizing, Spot VMs, CUDs, GKE Standard vs. Autopilot, Cloud Run services/jobs, Cloud Run functions, and Vertex AI / Agent Platform runtimes.
03
2.2, 2.3, 2.4
12
24
Cloud Storage classes, Cloud SQL/Spanner/AlloyDB/Firestore/Bigtable/BigQuery selection, VPC topologies, Load Balancers, Terraform, Config Connector, and Cloud Shell/gcloud.
04
3.1
16
32
Managed Instance Groups (MIGs), autoscaling, rolling updates, OS Patch Management, SSH/IAP troubleshooting, GKE node pools/pods, and Cloud Run traffic splitting.
05
3.2, 3.3
13
26
Object Lifecycle Management, backups/replicas, CMEK, non-disruptive subnet CIDR expansion, static/dynamic routing, Cloud DNS zones, Cloud NAT, and VPC firewall rules.
06
3.4
14
28
Ops Agent, custom metrics, alerting policies, Uptime checks, Cloud Logging sinks (BigQuery, Storage, Pub/Sub), Cloud Audit Logs, Cloud Trace, and Cloud Hub.
07
4.1, 4.2
10
20
IAM policy inheritance, predefined vs. custom roles, IAM Conditions, Service Account impersonation (--impersonate-service-account), short-lived tokens, and Workload Identity Federation.
08
All Sections
—
—
Side-by-side Look-Alike Tool Comparison Matrix, 5-Step Architecture Decision Checklist, and Top 25 Golden Rules.

Detailed Table of Contents

Chapter 0: The ACE Reference Stack & 10 Core Principles

  • 0.1 The Master Architectural Map: All In-Scope Services of the ACE Stack
  • 0.2 The 10 Core Architectural Principles

Chapter 1: Cloud Projects, Organization Hierarchy, Cloud Identity & Billing Governance

Chapter 2: Planning & Implementing Compute Engine, GKE, Serverless & AI Runtimes

Chapter 3: Planning Storage, Databases, VPC Networking & Infrastructure as Code Tooling

Chapter 4: Operating & Scaling Compute Engine, MIGs, GKE Workloads & Cloud Run

Chapter 5: Operating Cloud Storage Lifecycles, Database Fleets, Subnets, DNS & Firewalls

Chapter 6: Cloud Observability: Monitoring, Logging Pipelines, Audit Logs & Diagnostics

Chapter 7: Access & Security Governance: IAM Hierarchy, Custom Roles, Service Accounts & WIF

Chapter 8: Master Look-Alike Tool Comparison & Decision Playbook

  • 8.1 The Master Look-Alike Tool Comparison Matrix
  • 8.2 The 5-Step Architecture Decision Checklist
  • 8.3 Top 25 Golden Rules for Final Review

Generating the Custom Illustrations (ace-image-prompts.json)

All 186 custom image prompts and output filenames for this book are stored in ace-image-prompts.json (and mirrored in openai-image-gen/out/9002-openai-prompts-ace-book.json). To generate the illustrations using openai-image-gen/images-from-prompts.py, run:

cd openai-image-gen
uv run images-from-prompts.py -file ../books/ace-architecture-takeaways/ace-image-prompts.json -simple -quality medium

AwesomeGCP.com Learning

The approach taken is a question-led learning approach: you explore realistic project scenarios where you need to make decisions or take actions to achieve business goals within specific constraints. Instead of passive learning, you are challenged to think and work through the options to master the Associate Cloud Engineer (ACE) certification!

Practice ACE Questions