About This Edition: A clean, intermediate-level architectural guide covering all 14 Subsections and 69 Official Considerations of the Google Cloud Certified Cloud Digital Leader curriculum, illustrated with Mermaid architecture blueprints and 138 custom-designed concept & architecture diagrams.

Chapter Plan at a Glance

Detailed Table of Contents

Chapter 0: The CDL Reference Stack & 10 Core Principles

• 0.1 The Master Architectural Map: All In-Scope Services of the CDL Stack
• 0.2 The 10 Core Architectural Principles

Chapter 1: Digital Transformation Strategy, Cloud Economics (CapEx vs. OpEx) & Service Models

• Subsection 1.1: Explain why and how the cloud is revolutionizing businesses (Section 1: Digital Transformation with Google Cloud)
• Consideration 1.1a: Define the terms: cloud, agentic AI, infrastructure, digital transformation, open source, open standard (Diagrams: cdl-1.1a-1-vs-traditional-on.jpg, cdl-1.1a-2-digital-transformation-vs.jpg)
• Consideration 1.1b: Explain the benefits of cloud technology to a business' digital transformation (e.g., scalability, cost-effectiveness, agility, speed, flexibility, enhanced security, global reach and high availability, data-driven insights, strategic value and focus) (Diagrams: cdl-1.1b-1-scalability-vs-elasticity.jpg, cdl-1.1b-2-agility-speed-flexibility.jpg)
• Consideration 1.1c: Describe the primary drivers that compel organizations to pursue digital transformation and the significant challenges they face (i.e., factors that motivate organizations to transform, common hurdles that can affect transformation, implications and risks of not adopting cloud) (Diagrams: cdl-1.1c-1-primary-drivers-digital.jpg, cdl-1.1c-2-common-transformation.jpg)
• Consideration 1.1d: Recognize some of Google Cloud's top differentiators (e.g., world-leading AI, deep commitment to openness and interoperability, AI Hypercomputer, AI-ready data platform, security, global network) (Diagrams: cdl-1.1d-1-world-leading-ai-ai.jpg, cdl-1.1d-2-ai-hypercomputer-bigquery.jpg)
• Quick Decision Cheat Sheet (Subsection 1.1)
• Subsection 1.2: Describe fundamental cloud concepts (Section 1: Digital Transformation with Google Cloud)
• Consideration 1.2a: Identify the corresponding business use case and benefits of various cloud architectures (e.g., private cloud, hybrid cloud, multicloud) (Diagrams: cdl-1.2a-1-private-identify.jpg, cdl-1.2a-2-public-billing-compute.jpg)
• Consideration 1.2b: Define fundamental networking concepts and describe how Google Cloud's global network infrastructure supports digital transformation (e.g., IP address, domain name service (DNS), basic IP addresses, latency, bandwidth) (Diagrams: cdl-1.2b-1-ip-address-internal-vs.jpg, cdl-1.2b-2-domain-name-system-dns.jpg)
• Consideration 1.2c: Describe the components of Google Cloud's network and explain how they work together (e.g., regions, zones, edge locations) (Diagrams: cdl-1.2c-1-zones-fault-domains.jpg, cdl-1.2c-2-regions-geographic.jpg)
• Consideration 1.2d: Describe the benefits and tradeoffs of different cloud service models: Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) (Diagrams: cdl-1.2d-1-infrastructure-as-service.jpg, cdl-1.2d-2-platform-as-service-paas.jpg)
• Quick Decision Cheat Sheet (Subsection 1.2)

Chapter 2: Data Transformation: Warehouses, Lakes, Managed Databases, Looker BI & Streaming

• Subsection 2.1: Describe the intrinsic role that data plays in an organization's digital transformation (Section 2: Exploring Data Transformation with Google Cloud)
• Consideration 2.1a: Explain why data is valuable (e.g., generating real-time business insights, identifying trends, informing strategic decision making, fueling AI) (Diagrams: cdl-2.1a-1-hindsight-to-real-time.jpg, cdl-2.1a-2-fueling-artificial.jpg)
• Consideration 2.1b: Differentiate between databases, data warehouses, and data lakes (Diagrams: cdl-2.1b-1-operational-databases.jpg, cdl-2.1b-2-data-warehouses-olap.jpg)
• Consideration 2.1c: Recognize types of data (e.g., first-party, second-party, third-party, structured, unstructured, semi-structured) (Diagrams: cdl-2.1c-1-first-party-1p-second.jpg, cdl-2.1c-2-first-party-data-ai.jpg)
• Consideration 2.1d: Describe an organization's data supply chain (e.g., data genesis, data collection, data processing, data storage, data analysis, data activation) (Diagrams: cdl-2.1d-1-describe-an-organization.jpg, cdl-2.1d-2-pubsub-storage-dataflow.jpg)
• Consideration 2.1e: Describe the data governance process and why it's important (Diagrams: cdl-2.1e-1-data-governance-is.jpg, cdl-2.1e-2-it-is-sensitive-data.jpg)
• Consideration 2.1f: Explain why openness and interoperability with data management platforms are critical for eliminating data silos and avoiding vendor lock-in (Diagrams: cdl-2.1f-1-data-silos-are-toxic.jpg, cdl-2.1f-2-openness-interoperability.jpg)
• Quick Decision Cheat Sheet (Subsection 2.1)
• Subsection 2.2: Determine which Google Cloud data management products are applicable to different business use cases (Section 2: Exploring Data Transformation with Google Cloud)
• Consideration 2.2a: Determine which Google Cloud data management offering is best for each business use case (e.g., Cloud Storage, Spanner, Cloud SQL, AlloyDB, Bigtable, BigQuery, Firestore) (Diagrams: cdl-2.2a-1-storage-determine-which.jpg, cdl-2.2a-2-sql-storage-sql-bigquery.jpg)
• Consideration 2.2b: Define key data management concepts and terms (e.g., relational, non-relational, object storage, structured query language [SQL], NoSQL) (Diagrams: cdl-2.2b-1-relational-databases-sql.jpg, cdl-2.2b-2-non-relational-databases.jpg)
• Consideration 2.2c: Differentiate between storage classes in Cloud Storage regarding cost and frequency of access (e.g., Standard, Nearline, Coldline, Archive, Autoclass) (Diagrams: cdl-2.2c-1-standard-storage.jpg, cdl-2.2c-2-nearline-storage-storage.jpg)
• Consideration 2.2d: Describe the ways that an organization can migrate or modernize their current database in the cloud (Diagrams: cdl-2.2d-1-lift-shift-rehosting.jpg, cdl-2.2d-2-managed-database.jpg)
• Quick Decision Cheat Sheet (Subsection 2.2)
• Subsection 2.3: Discuss how smart analytics, business intelligence tools, and streaming analytics can add value in different business use cases (Section 2: Exploring Data Transformation with Google Cloud)
• Consideration 2.3a: Describe how Looker democratizes access to data (Diagrams: cdl-2.3a-1-breaking-sql-bottleneck.jpg, cdl-2.3a-2-governed-self-service-via.jpg)
• Consideration 2.3b: Recognize the value of analyzing and visualizing data from BigQuery in Looker to create real-time reports, dashboards, and integrating data into workflows (Diagrams: cdl-2.3b-1-in-database-live-querying.jpg, cdl-2.3b-2-data-driven-workflows.jpg)
• Consideration 2.3c: Explain why real-time streaming analytics is critical for modern businesses (Diagrams: cdl-2.3c-1-time-sensitive-business.jpg, cdl-2.3c-2-continuous-operational.jpg)
• Consideration 2.3d: Describe the main Google Cloud products that modernize data pipelines (e.g., Pub/Sub, Dataflow, Managed Service for Apache Spark) (Diagrams: cdl-2.3d-1-pub-sub-global.jpg, cdl-2.3d-2-dataflow-serverless.jpg)
• Quick Decision Cheat Sheet (Subsection 2.3)

Chapter 3: Innovating with Google Cloud AI: ML, Generative AI, Gemini & Agentic Solutions

• Subsection 3.1: Describe fundamental AI and ML concepts and how they create business value (Section 3: Innovating with Google Cloud Artificial Intelligence)
• Consideration 3.1a: Recognize the definition of artificial intelligence (AI), machine learning (ML), generative AI (gen AI), data analytics, and business intelligence (Diagrams: cdl-3.1a-1-data-analytics-business.jpg, cdl-3.1a-2-artificial-intelligence.jpg)
• Consideration 3.1b: Recognize some of the ways agentic AI is fundamentally reshaping different industries and the way people work (e.g., workforce productivity, customer support, sales experiences, product innovation, operations, research) (Diagrams: cdl-3.1b-1-passive-chatbots-to.jpg, cdl-3.1b-2-impact-industry.jpg)
• Consideration 3.1c: Recognize the key benefits of Google Cloud's AI offerings (e.g., best infrastructure for AI, AI-ready data cloud, sophisticated 1P models, all-in-one AI developer platform, pre-built AI agents and applications) (Diagrams: cdl-3.1c-1-integrated-pillars-of-ai.jpg, cdl-3.1c-2-vertex-ai-automl-vertex.jpg)
• Consideration 3.1d: Identify the business problems that ML can solve, and describe key use cases and the business value that ML provides (e.g., replacing or simplifying rule-based systems, deriving business insights from large datasets [structured and unstructured], scaling business decisions) (Diagrams: cdl-3.1d-1-replacing-fragile-based.jpg, cdl-3.1d-2-unlocking-insights.jpg)
• Consideration 3.1e: Explain why high-quality, accurate data is essential for successful AI models and identify the main dimensions of data quality (e.g., completeness, uniqueness, timeliness, validity, accuracy, consistency) (Diagrams: cdl-3.1e-1-data-quality-make-or.jpg, cdl-3.1e-2-data-quality-dimensions.jpg)
• Consideration 3.1f: Describe the business implications of explainable and responsible AI in AI systems (Diagrams: cdl-3.1f-1-explainable-ai-xai.jpg, cdl-3.1f-2-responsible-ai-fairness.jpg)
• Quick Decision Cheat Sheet (Subsection 3.1)
• Subsection 3.2: Explain how Google Cloud's AI offerings can create business value (Section 3: Innovating with Google Cloud Artificial Intelligence)
• Consideration 3.2a: Describe the strategic considerations that organizations must make when selecting Google Cloud AI solutions (e.g., implementation speed, development effort, potential for business differentiation, technical expertise requirements, choice and flexibility) (Diagrams: cdl-3.2a-1-core-trade-off-triangle.jpg, cdl-3.2a-2-pre-built-solutions-pre.jpg)
• Consideration 3.2b: Describe the functionality of Gemini Enterprise Agent Platform and identify potential business use cases (Diagrams: cdl-3.2b-1-unified-enterprise-search.jpg, cdl-3.2b-2-core-business-value.jpg)
• Consideration 3.2c: Match the Google Cloud pre-trained API and foundation model to various business use cases (e.g., Agent Platform API, Vision API, Cloud Translation API, Speech-to-Text API, Gemini) (Diagrams: cdl-3.2c-1-vision-api-match-pre.jpg, cdl-3.2c-2-translation-api.jpg)
• Consideration 3.2d: Explain how an organization can build custom models using their own data to create business value (e.g., Agent Studio on Agent Platform, AutoML on Agent Platform) (Diagrams: cdl-3.2d-1-automl-on-vertex-ai.jpg, cdl-3.2d-2-agent-studio-on-agent.jpg)
• Consideration 3.2e: Recognize the core components of Google Cloud's AI Hypercomputer and how organizations benefit by gaining improved performance and efficiency for AI workloads (e.g., GPUs and TPUs, industry-leading software and open standards, cost control with flexible consumption models) (Diagrams: cdl-3.2e-1-supercomputing-purpose.jpg, cdl-3.2e-2-compute-tpus-compute-gpus.jpg)
• Consideration 3.2f: Discuss how BigQuery ML lets users create and execute machine learning models in BigQuery by using standard SQL queries and flexibility to experiment with data (Diagrams: cdl-3.2f-1-bring-ml-to-data.jpg, cdl-3.2f-2-business-benefits.jpg)
• Quick Decision Cheat Sheet (Subsection 3.2)

Chapter 4: Infrastructure & Application Modernization: Migration 'Rs', VMs, GKE, Serverless & Apigee

• Subsection 4.1: Describe how Google Cloud helps organizations transition to the cloud (Section 4: Modernize Infrastructure and Applications with Google Cloud)
• Consideration 4.1a: Define fundamental cloud migration terms (e.g., workload, discovery and assessment, retire, retain, rehost [lift and shift], replatform [move and improve], refactor; reimagine) (Diagrams: cdl-4.1a-1-workload-discovery.jpg, cdl-4.1a-2-retire-vs-retain-billing.jpg)
• Consideration 4.1b: Define the fundamental cloud compute terms (e.g., virtual machines (VMs), containerization and containers, applications and microservices, serverless computing, spot VMs, Kubernetes, autoscaling and load balancing, managed services) (Diagrams: cdl-4.1b-1-virtual-machines-vms-vs.jpg, cdl-4.1b-2-virtual-machines-vms.jpg)
• Quick Decision Cheat Sheet (Subsection 4.1)
• Subsection 4.2: Describe the functionality, business use cases, and business value of Google Cloud's infrastructure offerings (Section 4: Modernize Infrastructure and Applications with Google Cloud)
• Consideration 4.2a: Discuss the business value of using Compute Engine to create and run virtual machines on Google's infrastructure (Diagrams: cdl-4.2a-1-flexible-performance-iaas.jpg, cdl-4.2a-2-built-in-operational.jpg)
• Consideration 4.2b: Describe the business value of modern application development (e.g., flexible architectures like microservices, accelerated deployment processes through managed services, cost optimization, enhanced scalability and resilience, improved operational efficiency) (Diagrams: cdl-4.2b-1-business-outcomes-of.jpg, cdl-4.2b-2-containers-compute-vm-gke.jpg)
• Consideration 4.2c: Describe the business value of using GKE to deploy and manage containers (Diagrams: cdl-4.2c-1-managed-enterprise.jpg, cdl-4.2c-2-gke-standard-vs-gke.jpg)
• Consideration 4.2d: Describe the business value of using serverless computing Google Cloud products (e.g., Cloud Run; Cloud Run functions) (Diagrams: cdl-4.2d-1-run-serverless-containers.jpg, cdl-4.2d-2-run-functions-formerly.jpg)
• Consideration 4.2e: Recognize the Google Cloud products that are supported on multicloud and hybrid cloud environments (e.g., AlloyDB Omni, BigQuery Omni, GKE Enterprise, Cloud SQL, Looker) (Diagrams: cdl-4.2e-1-hybrid-multicloud.jpg, cdl-4.2e-2-gke-enterprise-formerly.jpg)
• Quick Decision Cheat Sheet (Subsection 4.2)
• Subsection 4.3: Describe the business value of application programming interfaces (APIs) (Section 4: Modernize Infrastructure and Applications with Google Cloud)
• Consideration 4.3a: Define application programming interface (API) (Diagrams: cdl-4.3a-1-standardized-software.jpg, cdl-4.3a-2-architectural-decoupling.jpg)
• Consideration 4.3b: Describe how organizations can create new business opportunities by exposing and monetizing public-facing APIs (Diagrams: cdl-4.3b-1-internal-cost-center-to.jpg, cdl-4.3b-2-strategic-business.jpg)
• Consideration 4.3c: Describe the business value of using Apigee API Management (Diagrams: cdl-4.3c-1-full-lifecycle-enterprise.jpg, cdl-4.3c-2-capabilities-of-apigee.jpg)
• Quick Decision Cheat Sheet (Subsection 4.3)

Chapter 5: Trust & Security: Zero Trust, Encryption in 3 States, Defense-in-Depth & Sovereignty

• Subsection 5.1: Describe fundamental cloud security concepts (Section 5: Trust and Security with Google Cloud)
• Consideration 5.1a: Describe relevant cybersecurity threats and business implications (e.g., DDoS, ransomware, cryptomining, malware, viruses, phishing, misconfiguration, unsecured third party systems, physical damage, LLM attacks) (Diagrams: cdl-5.1a-1-infrastructure-identity.jpg, cdl-5.1a-2-ddos-distributed-denial.jpg)
• Consideration 5.1b: Differentiate between cloud security and on-premises security (Diagrams: cdl-5.1b-1-on-premises-burden-100.jpg, cdl-5.1b-2-security-advantage-shared.jpg)
• Consideration 5.1c: Describe the importance of control, compliance, confidentiality, integrity, and availability in a cloud security model (Diagrams: cdl-5.1c-1-cia-triad-each-pillar.jpg, cdl-5.1c-2-confidentiality-security.jpg)
• Consideration 5.1d: Define key security terms and concepts (e.g., data loss prevention, privileged access, least privilege, zero-trust architecture, security by default, security posture, cyber resilience, firewall, encryption, decryption) (Diagrams: cdl-5.1d-1-principle-of-least.jpg, cdl-5.1d-2-zero-trust-compute-vm.jpg)
• Consideration 5.1e: Explain how encryption safeguards an organization's data in different usage states (e.g., in use, in transit, at rest) (Diagrams: cdl-5.1e-1-data-at-rest-stored.jpg, cdl-5.1e-2-data-in-transit-moving.jpg)
• Consideration 5.1f: Differentiate between authentication, authorization, and auditing (e.g., multi-factor authentication, two-step verification [2SV], IAM) (Diagrams: cdl-5.1f-1-authentication-who-are.jpg, cdl-5.1f-2-authorization-are-you.jpg)
• Consideration 5.1g: Define the fundamental cloud security operations (SecOps) terms (e.g., security posture, threat intelligence, threat response) (Diagrams: cdl-5.1g-1-security-posture-define.jpg, cdl-5.1g-2-threat-intelligence.jpg)
• Quick Decision Cheat Sheet (Subsection 5.1)
• Subsection 5.2: Describe the business value of making Google part of an organization's security team with its defense-in-depth, multilayered approach to cloud security (Section 5: Trust and Security with Google Cloud)
• Consideration 5.2a: Recognize how Google Cloud secures every layer of the AI stack (e.g., infrastructure, data, models, platform, agents) (Diagrams: cdl-5.2a-1-end-to-end-defense.jpg, cdl-5.2a-2-security-titan-compute.jpg)
• Consideration 5.2b: Recognize how Google Threat Intelligence provides organizations with proactive insights into cyber threats and identify the unique sources that power its analysis (e.g., Google's vast global visibility, Mandiant's frontline incident response expertise, VirusTotal's crowd sourced threat detection) (Diagrams: cdl-5.2b-1-unique-intelligence.jpg, cdl-5.2b-2-security-threat.jpg)
• Consideration 5.2c: Recognize the benefits of Security Command Center to proactively discover, prioritize, and remediate security risks and misconfigurations across the Google Cloud environment (Diagrams: cdl-5.2c-1-built-in-security-posture.jpg, cdl-5.2c-2-capabilities-security.jpg)
• Consideration 5.2d: Recognize the benefits of using a unified security operations platform, like Google Security Operations, to ingest telemetry and accelerate threat detection and response (Diagrams: cdl-5.2d-1-eliminating-soc-swivel.jpg, cdl-5.2d-2-business-value-iam-vertex.jpg)
• Consideration 5.2e: Recognize the benefits of Google's secure-by-design cloud platform (e.g., core infrastructure, proprietary data centers, purpose-built servers and networking, custom security hardware and software) (Diagrams: cdl-5.2e-1-security-built-hardware.jpg, cdl-5.2e-2-proprietary-data-centers.jpg)
• Consideration 5.2f: Recognize the functionality, business value, and use cases for Google Cloud's AI-assisted and AI-focused security offerings (e.g., Gemini in Google Security Operations, AI Protection, Model Armor) (Diagrams: cdl-5.2f-1-gemini-in-security.jpg, cdl-5.2f-2-ai-protection-security-ai.jpg)
• Consideration 5.2g: Recognize the functionality, use cases, and business value of Google's other security offerings (e.g., Cloud VPC, Cloud VPN, Cloud Interconnect, firewalls, Cloud Armor, Cloud Logging, IAM, Sensitive Data Protection, Confidential Computing, Certificate Manager, Identity-Aware Proxy) (Diagrams: cdl-5.2g-1-network-security-hybrid.jpg, cdl-5.2g-2-virtual-private-vpc.jpg)
• Consideration 5.2h: Describe how Google Cloud earns and maintains customer trust in the cloud (e.g., transparency reports, third-party audits, digital sovereignty, data residency, compliance resource manager) (Diagrams: cdl-5.2h-1-transparency-reports.jpg, cdl-5.2h-2-data-residency-digital.jpg)
• Quick Decision Cheat Sheet (Subsection 5.2)

Chapter 6: Scaling with Cloud Operations: FinOps Cost Control, Observability & SRE Resilience

• Subsection 6.1: Recognize how Google Cloud supports an organization's ability to control their cloud costs (Section 6: Scaling with Google Cloud Operations)
• Consideration 6.1a: Explain how an organization's transition from an on-premises environment to the cloud shifts their capital expenditures (CapEx) to operational expenditures (OpEx), and how that affects their total cost of ownership (TCO) (Diagrams: cdl-6.1a-1-capital-expenditure-capex.jpg, cdl-6.1a-2-capex-on-premises-billing.jpg)
• Consideration 6.1b: Describe Google-recommended practices for cloud financial governance (e.g., identify who manages cloud costs, Google Cloud's cost management tools) (Diagrams: cdl-6.1b-1-shared-accountability-who.jpg, cdl-6.1b-2-cost-management-toolkit.jpg)
• Consideration 6.1c: Recognize the role of people, process, and technology in controlling cloud costs (Diagrams: cdl-6.1c-1-people-culture.jpg, cdl-6.1c-2-process-governance.jpg)
• Consideration 6.1d: Recognize the components of Google Cloud's resource hierarchy (e.g., resources, projects, folders, organization node) and the benefits (e.g., access control, inheritance and propagation rules, security and compliance, visibility and auditing capabilities) (Diagrams: cdl-6.1d-1-levels-top-to-bottom.jpg, cdl-6.1d-2-downward-policy.jpg)
• Consideration 6.1e: Recognize how to control cloud consumption (e.g., resource quota policies, budget threshold rules, Cloud Billing reports, Dynamic Workload Scheduler, Spot VMs) (Diagrams: cdl-6.1e-1-budget-threshold-vs.jpg, cdl-6.1e-2-budget-threshold-soft.jpg)
• Quick Decision Cheat Sheet (Subsection 6.1)
• Subsection 6.2: Describe the fundamental concepts of modern operations, reliability, and resilience in the cloud (Section 6: Scaling with Google Cloud Operations)
• Consideration 6.2a: Describe how to modernize operations by using Google Cloud's Observability (e.g., operations suite, Cloud Monitoring, Cloud Logging, Cloud Trace, Cloud Profiler, Error Reporting) (Diagrams: cdl-6.2a-1-core-tools-of.jpg, cdl-6.2a-2-sql-gke-compute-sql.jpg)
• Consideration 6.2b: Recognize the fundamental cloud operations terms (e.g., operational excellence, reliability, high availability) (Diagrams: cdl-6.2b-1-operational-excellence.jpg, cdl-6.2b-2-reliability-operations.jpg)
• Consideration 6.2c: Recognize how to design resilient infrastructure and processes (e.g., redundancy, replication, scalable infrastructure, backups) (Diagrams: cdl-6.2c-1-redundancy-eliminating.jpg, cdl-6.2c-2-replication-vs-backups.jpg)
• Consideration 6.2d: Recognize how a system's performance and reliability are measured (e.g., latency, traffic, saturation, errors) (Diagrams: cdl-6.2d-1-sre-golden-signals-all.jpg, cdl-6.2d-2-operations-monitoring.jpg)
• Consideration 6.2e: Recognize fundamental concepts of DevOps and Site Reliability Engineering (e.g., service level indicators, service level objectives, service level agreements) (Diagrams: cdl-6.2e-1-devops-vs-site.jpg, cdl-6.2e-2-reliability-hierarchy-sli.jpg)
• Quick Decision Cheat Sheet (Subsection 6.2)

Chapter 7: Master Look-Alike Tool Comparison & Decision Playbook

• 7.1 The Master Look-Alike Tool Comparison Matrix
• 7.2 The 5-Step Architecture Decision Checklist
• 7.3 Top 25 Golden Rules for Final Review

Generating the Custom Illustrations (cdl-image-prompts.json)

All 138 custom image prompts and output filenames for this book are stored in cdl-image-prompts.json (and mirrored in openai-image-gen/out/9003-openai-prompts-cdl-book.json). To generate the illustrations using openai-image-gen/images-from-prompts.py, run:

cd openai-image-gen
uv run images-from-prompts.py -file ../books/cdl-architecture-takeaways/cdl-image-prompts.json -simple -quality medium