2. So, Whatâs the Cloud
Anyway?
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
3. On-demand
self-service
No human
intervention needed
to get resources
Broad
network
access
Access from
anywhere
Resource
pooling
Provider shares
resources to
consumers
Rapid
elasticity
Get more resources
quickly as needed
Measured
service
Pay only for what
you consume
Cloud computing has five fundamental
characteristics
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
4. Every company is a data company
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
5. â CPU, memory, storage, and
networking is provided as a
service.
â The user needs to manage
the OS and the application.
â The platform is a managed
service.
â All the user provides is the
application.
â The platform and software
is provided as a service to
the user.
â The user supplies the data.
Infrastructure as a service
(IaaS)
Platform as a service
(PaaS)
Software as a service
(SaaS)
IaaS versus PaaS versus SaaS
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
6. Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Google Cloud
PoPs and
Network Edge point
of presence
Equiano
(PT, NG, ZA)
2021
Dunant
(US, FR)
2020
SJC
(JP, HK, SG)
2013
JGA-S
(GU, AU)
2019
Indigo
(SG, ID, AU)
2019
Havfrue
(US, IE, DK)
2019
Monet
(US, BR)
2017
Junior
(Rio, Santos)
2018
Tannat
(BR, UY, AR)
2018
Curie
(CL, US)
2019
Faster
(US, JP, TW)
2016
PLCN
(US, TW)
2020
Unity
(US, JP)
2010
Grace Hopper
(US, UK, ES)
2022
Network
9. Vision API Speech-to-Text
API
Cloud
Translation API
AI Platform
Big data
Pub/Sub Dataflow Dataproc
BigQuery AI Platform
Notebooks
Machine learning
AutoML
Google Cloud offers services to get value from data
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
10. Start with a Solid
Platform
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
11. Google Cloud
Console
Web user
interface
>_
Cloud SDK and
Cloud Shell
Command-line
interface
Cloud Console
mobile app
For iOS and
Android
REST-based
API
For custom
applications
There are four ways to interact with Google Cloud
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
12. The Cloud Console provides a web-based GUI for
you to manage Google Cloud projects and
resources
â Centralized console for all project data.
â Execute common tasks using simple
mouse clicks.
â Manage and create projects.
â Access developer tools:
â Cloud Source Repositories
â Cloud SDK
â Cloud Shell
â Access to product APIs.
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
13. Logging in to the Cloud Console
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
14. Interacting with the Cloud Console
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
15. Every Google Cloud service you use is associated
with a project
â Enable services and APIs.
â Enable billing.
â Manage permissions and credentials.
â Track resource and quota usage.
â Programmatically manage your
projects in Google Cloud.
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
16. Project ID Project name Project number
Globally unique Need not be unique Globally unique
Assigned by Google Cloud
but mutable during
creation
Chosen by you Assigned by Google Cloud
Immutable after creation Mutable Immutable
Projects have three identifying attributes
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
18. Creating a project
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
19. Billing account pays for project
resources.
A billing account is linked to zero or
more projects.
Accounts are charged automatically,
invoiced monthly, or invoiced at the
threshold limit.
Sub accounts can be used for
separate billing for projects.
Cloud
Storage
VMs Cloud
APIs
BigQuery Cloud
Network
How billing works
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
20. âgcloud
âgsutil
âbq
The Cloud SDK is a command-line interface for
Google Cloud products and services
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
21. â Browser-based CLI access to resources
â No need to install the Cloud SDK or
other tools locally
â Runs on an ephemeral Compute Engine
VM at no cost to you
â 5 GB of persistent disk storage
â Web preview functionality and built-in
authorization for project/resource
access
Cloud Shell
console.cloud.google.com
Cloud SDK
Cloud Console
Cloud Shell is an alternative to the Cloud SDK
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
22. Starting Cloud Shell
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
23. The Cloud Console and Cloud Shell
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
24. The Cloud Shell code editor is a tool for editing files
inside your Cloud Shell environment
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
25. Manage Google Cloud services from your Android
or iOS device
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
26. Cloud SQL
Cloud
Spanner
Datastore
Cloud
Bigtable
BigQuery
Cloud
Storage
Is your data structured?
?
No
Is your workload analytics?
?
No
No
Is your data relational?
?
Yes
Do you need updates
or low latency?
?
Do you need horizontal
scalability?
?
No
Yes
Yes
Yes
No
Yes
What type of storage will meet my needs best?
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
27. GCP Security & IAM
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
28. Hardware infrastructure
Service deployment
User identity
Storage services
Internet communication
Operational security
Googleâs infrastructure security layers
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
29. Provide an identity for carrying out server-to-server interactions in a project.
Used to authenticate from one service to another.
Used to control privileges used by resources so that applications can
perform actions on behalf of authenticated end users.
Identified with an email address:
PROJECT_NUMBER-compute@developer.gserviceaccount.com
PROJECT_ID@appspot.gserviceaccount.com
Service accounts control server-to-server interactions
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
30. PaaS
On-
premises
IaaS
Content
Access policies
Usage
Deployment
Web app security
Identity
Operations
Access and authentication
Network security
OS, data, and content
Audit logging
Network
Storage and encryption
Hardware
Managed
services
Responsibility
Google-managed
Customer-managed
With Google Cloud, security responsibility is shared
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
31. Data access is almost always the customerâs responsibility
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
32. Who can do what on which resource
Cloud Identity and Access Management lets admins
authorize who can take action on specific resources
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
33. Service account
test@project_id.iam.gserviceaccount.com
Google account or Cloud Identity user
test@gmail.com test@example.com
Cloud Identity or Google Workspace domain
example.com
Google Groups
test@googlegroups.com
Who: IAM policies can apply to any of four types
of user sources
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
Who
34. Basic Predefined Custom
There are three types of IAM roles
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
35. Who can do what
on Compute Engine
resources in this project,
or folder, or org
IAM predefined roles apply to a particular Google Cloud
service in a project
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
36. â compute.instances.delete
â compute.instances.get
â compute.instances.list
â compute.instances.setMachineType
â compute.instances.start
â compute.instances.stop
. . .
InstanceAdmin
role
project_a
Google
Group
IAM predefined roles offer more fine-grained permissions
on particular services
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
37. â compute.instances.get
â compute.instances.list
â compute.instances.start
â compute.instances.stop
. . .
InstanceOperator
role
project_a
Google
Group
IAM custom roles let you define a precise set
of permissions
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program Website.
39. A background to networking
Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
40. Copyright Google LLC. For educational purposes in accordance with the terms of use set forth on the program
Google Cloud
Network Edge point
of presence
Equiano
(PT, NG, ZA)
2021
Dunant
(US, FR)
2020
SJC
(JP, HK, SG)
2013
JGA-S
(GU, AU)
2019
Indigo
(SG, ID, AU)
2019
Havfrue
(US, IE, DK)
2019
Monet
(US, BR)
2017
Junior
(Rio, Santos)
2018
Tannat
(BR, UY, AR)
2018
Curie
(CL, US)
2019
Faster
(US, JP, TW)
2016
PLCN
(US, TW)
2020
Unity
(US, JP)
2010
Grace Hopper
(US, UK, ES)
2022
Network
41. Last Date for Code
Redemption is extended
9th December, 10:00PM
42. Not able to get credits after applying the access codes : Request
them to take
âA Tour of Google Cloud Hands-on Labsâ in an incognito window
and wait for at least 45 minutes. If the issue persists, they can log
out and log in again.
44. Last Date for completing
Pathway is extended
21st December, 10:00PM
45. 1) Try connecting in
some time, we are
hopeful that you will
be able to perform
the labs as the traffic
reduces.
2) Alternatively, find
another lab that you
can perform in the
meantime.
High traffic on the Skill Boosts Platform!
You might face challenges while performing some labs :(
46. What to do if you face issues with CSB?
dscsupport@qwiklabs.com
Welcome to So, Whatâs the Cloud Anyway?, Iâm ________________.
Cloud computing has five fundamental characteristics:
First, computing resources are on-demand and self-service. Cloud-computing customers use an automated interface and get the processing power, storage, and network they need, without the typical complex configurations required when building physical servers.
Second, resources are accessible over a network from any location.
Providers allocate resources to consumers from a large pool, allowing them to benefit from economies of scale. The resources exist in multiple locations all over the world, you just have to decide the available geographic location you wish to utilize.
Resources are elastic. If you need more resources you can get them rapidly. And when you need less, you can scale back.
Finally, you pay only for what you use or reserve, as you go. If you stop using resources, you simply stop paying.
Google believes that, in the future, every companyâregardless of size or industryâwill differentiate itself from its competitors through technology. Largely, that technology will be in the form of software. Great software is centered on data. Therefore, every company is, or will become, a data company.
Google Cloud provides a wide variety of services for managing and getting value from data at scale.
With infrastructure as a service, the service provides the underlying architecture for you to run servers. The resources to run are provided, but itâs up to the user to manage the operating system and application.
Platform as a service takes it one step further. Now the entire environment will be managed for you the user, and all that is required of you is to manage your applications. The operating system layer will be managed as part of the service.
For Software as a service, the infrastructure, platform, and software is managed for you. All thatâs required is that you bring your data to the system. A few commercial examples of SaaS include SAP and Salesforce.
Googleâs data centers around the world are interconnected by the Google network, which, by some publicly available estimates, carries as much as 40% of the worldâs internet traffic every day. This is the largest network of its kind on Earth, and it continues to grow.
Itâs designed to provide the highest possible throughput and the lowest possible latencies for applications.
The network interconnects with the public internet at more than 90 internet exchanges and more than 110 points of presence worldwide. When an internet user sends traffic to a Google resource, Google responds to the user's request from an Edge Network location that will provide the lowest delay or latency. Googleâs edge caching network places content close to end users to minimize latency. Applications in Google Cloud can take advantage of this edge network too.
Google Cloudâs products and services can be broadly categorized as Compute, Storage, Big Data, and Machine Learning. Leveraging compute can include virtual machines via Compute Engine, running Docker containers in a managed platform using Google Kubernetes Engine, deploying applications in a managed platform like App Engine, running event-based serverless code using Cloud Functions, or running stateless containers as a managed service like Cloud Run.
A variety of managed storage options are available as well. For unstructured storage thereâs Cloud Storage, for managed relational databases thereâs Cloud SQL or Cloud Spanner, and for NoSQL, there are options like Datastore or Cloud Bigtable.
Managed services dealing with big data and machine learning are available as well.
Hi, Iâm ______.
Welcome to the module Start with a Solid Platform.
There are four ways you can interact with Google Cloud, and weâll talk about each in turn: the Cloud Console, the Cloud SDK and Cloud Shell, APIs, and the Cloud Console mobile app.
The Cloud Console serves as a centralized console for all of your project data, and lets you execute common tasks using simple mouse clicks with no need to remember commands or avoid typos.
When you use the Cloud Console, the resources that you create are done so in the context of a specific project. You can create multiple projects, so you can use projects to separate your work in whatever way makes sense for you. For example, you might start a new project if you want to make sure only certain team members can access the resources in that project, while all team members can continue to access resources in another project.
The Cloud Console is also great for developers. Cloud Source Repositories provides Git version control to support collaborative development of any application or service.
The Cloud SDK is a set of command-line tools for Google Cloud. You can run these tools interactively or in your automated scripts.
Cloud Shell also provides you with command-line access to your cloud resources directly from your browser, but without having to install the Cloud SDK or other tools on your system. The utilities you need are always available, up to date and fully authenticated when you need them.
The Cloud SDK and Cloud Shell will be discussed in more detail later in this module.
The Cloud SDK includes client libraries that enable you to easily create and manage resources. Google Cloud client libraries expose APIs for two main purposes. App APIs provide access to services and admin APIs offer functionality for resource management.
From a browser, go to console.cloud.google.com. If you havenât already logged into your Google account, the system will prompt you to enter your credentials. After you log in, the Cloud Console will display the details of your default project.
All Google Cloud services are accessible through the simple menu button in the top-left corner. You can pin frequently used services to this menu.
Projects are the basis for enabling and using Google Cloud services, like managing APIs, enabling billing, adding and removing collaborators, and enabling other Google services. Each project is a separate account, and each resource belongs to exactly one. Projects can have different owners and users. Theyâre billed separately, and theyâre managed separately.
Resource Manager provides ways for you to programmatically manage your projects in Google Cloud. You can access Resource Manager through an RPC API or REST API. With these APIs, you can get a list of all projects associated with an account, create new projects, update existing projects, and delete projects. You can also undelete, or recover, projects that you want to restore.
Each Google Cloud project has a name and project ID that you assign. The project ID is a permanent, unchangeable identifier, and it has to be unique across Google Cloud. While a Project ID will be generated automatically, you can edit it. However, this must be done while creating the new project though as it cannot be modified afterwards. In general, project IDs are made to be human-readable strings, and youâll use them frequently to refer to projects.
On the other hand, project names are for your convenience, and you can change them. Note though that you canât reuse the project name of a deleted project.
Google Cloud also assigns each of your projects a unique project number, and youâll see it displayed to you in various contexts, but using it is mostly outside the scope of this course.
As you work with Google Cloud, you'll use these identifiers in certain command lines and API calls.
To create a project, click on the name of the current project in the upper left portion of the screen.
A list of all current projects will be displayed. Select the New Project option on the right-hand side.
When the New Project screen is displayed, give your project a name. You have the option to use the auto-generated project ID, or create your own by clicking the Edit option. Project IDs must be globally unique. Select the appropriate billing account and organization and then click Create.
Billing in Google Cloud is set up at the Google Cloud project level. When you define a Google Cloud project, you link a billing account to it. This billing account is where you will configure all your billing information, including your payment option.
You can link your billing account to zero or more projects. Projects that you donât link to any billing account can only use free Google Cloud services.
Your billing account can be charged automatically and invoiced every month, or at every threshold limit.
You can separate project billings by setting up billing subaccounts. Some Google Cloud customers who resell Google Cloud services use sub accounts for each of their own clients.
The Cloud SDK is a set of command-line tools that you can download and install onto a computer of your choice and use to manage resources and applications hosted on Google Cloud.
The gcloud ***gee cloud*** CLI manages authentication, local configuration, developer workflow, and interactions with Google Cloud APIs.
Gsutil ***gee ess util*** provides command line access to manage Cloud Storage buckets and objects.
bq *** bee cue*** allows you to run queries and manipulate datasets, tables, and entities in BigQuery through the command line.
Using Cloud Shell, you can manage your projects and resources easily without having to install the Cloud SDK or other tools locally. The Cloud SDK command-line tools and other utilities are always available, up to date, and fully authenticated.
Your Cloud Shell virtual machine is ephemeral, which means that it will be stopped whenever you stop using it interactively, and itâll be restarted when you re-enter Cloud Shell. You get five gigabytes of persistent disk storage that is reattached for you every time a new Cloud Shell session is started.
Cloud Shell provides web preview functionality and built-in authorization for access to Cloud Console projects and resources.
To start Cloud Shell, click on the Activate Cloud Shell icon in the upper right side of the screen.
The Cloud Shell terminal will appear on the lower portion of the window. Options, including launching the Cloud Shell code editor and opening Cloud Shell in a new page, can be performed using the tool bar on the upper right corner of Cloud Shell.
The Cloud Shell code editor is a tool for editing files inside your Cloud Shell environment in real time within the web browser. This tool is extremely convenient when working with code-first applications or container-based workloads, because you can edit files easily without the need to download and upload changes. You can also use text editors from the Cloud Shell command prompt.
The Cloud Console mobile app is available for iOS and Android and offers many capabilities.
It allows you to stay connected to the cloud and check billing, status, and critical issues. To see the health of your service at a glance, you can create your own custom dashboard showing key metrics such as CPU usage, network usage, requests per second, server errors, and more.
You can take action to address issues directly from your device such as rolling back a bad release, stopping or restarting a virtual machine, searching logs or even connecting to a virtual machine via SSH.
The monitoring functionality allows you to view and respond to to incidents, errors, and logging. If you need to, you can even access Cloud Shell to perform any gcloud operation.
Welcome to So, Whatâs the Cloud Anyway?, Iâm ________________.
Computers communicate with each other on a network. The computers in a single location, like an office, are connected on a local area network (LAN). Multiple locations can have their LANs connected to a wide area network, or WAN. Most networks today are connected to the internet, enabling millions of personal computers, servers, smartphones, and other devices to communicate, and provide and consume IT services.
Since around 2004, Google has been a leader in building out fast, powerful, high-quality cloud infrastructure.
Googleâs high-quality private network connects regional locations to more than 100 global network points of presence close to users. Google Cloud also uses state-of-the-art software-defined networking and distributed systems technologies to host and deliver services around the world. When every millisecond of latency counts, Google ensures that content is delivered with the highest throughput.
https://cloud.google.com/about/locations/
encourage community to learn by breaking the content into parts.
Not rush at the last minute :
1. Will not help understanding what they learnt
2. Some labs are expected to close with everyone following the course at the last minute Do not reach CSB for CDL related queries or queries on project related issues in later stage
