Google Professional Cloud Architect Training Program

Configuring network topologies. Considerations include:

• Extending to on-premises (hybrid networking)

• Extending to a multi-cloud environment that may include GCP to GCP communication

• Security and data protection

Configuring individual storage systems. Considerations include:

• Data storage allocation

• Data processing/compute provisioning

• Security and access management

• Network configuration for data transfer and latency

• Data retention and data life cycle management

• Data growth management

Configuring compute systems. Considerations include:

• Compute system provisioning

• Compute volatility configuration (preemptible vs. standard)

• Network configuration for compute nodes

Infrastructure provisioning technology configuration (e.g. Chef/Puppet/Ansible/Terraform/Deployment Manager)

Container orchestration with Kubernetes

Designing for security. Considerations include:

• Identity and access management (IAM)

• Resource hierarchy (organizations, folders, projects)

• Data security (key management, encryption)

• Penetration testing

• Separation of duties (SoD)

• Security controls (e.g., auditing, VPC Service Controls, organization policy)

• Managing customer-managed encryption keys with Cloud KMS

Designing for compliance. Considerations include:

• Legislation (e.g., health record privacy, children’s privacy, data privacy, and ownership)

• Commercial (e.g., sensitive data such as credit card information handling, personally identifiable information [PII])

• Industry certifications (e.g., SOC 2)

• Audits (including logs)

Analyzing and defining technical processes. Considerations include:

• Software development life cycle plan (SDLC)

• Continuous integration / continuous deployment

• Troubleshooting / post mortem analysis culture

• Testing and validation

• Service catalogue and provisioning

• Business continuity and disaster recovery

Analyzing and defining business processes. Considerations include:

• Stakeholder management (e.g. influencing and facilitation)

• Change management

• Team assessment / skills readiness

• Decision-making process

• Customer success management

• Cost optimization / resource optimization (capex / opex)

Developing procedures to ensure resilience of solution in production (e.g., chaos engineering)

Advising development/operation team(s) to ensure successful deployment of the solution. Considerations include:

• Application development

• API best practices

• Testing frameworks (load/unit/integration)

• Data and system migration tooling

Interacting with Google Cloud using GCP SDK (gcloud, gsutil, and bq). Considerations include:

• Local installation

• Google Cloud Shell