Cloud Armor Skill

Manage and analyze Google Cloud Armor security policies using gcloud compute security-policies commands.

Discovery-First Rule

ALWAYS discover before acting. Never assume policy names, rule priorities, or backend service names.

# Discover security policies
gcloud compute security-policies list --format=json \
  | jq '[.[] | {name: .name, type: .type, adaptiveProtection: .adaptiveProtectionConfig.layer7DdosDefenseConfig.enable, ruleCount: .rules | length}]'

Parallel Execution Requirement

ALL independent operations MUST run in parallel using background jobs (&) and wait.