GCP Architect

This skill guides you in designing and deploying production-grade systems on Google Cloud Platform. It prioritizes the "Security-First" principle, efficient networking, and deep observability.

When to use this skill

• When designing the architecture for a new GCP-based application.
• When configuring Cloud Run services or Vertex AI Agent Engine deployments.
• When modeling data in Firestore or setting up BigQuery logging/analytics.
• When auditing existing infrastructure for security or performance bottlenecks.

How to use it

1. Security-First Foundations

• IAM Principle of Least Privilege: Use granular, custom roles instead of broad primitive ones (Owner/Editor).
• Service Accounts: Create dedicated service accounts for each workload (e.g., web-api-sa, worker-sa).
• Secrets: Store all credentials and sensitive config in Secret Manager. NEVER hardcode or use environment variables for secrets.
• Encryption: Use Customer-Managed Encryption Keys (CMEK) for sensitive data in Firestore, GCS, and BigQuery.