gcp

Scope

Covers the Google Cloud control plane and the architecture decisions that sit on top of it: the gcloud CLI and its defaults, the resource hierarchy and organization policy, IAM (predefined and custom roles, conditions, deny policies, service accounts, Workload Identity Federation), Cloud Run, the GKE cluster and node-pool control plane, Cloud SQL and the choice between managed data services, Cloud Storage, Cloud Logging and Cloud Monitoring as products, cost and quota management, and Well-Architected reviews against Google's Architecture Framework.

Verified against Google Cloud SDK 584.0.0. Every rule below that depends on a CLI default carries a [verified] marker and was read from that release's --help output; rules marked [official] come from cloud.google.com and were not reproduced locally because doing so would create billable resources.

Not covered: