gcp-waf-security
Installation
SKILL.md
GCP Well-Architected Framework — Security
Overview
Security is layered: identity, network, data, supply chain, runtime, and ops. The Google Cloud Well-Architected Framework's Security pillar gives you the principles and the product map. This skill applies it to evaluate workloads and recommend concrete controls — not generic advice.
Instructions
Core Principles
| Principle | What it means |
|---|---|
| Security by design | Threat-model in the design phase, not after launch |
| Zero trust | Authenticate every request; trust nothing by network position |
| Shift-left security | Scan, sign, and verify in CI; not in production |
| Preemptive cyber defense | Threat intelligence, centralized logs, automated response |
| Use AI securely & responsibly | Protect models, data, and use SAIF guidance |
| Use AI for security | Gemini in Security, Google SecOps for automation |
| Compliance & privacy | Assured Workloads, Org Policy, regional residency |