Skip to main content
Documentation
Technology areas
close
AI and ML
Application development
Application hosting
Compute
Data analytics and pipelines
Databases
Distributed, hybrid, and multicloud
Generative AI
Industry solutions
Networking
Observability and monitoring
Security
Storage
Cross-product tools
close
Access and resources management
Costs and usage management
Google Cloud SDK, languages, frameworks, and tools
Infrastructure as code
Migration
Related sites
close
Google Cloud Home
Free Trial and Free Tier
Architecture Center
Blog
Contact Sales
Google Cloud Developer Center
Google Developer Center
Google Cloud Marketplace
Google Cloud Marketplace Documentation
Google Cloud Skills Boost
Google Cloud Solution Center
Google Cloud Support
Google Cloud Tech Youtube Channel
/
English
Deutsch
Español – América Latina
Français
Indonesia
Italiano
Português – Brasil
中文 – 简体
中文 – 繁體
日本語
한국어
Console
Sign in
Cloud Architecture Center
Contact Us
Start free
Documentation
Technology areas
More
Cross-product tools
More
Related sites
More
Console
Contact Us
Start free
< Architecture Center home
What's new
Fundamentals
Content overview
Well-Architected Framework
Overview
What's new
Operational excellence
Overview
Ensure operational readiness and performance using CloudOps
Manage incidents and problems
Manage and optimize cloud resources
Automate and manage change
Continuously improve and innovate
View on one page
Security, privacy, and compliance
Overview
Implement security by design
Implement zero trust
Implement shift-left security
Implement preemptive cyber defense
Use AI securely and responsibly
Use AI for security
Meet regulatory, compliance, and privacy needs
Shared responsibility and shared fate
View on one page
Reliability
Overview
Define reliability based on user-experience goals
Set realistic targets for reliability
Build high availability through redundancy
Take advantage of horizontal scalability
Detect potential failures by using observability
Design for graceful degradation
Perform testing for recovery from failures
Perform testing for recovery from data loss
Conduct thorough postmortems
View on one page
Cost optimization
Overview
Align spending with business value
Foster a culture of cost awareness
Optimize resource usage
Optimize continuously
View on one page
Performance optimization
Overview
Plan resource allocation
Take advantage of elasticity
Promote modular design
Continuously monitor and improve performance
View on one page
Sustainability
AI and ML perspective
Overview
Operational excellence
Security
Reliability
Cost optimization
Performance optimization
View on one page
FSI perspective
Overview
Operational excellence
Security
Reliability
Cost optimization
Performance optimization
View on one page
View on one page
Deployment archetypes
Overview
Zonal
Regional
Multi-regional
Global
Hybrid
Multicloud
Comparative analysis
What's next
Reference architectures
Single-zone deployment on Compute Engine
Regional deployment on Compute Engine
Multi-regional deployment on Compute Engine
Global deployment on Compute Engine and Spanner
Landing zone design
Landing zones overview
Decide identity onboarding
Decide resource hierarchy
Network design
Decide network design
Implement network design
Decide security
Enterprise foundations blueprint
Overview
Architecture
Authentication and authorization
Organization structure
Networking
Detective controls
Preventative controls
Deployment methodology
Operations best practices
Deploy the blueprint
AI and machine learning
Content overview
Generative AI
Generative AI document summarization
Generative AI RAG with Cloud SQL
Generative AI knowledge base
RAG infrastructure using Vertex AI and Vector Search
RAG infrastructure using Vertex AI and AlloyDB
RAG infrastructure using GKE and Cloud SQL
GraphRAG infrastructure using Vertex AI and Spanner Graph
Use generative AI for utilization management
Model training
Best practices for implementing machine learning on Google Cloud
Cross-silo and cross-device federated learning on Google Cloud
Model development and data labeling with Google Cloud and Labelbox
MLOps
MLOps: Continuous delivery and automation pipelines in machine learning
Deploy and operate generative AI applications
Deploy an enterprise AI and ML model
Confidential computing for data analytics and AI
MLOps using TensorFlow Extended, Vertex AI Pipelines, and Cloud Build
Guidelines for high-quality, predictive ML solutions
AI and ML applications
Build an ML vision analytics solution with Dataflow and Cloud Vision API
Reference architecture
Deploy the architecture
Design storage for AI and ML workloads in Google Cloud
Harness CI/CD pipeline for RAG-capable applications
Implement two-tower retrieval with large-scale candidate generation
Optimize AI and ML workloads with Cloud Storage FUSE
Optimize AI and ML workloads with Managed Lustre
Use Vertex AI Pipelines for propensity modeling on Google Cloud
Third-party product integrations
C3 AI architecture on Google Cloud
Application development
Content overview
Development approaches and styles
Patterns for scalable and resilient apps
Development platform management
Deploy an enterprise developer platform
Overview
Architecture
Developer platform controls
Service architecture
Logging and monitoring
Operations
Costs and attributions
Deployment methodology
Cymbal Bank example
Mapping BeyondProd principles
Deploy the blueprint
Best practices for cost-optimized Kubernetes applications on GKE
Expose service mesh applications through GKE Gateway
Reference architecture
Deploy the architecture
Build globally distributed applications using GKE Gateway and Cloud Service Mesh
Reference architecture
Deploy the architecture
Patterns and practices for identity and access governance on Google Cloud
Resource management with ServiceNow
Select a managed container runtime environment
DevOps and development lifecycle
Architecture decision records overview
Develop and deliver apps with a deployment pipeline
Reference architecture
Deploy the architecture
DevOps Research and Assessment (DORA) capabilities
Application architectures
Apache Guacamole on GKE and Cloud SQL
Reference architecture
Deploy the architecture
Chrome Remote Desktop on Compute Engine
Set up for Linux
Set up for Windows
Connected device architectures on Google Cloud
Overview
Standalone MQTT broker
IoT platform product
Device to Pub/Sub connection to Google Cloud
Best practices for running an IoT backend
Best practices for automatically provisioning and configuring edge and bare metal systems and servers
Ecommerce platform with serverless computing
Manage and scale networking for Windows applications that run on managed Kubernetes
Reference architecture
Deploy the architecture
Dynamic web application with Python and JavaScript
Use a Cloud SDK Client Library
Three-tier web app
Website hosting
Big data and analytics
Content overview
End-to-end architectures
Analytics lakehouse
Import data into a secured BigQuery data warehouse
Data mesh on Google Cloud
Architecture and functions in a data mesh
Design a self-service data platform for a data mesh
Build data products in a data mesh
Discover and consume data products in a data mesh
Enterprise data management and analytics platform
Data warehouse with BigQuery
BigQuery backup automation
Reference architecture
Deploy the architecture
Load and process data
Continuous data replication to BigQuery using Striim
Analyze data
Data science with R: exploratory data analysis
Databases
Content overview
Oracle workloads
Overview
Enterprise application with Oracle Database on Compute Engine
Enterprise application on Compute Engine with Oracle Exadata
Oracle E-Business Suite with Oracle Database on Compute Engine
Oracle E-Business Suite on Compute Engine with Oracle Exadata
Oracle PeopleSoft on Compute Engine with Oracle Exadata
Multi-cloud database management
Hybrid and multicloud
Content overview
Build hybrid and multicloud architectures
Overview
Drivers, considerations, strategy, and patterns
Plan a hybrid and multicloud strategy
Architectural approaches to adopt a hybrid or multicloud architecture
Other considerations
What's next
View the guide as a single page
Hybrid and multicloud architecture patterns
Overview
Distributed architecture patterns
Tiered hybrid pattern
Partitioned multicloud pattern
Analytics hybrid and multicloud patterns
Edge hybrid pattern
Environment hybrid pattern
Business continuity hybrid and multicloud patterns
Cloud bursting pattern
What's next
View the guide as a single page
Hybrid and multicloud secure networking architecture patterns
Overview
Design considerations
Architecture patterns
Mirrored pattern
Meshed pattern
Gated patterns
Gated egress
Gated ingress
Gated egress and gated ingress
Handover pattern
General best practices
What's next
View the guide as a single page
Cross-Cloud Network design for distributed applications
Overview
Connectivity
Service networking
Network security
Cross-Cloud Network inter-VPC connectivity using Network Connectivity Center
Cross-Cloud Network inter-VPC connectivity with VPC Network Peering
Hybrid and multicloud applications
Hybrid render farm
Build a hybrid render farm
Patterns for connecting other cloud service providers with Google Cloud
Identity and access management
Authenticate workforce users in a hybrid environment
Overview
Implementation patterns
Configure Active Directory for VMs to automatically join a domain
Deploy an Active Directory forest on Compute Engine
Patterns for using Active Directory in a hybrid environment
Third-party product integrations
Data management with Cohesity Helios and Google Cloud
Migration
Content overview
Migrate to Google Cloud
Get started
Assess and discover your workloads
Plan and build your foundation
Transfer your large datasets
Deploy your workloads
Migrate from manual deployments to automated, containerized deployments
Optimize your environment
Best practices for validating a migration plan
Minimize costs
Migrate from AWS to Google Cloud
Get started
Migrate Amazon EC2 to Compute Engine
Migrate Amazon S3 to Cloud Storage
Migrate Amazon EKS to GKE
Migrate from Amazon RDS and Amazon Aurora for MySQL to Cloud SQL for MySQL
Migrate from Amazon RDS and Amazon Aurora for PostgreSQL to Cloud SQL and AlloyDB for PostgreSQL
Migrate from Amazon RDS for SQL Server to Cloud SQL for SQL Server
Migrate from AWS Lambda to Cloud Run
Migrate to a Google Cloud VMware Engine platform
Application migration
Migrate containers to Google Cloud
Migrate from Kubernetes to GKE
Migrate across Google Cloud regions
Get started
Design resilient single-region environments on Google Cloud
Architect your workloads
Prepare data and batch workloads for migration across regions
Data and Database migration
Database migration guide
Concepts, principles, and terminology
Set up and run a database migration process
Networks for migrating enterprise workloads
Architectural approaches
Networking for secure intra-cloud access
Networking for internet-facing application delivery
Networking for hybrid and multicloud workloads
Use RIOT Live Migration to migrate to Redis Enterprise Cloud
Reference architecture
Deploy the architecture
Define migration scope
Monitoring and logging
Content overview
Export logs and metrics
Cloud Monitoring metric export
Import logs from Cloud Storage to Cloud Logging
Reference architecture
Deploy the architecture
Stream logs from Google Cloud to Splunk
Hybrid and multicloud monitoring
Hybrid and multicloud monitoring and logging patterns
Log and monitor on-premises resources with BindPlane
Overview
Log on-premises resources
Monitor on-premises resources
Stream logs from Google Cloud to Datadog
Reference architecture
Deploy the architecture
Networking
Content overview
Best practices and reference architectures for VPC design
Connect
Hub-and-spoke network architecture
Patterns for connecting other cloud service providers with Google Cloud
Building internet connectivity for private VMs
Secure
Deploy FortiGate-VM Next Generation Firewall using Terraform
Fortigate architecture in Google Cloud
Secure virtual private cloud networks with the Palo Alto VM-Series NGFW
VMware Engine network security using centralized appliances
Reliability and disaster recovery
Content overview
Infrastructure reliability guide
Overview of reliability
Building blocks of reliability
Assess reliability requirements
Design reliable infrastructure
Manage traffic and load
Manage and monitor infrastructure
What's next
Disaster recovery planning guide
Overview
Building blocks
Scenarios for data
Scenarios for applications
Architecting for locality-restricted workloads
Use cases: locality-restricted data analytics applications
Architecting for cloud infrastructure outages
Application availability
Load balanced managed VMs
Patterns for using floating IP addresses in Compute Engine
Data availability
Continuous data replication to Cloud Spanner using Striim
Google Workspace Backup with Afi.ai
High availability of PostgreSQL clusters on Compute Engine
Business continuity with CI/CD on Google Cloud
Security and IAM
Content overview
Identity and access management overview
Overview
Concepts
Overview of Google identity management
Reference architectures
Single sign-on
Best practices
Best practices for planning accounts and organizations
Best practices for federating Google Cloud with an external identity provider
Assess and plan
Plan the onboarding process
Federate with Active Directory
Federate with Microsoft Entra ID
Assess existing user accounts
Assess onboarding plans
Assess the impact of user account consolidation on federation
Deploy
Prepare your Google Workspace or Cloud Identity account
Set up federation
Microsoft Entra ID user provisioning and single sign-on
Microsoft Entra ID B2B user provisioning and single sign-on
Microsoft Entra ID My Apps portal integration
Active Directory user account provisioning
Active Directory single sign-on
Keycloak single sign-on
Okta user provisioning and single sign-on
Consolidate accounts
Overview
Migrate consumer accounts
Evict unwanted consumer accounts
Sanitize Gmail accounts
Remove Gmail from consumer accounts
Reconcile orphaned managed user accounts
Resources
Example announcement
Application security
Best practices for securing your applications and APIs using Apigee
Use context-aware access to secure apps and resources
Secure apps and resources
Best practices
Best practices for continuous access to Google Cloud
Design secure deployment pipelines
Use Google Cloud Armor, load balancing, and Cloud CDN to deploy programmable global front ends
Secured serverless architecture
Architecture using Cloud Functions