Google Cloud Cheatsheet

Services Overview

Use this Google Cloud reference while you build software engineering projects, review code, or refresh the syntax you reach for most.

Core Compute

ServiceWhat it isBest for
Compute EngineIaaS VMs (any OS, full control)Lift-and-shift, custom runtimes
GKEManaged KubernetesContainerized microservices at scale
Cloud RunServerless containers (HTTP)Stateless APIs, event-driven services
Cloud FunctionsServerless functions (event triggers)Lightweight glue, webhooks
App EngineManaged PaaS (standard/flexible)Web apps with zero infra ops
BatchManaged batch job schedulingHPC, large ML training jobs

Core Storage & Databases

ServiceTypeBest for
Cloud StorageObject / blobFiles, backups, static assets, data lake
Persistent DiskBlock storageVM boot disks, databases
FilestoreManaged NFSShared file systems across VMs/GKE
Cloud SQLManaged relational (PostgreSQL, MySQL, SQL Server)OLTP workloads
Cloud SpannerGlobally distributed SQLPlanet-scale ACID transactions
FirestoreServerless NoSQL document DBMobile/web real-time apps
BigtableManaged wide-column NoSQLTime-series, IoT at massive scale
MemorystoreManaged Redis / MemcachedCaching, session storage

Data & Analytics

ServiceWhat it does
BigQueryServerless data warehouse — SQL analytics over petabytes
DataflowManaged Apache Beam (streaming + batch ETL)
Pub/SubAsync messaging / event streaming
DataprocManaged Spark + Hadoop
Looker StudioBI dashboards on top of BigQuery

Networking

ServiceWhat it does
VPCPrivate network, subnets, firewall rules
Cloud Load BalancingGlobal / regional HTTP(S), TCP, UDP LB
Cloud CDNEdge caching for GCS/backend content
Cloud DNSManaged authoritative DNS
Cloud NATOutbound NAT for private VMs
Cloud Interconnect / VPNPrivate connectivity to on-prem

AI & ML

ServiceWhat it does
Vertex AIUnified ML platform — training, serving, pipelines
Gemini APIAccess Google's Gemini models
Vision / NL / Speech APIsPre-trained models via REST
AutoMLTrain custom models with no ML code

DevOps & Security

ServiceWhat it does
Cloud BuildCI/CD — build, test, deploy pipelines
Artifact RegistryDocker images, language packages
Secret ManagerStore and audit API keys/secrets
IAMIdentity, roles, and permissions
Cloud ArmorWAF + DDoS protection
Binary AuthorizationDeploy only signed container images

Global Footprint

  • Regions — 40+ geographic regions (e.g., us-central1, europe-west1, asia-east1)
  • Zones — 1+ isolated data-center zones per region (e.g., us-central1-a)
  • Multi-region — storage class spanning 2+ regions (US, EU, ASIA)

Pick a region close to your users. For high availability, deploy across two zones minimum in the same region or use global load balancing across regions.

Resource Hierarchy

Organization
  └── Folders (optional grouping)
        └── Projects  ← billing, APIs, IAM boundary
              └── Resources (VMs, buckets, functions…)
  • Project is the fundamental unit — all resources live in a project.
  • IAM policies and billing attach at Organization, Folder, or Project level (inherited downward).
  • Enable APIs per project: gcloud services enable compute.googleapis.com

Pricing Model

ConceptHow it works
Pay-as-you-goBilled per second / per byte / per request
Committed Use Discounts1- or 3-year commits for Compute/SQL → up to 57% off
Sustained Use DiscountsAuto-applied for VMs running >25% of month
Spot / Preemptible VMsUp to 91% cheaper; can be reclaimed anytime
Free TierAlways-free resources (see the Cost and Free Tier topic)