Google

Design an enterprise search system that answers questions using retrieved company content, an approach called RAG. Gather requirements and produce architecture diagrams, deployment guidance, and validation plans using GKE, AlloyDB, and open models.

中文简介正在准备中。当前显示英语简介。

• Designing conversational search for internal documents
• Planning RAG with a vector-enabled SQL database
• Hosting open models on GKE

Check Google Cloud IAM allow policy changes against the last 90 days of access logs. The skill identifies access that could be lost and applies changes only after a successful simulation and user approval.

中文简介正在准备中。当前显示英语简介。

• Checking access impact before removing a role
• Reviewing allow policy changes across resource scopes
• Applying policy changes after simulation and approval

Define reliability goals for Google Cloud services and generate Terraform files for Cloud Monitoring SLO alerts. A guided conversation gathers service scope, measurement metrics, targets, and alert conditions, then explains the PromQL queries used to evaluate them.

中文简介正在准备中。当前显示英语简介。

• Create availability SLO alerts for a service
• Define latency targets and measurement windows
• Configure SLO alerts for App Hub resources

Retrieve security findings from Google Cloud Security Command Center for initial assessment. Filter active vulnerabilities, threats, and external exposures, inspect one finding’s full details, or group counts by category to understand the reported risks.

中文简介正在准备中。当前显示英语简介。

• Retrieving full details for a named security finding
• Listing active vulnerabilities or external exposures
• Summarizing active finding counts by category

Build and test threat detection rules in Google SecOps using YARA-L 2.0, its rule language. The skill also checks existing coverage with simulated attack events, proposes rules for confirmed gaps, and deploys approved rules.

中文简介正在准备中。当前显示英语简介。

• Creating detection rules from known attack behavior
• Tuning existing rules to reduce false positives
• Checking detection gaps against threat reports and CVE disclosures

Investigate security incidents in Google SecOps by connecting host, user, and network events. Reconstruct attack timelines, trace movement between systems, assess affected assets, and organize findings into case notes and investigation reports.

中文简介正在准备中。当前显示英语简介。

• Reconstruct a suspicious host's activity timeline
• Investigate unusual user logins and resource access
• Trace attacker movement between systems

Find and synthesize official Google developer documentation for platforms including Google Cloud, Gemini, Android, and Firebase. Retrieve command syntax, API details, permissions, and product comparisons through Developer Knowledge, then turn the findings into practical technical answers.

中文简介正在准备中。当前显示英语简介。

• Checking gcloud commands and flags
• Looking up API syntax and required permissions
• Comparing Google products and architectures

Review Google Cloud workloads using the Performance Optimization pillar of the Well-Architected Framework. Assess performance requirements and architecture, then get actionable recommendations for resource allocation, caching, independent components, automatic scaling, and ongoing monitoring.

中文简介正在准备中。当前显示英语简介。

• Review resource capacity for expected peak demand
• Assess automatic scaling for traffic spikes
• Review component design for independent scaling

Design and create new Cloud Storage buckets for uses such as backups, media, and AI data. Check project security and name availability, choose storage and protection settings, and produce creation commands or code in the preferred format.

中文简介正在准备中。当前显示英语简介。

• Creating storage for application media
• Designing buckets for sensitive data
• Preparing backup and long-term archive storage

Assess Google Cloud workloads for environmental sustainability using the Well-Architected Framework. Get recommendations on lower-carbon regions, efficient computing and storage, AI energy use, and ongoing emissions measurement with Carbon Footprint.

中文简介正在准备中。当前显示英语简介。

• Reviewing cloud architecture for environmental impact
• Comparing deployment regions by carbon-free energy use
• Reducing energy waste in AI and computing workloads

Design AI agent analytics workflows across distributed tables and documents. Combine Knowledge Catalog for metadata, meaning information about data and its usage rules, with managed Spark processing to produce architecture diagrams, deployment guidance, and validation plans.

中文简介正在准备中。当前显示英语简介。

• Design analytics across data stored in multiple clouds
• Define metadata and governance with Knowledge Catalog
• Plan Data Agent Kit use in VS Code or Antigravity

Evaluate Google Cloud workloads and develop reliability recommendations covering user experience goals, redundancy, monitoring, and recovery. The skill applies the Google Cloud Well-Architected Framework to help identify gaps and plan improvements suited to business requirements.

中文简介正在准备中。当前显示英语简介。

• Reviewing a Google Cloud architecture for reliability gaps
• Setting reliability targets based on user experience
• Planning redundancy and behavior during partial failures

Design security controls for Google Cloud Agent Gateway, covering incoming client requests and outgoing agent tool calls. Produce architecture diagrams, configuration files, deployment commands, and validation scripts using Model Armor, IAP, and Agent Registry.

中文简介正在准备中。当前显示英语简介。

• Design incoming and outgoing agent communication controls
• Prepare Model Armor filters and tool access policies
• Generate scripts to check authentication and allowed tool calls

Inspect and manage Google Cloud IAM policies that grant roles or explicitly deny permissions. The skill prepares policy changes for user approval, supports organization, folder, project, and supported resource scopes, and verifies the resulting policy after execution.

中文简介正在准备中。当前显示英语简介。

• Reviewing existing allow and deny policies
• Adding or removing role bindings for specific identities
• Creating or updating organization, folder, or project deny policies

Implement and debug Google OAuth 2.0 refresh tokens bound to a client key. Covers key generation, signed DPoP proofs that demonstrate key possession, and nonce challenge retries in WebCrypto and JavaScript environments.

中文简介正在准备中。当前显示英语简介。

• Bind Google OAuth refresh tokens to a client key
• Debug DPoP proof signatures and nonce retries
• Plan a backend for a browser application using DPoP

Review Google Cloud workloads against the security principles of the Well-Architected Framework. Identify gaps in access control, network protection, data handling, and security operations, then receive prioritized recommendations linked to relevant Google Cloud products.

中文简介正在准备中。当前显示英语简介。

• Reviewing security during Google Cloud architecture design
• Checking access permissions and network defenses
• Identifying gaps in data protection and security monitoring

Manage temporary access in Google Cloud with Privileged Access Manager. Configure who can request which roles and for how long, maintain access configurations, and handle access requests and approval decisions through guided workflows.

中文简介正在准备中。当前显示英语简介。

• Request temporary access to Google Cloud resources
• Configure eligible requesters and approvers
• Review and approve or deny pending access requests

Guides authentication and access permissions for Google Cloud users and applications. It helps choose credentials for local development, production services, or external clouds, with guidance on short-lived credentials and avoiding downloaded service account keys.

中文简介正在准备中。当前显示英语简介。

• Set up credentials for local Python development
• Configure Cloud Run access to Cloud SQL
• Connect workloads on AWS or Azure to Google Cloud

Diagnoses applications that fail to start or repeatedly crash on GKE, Google's managed Kubernetes service. It examines logs, events, memory use, image pulls, and connectivity, then proposes configuration patches or commands without applying live changes.

中文简介正在准备中。当前显示英语简介。

• Investigate repeated container restarts
• Diagnose memory exhaustion
• Find causes of image pull or scheduling failures

Manage files in Google Cloud's Cloud Storage buckets, the containers that hold stored data. Upload, download, and organize content, configure access and time-limited sharing links, and manage storage lifecycle, costs, and data protection.

中文简介正在准备中。当前显示英语简介。

• Upload, download, and organize stored files
• Share files through time-limited signed URLs
• Review storage classes and lifecycle rules

Review Google Cloud operations and develop guidance for monitoring, incident response, resource sizing, and automated deployments. Use framework-based questions and checklists to identify gaps in production readiness and plan ongoing operational improvements.

中文简介正在准备中。当前显示英语简介。

• Reviewing production readiness
• Planning monitoring and logging
• Improving incident response procedures

Plan and manage Cloud Spanner databases on Google Cloud, design tables and primary keys, write SQL and client code, and investigate slow queries using database statistics to identify resource-intensive operations.

中文简介正在准备中。当前显示英语简介。

• Create Cloud Spanner instances and databases
• Design primary keys and related tables
• Write SQL queries and client library code

Helps individual developers get started on Google Cloud by checking local tools and authentication, selecting or creating a project, and linking billing. It verifies the setup and directs users to specialized guides for their first deployment.

中文简介正在准备中。当前显示英语简介。

• Setting up a first Google Cloud project
• Reusing an existing project for development
• Checking authentication and billing setup

Investigate Google Cloud network problems using traffic logs, performance metrics, and connection path tests. Identify blocked traffic, packet loss, and latency, summarize traffic volumes, or estimate VPC Flow Logs costs.

中文简介正在准备中。当前显示英语简介。

• Investigate blocked traffic and packet loss
• Check latency and throughput trends
• Analyze Cloud NAT port exhaustion