Home Courses Google Cloud Architecture
🌐 Google Cloud 🏗 Solutions Architecture ✔ 2 Levels Available

Google Cloud GCP
Architecture Curriculum

An enterprise-grade, 48-hour master curriculum designed for cloud engineers and solutions architects. Master Google Cloud Resource Hierarchy & Workload Identity, Shared VPC & Cloud Interconnect, Compute Engine MIGs & Serverless Cloud Run, Cloud Spanner & Bigtable, Terraform on GCP, Zero-Trust Perimeter Security (VPC Service Controls), Global HTTP(S) Load Balancing with Cloud Armor, Anthos Hybrid Cloud, Multi-Region SRE Resiliency, GKE Autopilot Event Architectures, and FinOps aligned with Google Associate Cloud Engineer (ACE) and Professional Cloud Architect (PCA).

🎯
Format
Theory + Lab/Assignments (48 Hours)
🏆
Certificate
Arich Certified Google Cloud Architect
Enrol Now →
Course Code
GCP-ARCH
Click a Level to View its Syllabus
L1
GCP-ACE · Associate Cloud Engineer
7 Modules · Core Infrastructure & Terraform
›
L2
GCP-PCA · Professional Cloud Architect
6 Modules · Enterprise Architecture & SRE
›
📄 GCP Cloud Architecture — Associate Level (ACE Aligned)
L1
GCP-ACE
GCP Foundations, Networking, Compute, Storage, Databases & Terraform
01
Resource Hierarchy & Cloud IAM Architecture
▼
1.1 Organization & Security Architecture: GCP Organizations, Folders hierarchy, Projects, Resource Manager APIs
Cloud IAM Roles (Primitive, Predefined, Custom), Service Accounts, Keys & Workload Identity Federation
Hands-on Lab: Build GCP Resource Hierarchy with Custom IAM Roles and Service Account Workload Identity
Mini-Capstone 1: Enterprise Multi-Folder GCP Resource Hierarchy & Governance Structure
02
Virtual Private Cloud (VPC) & Hybrid Connectivity
▼
2.1 Global VPC Networking: Global VPCs, Regional Subnets, Shared VPC (Host & Service Projects), VPC Network Peering, Firewall Rules, Cloud NAT, Private Google Access
2.2 Hybrid Connectivity Options: Cloud Interconnect (Dedicated & Partner), Cloud VPN (HA VPN), Cloud Router, BGP Dynamic Routing
Hands-on Lab 1: Construct Shared VPC Architecture across Multiple Projects with Service Projects Attached
Hands-on Lab 2: Deploy HA Cloud VPN with Dynamic BGP Routing via Cloud Router connecting Simulated On-Premises
Mini-Capstone 2 & 3: Multi-Project Shared VPC Network Infrastructure & Global Hybrid Interconnect Infrastructure
03
GCP Compute Infrastructure & Serverless Cloud Run
▼
3.1 Compute Engine & Serverless: Compute Engine VMs, Custom Machine Types, Managed Instance Groups (MIGs), Regional Auto-scaling, Health Checks
Cloud Functions (2nd Gen), Cloud Run Containerized Serverless Microservices, Eventarc triggers
Hands-on Lab: Deploy Containerized Serverless Microservice on Cloud Run with Regional Auto-scaling MIGs
Mini-Capstone 4: Elastic Containerized Web Application Cluster with Auto-healing
04
Storage Infrastructure (Cloud Storage & Persistent Disks)
▼
4.1 Object & Block Storage: Cloud Storage (GCS) Buckets, Storage Classes (Standard, Nearline, Coldline, Archive), Autoclass
Lifecycle Management Rules, Dual-Region Buckets with Turbo Replication, Persistent Disks (PD-SSD/Balanced), Filestore NFS
Hands-on Lab: Configure Dual-Region Cloud Storage Buckets with Autoclass and Lifecycle Storage Management Policies
Mini-Capstone 5: Resilient Data Ingestion & High-Durability Object Storage Architecture
05
Managed Database Services (Cloud SQL, Spanner & Bigtable)
▼
5.1 Relational & NoSQL Databases: Cloud SQL Multi-AZ High Availability & Read Replicas, Cloud Spanner Global Distributed Instances
Cloud Bigtable for High-Throughput Time-Series & IoT Data, Firestore Document Database
Hands-on Lab: Provision Cloud Spanner Globally Distributed Database Cluster and Test Multi-Region Synchronous Writes
Mini-Capstone 6: Globally Scalable Multi-Region Relational Database System
06
Cloud Operations Suite (Observability & Monitoring)
▼
6.1 Observability & Monitoring: Cloud Logging, Log Routers, Cloud Monitoring Metrics & Alerting Policies
Cloud Trace Distributed Tracing, Cloud Profiler, Cloud Audit Logs (Admin Activity & Data Access)
Hands-on Lab: Configure Custom Monitoring Dashboards, Alerting Policies & Cloud Trace Metrics for Microservices
Mini-Capstone 7: Real-Time Cloud Observability & Alerting Platform
07
Infrastructure as Code (IaC) with Terraform & Cloud Build
▼
7.1 Terraform on GCP: Google Cloud Provider for Terraform, Remote State Management with GCS State Locking
Modular Terraform HCL code authoring, Cloud Build CI/CD automation & Artifact Registry integration
Hands-on Lab: Author Modular Terraform HCL Scripts to Provision Multi-Region GCP Infrastructure via Cloud Build
Mini-Capstone 8: Automated Multi-Environment Terraform Infrastructure Deployment Pipeline
📄 GCP Cloud Architecture — Professional Level (PCA Aligned)
L2
GCP-PCA
Zero-Trust Perimeter, Global Edge, Hybrid Migration, SRE Resiliency & FinOps
01
Security & Perimeter Control (Zero-Trust VPC-SC)
▼
8.1 Zero-Trust Perimeter Security: VPC Service Controls (VPC-SC) Service Perimeters, Ingress/Egress Rules, Access Context Manager
BeyondCorp Enterprise, Cloud KMS (Customer-Managed Encryption Keys), Secret Manager, Cloud Identity Governance
Hands-on Lab: Build VPC Service Controls Perimeter around Sensitive BigQuery & GCS Resources with Access Level Policies
Enterprise Capstone 9: Zero-Trust Enterprise Security Perimeter Architecture
02
Global Network Security & Edge Delivery (Cloud Armor)
▼
9.1 Global Edge & Security: Cloud Load Balancing (Global External HTTP(S) Proxy Load Balancers, Multi-Region Anycast IP)
Cloud Armor Security Policies (OWASP Top 10, DDoS Mitigation, Rate Limiting, Geo-blocking), Cloud CDN Caching
Hands-on Lab: Deploy Global External HTTP(S) Load Balancer with Cloud Armor DDoS & Custom WAF Rules
Enterprise Capstone 10: Edge Security & Global High-Speed Web Delivery System
03
Migration & Hybrid Cloud with Anthos / GDC
▼
10.1 Cloud Migration Framework: Migrate for Compute Engine (vCenter Connector, Waves, Replication), Database Migration Service (DMS)
Anthos / Google Distributed Cloud (GDC), Anthos Config Management (ACM), Service Mesh (ASM) across Hybrid Environments
Hands-on Lab: Execute VM Migration to Compute Engine using Migrate for Compute Engine Toolset & Manage Anthos Cluster
Enterprise Capstone 11: Enterprise Server Migration & Anthos Hybrid Management Infrastructure
04
High Availability, SRE Principles & Disaster Recovery
▼
11.1 SRE & Resilient Design: Designing for 99.99% Availability, Multi-Region Active-Active Architectures, Sub-Minute RTO/RPO SLAs
Chaos Engineering, Error Budgets, Service Level Objectives (SLOs), Automated Cross-Region Failover Architecture
Hands-on Lab: Simulate Regional Failover and Test Multi-Region High-Availability Recovery Strategy with Anycast Routing
Enterprise Capstone 12: Mission-Critical Active-Active Resilient Multi-Region Infrastructure
05
Modern Cloud-Native, GKE Autopilot & Streaming Data
▼
12.1 Kubernetes & Event Architectures: Google Kubernetes Engine (GKE) Autopilot, Workload Identity, Horizontal Pod Autoscaling
Cloud Pub/Sub Messaging, Cloud Dataflow (Apache Beam) Stream Processing, Cloud Eventarc Enterprise Events
Hands-on Lab: Construct Event-Driven Streaming Data Pipeline using Pub/Sub, Dataflow, and GKE Autopilot
Enterprise Capstone 13: Real-Time Event Processing & Cloud-Native Analytics Engine
06
FinOps, Cost Optimization & Major Program Capstone
▼
13.1 GCP Cost Optimization: Cloud Billing Management, Committed Use Discounts (CUDs - Resource & Spend-based), Recommender API
BigQuery Billing Export, Custom Cost Allocation Labels, Looker Studio FinOps Dashboards, Continuous Optimization
Hands-on Lab: Configure BigQuery Billing Export and Build Looker Studio FinOps Cost Optimization Dashboard
MAJOR PROGRAM CAPSTONE (GCP): Comprehensive Multi-Region GCP Enterprise Architecture, Security, Migration & FinOps Blueprint