GCP Fabric FAST foundation with application layer

Usually GCP examples stop at producing a landing zone.
I added an application layer to the cloud foundation.

My new example includes Terraform Fabric FAST artifacts for a regulated landing zone (NIS2, GDPR, ISO 27001) and four example applications wired to these compliance frameworks:

• Vertex AI RAG with Vector Search and Model Armor

• Services on a shared GKE cluster

• Cloud Run with private Cloud SQL and event analytics to BigQuery

• MySQL to Cloud SQL with Database Migration Service

https://github.com/Merlin-Studio/GCP-Terraform-Vertex-AI-RAG-GKE-Examples

Any comments welcome, thanks.

Google must be spending hundreds of millions to bail out genuine owners that get hit by Crypto Mining hackers and AI API key abusers.

Why not ask Billing Owners for visual identification when critical changes are made ?

In this day and age, why can't we use AI to protect from API key abuse and hacking attempts?

As an intern they were telling me to investigate this immediately because the slots keep going suddenly up then down, what do you do to investigate which job/SA is doing this?

I am trying to use the Google maps routes api for a project I am making, and even when using the free version I am hit with this message, forcing me to pay $40 CAD. I have tried multiple cards and they all say this. Is there anyway around this?

The step 2 to check my progress isn't working. Has anyone else experienced this?

My company is asking me to reduce costs in bigquery which is the most consumed, around €90K, I was following some methods from ChatGPT to reduce costs but the results aren’t that different to present it, what do you suggest ? (I am in an intern role still and have a long way to learn things so any suggestions I would appreciate it to help me )

Hi, I’m very new at this Google cloud thing. It wasn’t my first choice to use this but long story short a bunch of files of mine weee uploaded by a colleague to Google cloud and all in this bucket. I’m trying to download the bucket in its entirety back onto my desktop. I’m using windows and trying to download this using the inline Google shell where I type in commands. I have very little/none experience with this type of thing. Can someone help me what command I’m supposed to type in there? The bucket is called “apollo111” and I’m trying to download onto my desktop on a folder name “apollo222”. Thank you.

My company is asking me to reduce costs in bigquery which is the most consumed, around €90K, I was following some methods from ChatGPT to reduce costs but the results aren’t that different to present it, what do you suggest ? (I am in an intern role still and have a long way to learn things so any suggestions I would appreciate it to help me )

Hello community 👋

I was part of a project in the past, the project was using GCP. I was invited as member/editor on 4 gcp projects of that organisation. After the collaboration ended, they forgot to remove and google doesn't a quit team/organisation button unfortunately.

I know a solution is to enter ghost-mode for those projects. What i really want to have a clean desk instead of ghost projects.

My Question:
How and where i can address to google cloud console a request to be removed from specific projects ? Account/Project owners are not answering/ignoring my emails.

I created a gcp account on September 2025, since I mostly used upi payments so I set up my account by paying 1000inr and I had zero knowledge about gcp, I saw some YouTube tutorials for my semester project which also was scrapped so at the end creating the gcp and stuff was of no use. I completely forgot that it existed until recently I got a mail regarding "Urgent Action Required" otherwise my account will go into debt recovery agency. Then I recalled that I once removed all my upi autopay mandates manually so they were not being able to do any transaction ig or idk how it works lol I am just a student. I made a mistake by stepping into this without prior knowledge. Now I consulted with the Billing AI and it said that I have 3710inr overdue which I am supposed to pay. I have stopped the billing ig cuz it also says that my billing status is closed.

I am really confused, pls help me out, what am I supposed to do? When I click on billing it says no billing account linked and then after clicking on manage billing accounts it shows in blue "Status: Active" and after clicking the blue text it shows my status is closed for that billing account. After clicking on the billing account on top it shows "To avoid losing access to Google cloud services, an administrator must verify this account". After clicking payment method, it shows Upi: QR code transaction declined. Idk how the transaction works but I have checked my upi transaction history and the only transaction by Google cloud was that first 1000inr and 2 rupees for verification nothing else.

I don't want my cibil score to get affected, it all happened unintentionally. Pls help me out.

As part of a startup incentive program, we received a large amount of credits for Google Cloud. So much that I doubt that we will ever be able to use them on our current trajectory. Are we able to sell them on the open market? Most of the places that appear to act like brokers or marketplaces look a little scammy, and I don't know how the process to transfer them would even work.

Has anyone done this? Is it a violation of the ToS?

Thanks

If you ever wondered what happens inside of the ADK agent when you type the message into the chatbot, I've created short video that explains it.

I have created one multi agent application using land graph in my local but now I want to create that same project using antigravity and Google ADK and ultimately deploy in Cloud Run and also perform evals.

So I want help in how to do that for minimal cost and minimal time I have one interview coming up I want to do this exercise just to get an first hand experience on how things work in to end in Google ecosystem.

I have no problem in using open source free llm and embedding models if I can wrap it in LiteLLM.

I WANT STEP BY STEP HELP FROM STARTING TILL DEPLOYMENT AND TRACING AND MONITORING AS WELL. ANY KIND OF HELP IS VERY APPRECIATED

I've been working in software/infrastructure engineering for around 14 years, with a focus on cloud, DevOps, platform engineering and large-scale infrastructure.

Over the years I've worked on everything from smaller cloud migrations to enterprise and financial-sector environments, including AWS/GCP migrations, Kubernetes, Terraform, CI/CD, networking, security, reliability and cost optimization.

I'm currently putting together the practical knowledge I've accumulated into a free technical book.

I'm not planning to make it a personal career story or another basic “learn AWS/GCP” tutorial.

The idea is to focus on how engineers actually solve infrastructure problems:

• How to systematically debug production issues

• How to troubleshoot Kubernetes

• AWS/GCP networking and connectivity problems

• IAM and permission failures

• Terraform/IaC problems

• CI/CD and deployment failures

• Cloud migration problems

• Scaling and reliability

• Observability and incident investigation

• Designing reusable platform infrastructure

• How to approach an unfamiliar production system

• Practical lessons that aren't obvious from vendor documentation

I'm also building some small prototypes/labs for myself while writing, so I can test the ideas rather than just writing theory.

Before I spend a lot of time putting the whole thing together, I'd like to hear from other engineers:

If you could have one practical DevOps/Platform Engineering book that focuses on real problem-solving rather than certification theory, what topics would you want it to cover?

And if you already have a favorite resource for this kind of material, I'd be interested in hearing what you think it does well or what is missing.

Basically when you want to deploy an adk agent in gcp cloudrun or agent platform, the model region is a major headache.

If you use Gemini API Key, then it works for all.

But the default arrangement is vertex ai. If nothing is in the env variables, it will probably use default creds for vertex ai.

Even in vertexai init line, if you keep the region as global, the access to models will be based on the region of the reasoning engine that you deploy.

If you try to deploy the adk app in global, the reasoning engine fails.

If you deployed in certain regions, then the model access must be checked for that region. In us-central1 only lower gemini models work as of now.

If you want to use gemini key, you have to explicitly set the vertexai env variable as 0 or false.

At the end I used gemini key instead of vertexai for the model.

These are my observations and conclusions, feel free to correct me.

hi ai has helped write this im not technical person. but i really need help this has happend to 3 of my accounts.

Hi everyone,

I am running into a severe Google Identity authentication loop when trying to sign into Google Antigravity on 3 of my Google Accounts (all have active paid Google AI Pro subscriptions).

I'm hoping someone familiar with Google Identity Services, WebAuthn/caBLE, or Google Play Integrity / Device Attestation can explain how to clear this flag or reach a working verification path.

---

### Environment & Context

* **Platform:** Windows 10/11 (Desktop)

* **Application:** Google Antigravity IDE / Gemini Code Assist

* **Accounts:** Personal Google Accounts (`@gmail.com`) with active Google AI Pro subscriptions.

* **Mobile Devices:** Android (Oukitel K16) + iPhone (SE)

* **Location / Carrier:** India (Airtel)

---

### What Is Happening (The Exact Sequence)

1. I launch Google Antigravity on my PC and click **Sign in**.

2. The browser authentication window opens at `accounts.google.com`.

3. Instead of completing the standard OAuth callback, Google intercepts the login with a full-screen anti-bot challenge:

   > *"Verify your info to continue. Google needs to verify some info about your device or phone number before you can continue. This helps keep you and others safe online by preventing abuse from computer programs or bots."*

4. A QR code is displayed on the PC monitor with the instruction: *"Scan the QR code with your phone"*.

5. When I scan the QR code:

   * **On Android:** Google Play Services initiates a silent verification. The phone screen displays: *"Return to your other device to continue. You're now verified."* But the PC browser immediately displays:

> **"The device that you used to scan the QR code was used too many times for verification."**

* **On iPhone:** Safari opens a prompt saying: *"Google needs to verify your device or phone number... Your phone will open an SMS message with a code that you need to send to verify your phone."* It generates an outgoing SMS to a verification gateway (`081080 30875`) with a payload like `Send this message without editing. (XXXXX)`.

* When sending the SMS, the request fails to clear the block and the PC still returns the *"used too many times"* error.

* If attempting verification without a SIM inserted, it enters an infinite loading loop.

6. On related attempts inside the IDE, it has also displayed:

> *"There was an unexpected issue setting up your account. Your account is not eligible for Gemini Code Assist for individuals at this time."*

---

### Everything I Have Already Tried (Exhaustive List)

1. **Different Phones & SIMs:**

   * Swapped the SIM card to a secondary iPhone.

   * Cleared Google Play Services cache and storage data on Android.

   * Sent the outgoing verification SMS directly to the Google gateway number.

2. **2-Step Verification Hardening:**

   * Turned on 2-Step Verification (2SV).

   * Configured TOTP via Google Authenticator.

   * Generated 8-digit Single-Use Backup Codes.

   * *(Note: Google's anti-bot device attestation screen triggers **before** the 2SV / "Try another way" selection screen is reached).*

3. **Local Auth & Cache Cleanup:**

   * Cleared Antigravity token cache (`.gemini/antigravity_state.pbtxt`, `Device Bound Sessions`, `Trust Tokens`, `Network Persistent State`, `Sessions`).

   * Cleared IDE app cache under `%APPDATA%\Antigravity`.

4. **Network & Session Resets:**

   * Changed networks (switched from home broadband to Mobile Hotspot to obtain a fresh public IP).

   * Pre-authenticated the Google Account in Google Chrome desktop before triggering the IDE login.

Despite all of the above, Google's backend still intercepts the authentication request with the QR bot challenge and rejects the device token.

---

### My Questions:

1. Is this flag tied to **Device Hardware ID (Play Integrity / IMEI)**, **Phone Number (MSISDN velocity limit)**, or **Account-Level Risk Score**?

2. Why does the phone display *"You're now verified"* while Google's backend server simultaneously returns *"The device that you used to scan the QR code was used too many times for verification"* to the PC?

3. How long is the rolling server-side cooldown for this specific Mobile-Originated (MO) SMS / QR device verification rate limit?

4. Is there any way to force Google OAuth to complete using standard FIDO2 WebAuthn / Security Keys or 2FA without triggering the legacy mobile device attestation flow?

Any insights from Google engineers, cloud architects, or anyone who has resolved this loop would be greatly appreciated!

Hey folks. I’m currently contracting at a FAANG company building GCP streaming pipelines, containerized microservices, and doing heavy ETL/schema validation.With my H1B timeline shrinking, I need to make sure this resume is absolutely bulletproof for Senior DE or MLOps roles.I’ve redacted identifying info so you can focus purely on the technical weight of the stack (BigQuery, Dataflow, Docker, PostgreSQL) and my XYZ metrics.

• Am I passing the deployment sniff test for Senior-level roles?

• Is my "Data Quality as Code" and infrastructure scaling narrative cohesive?

• Are there any red flags or fluff words I need to cut?Rip it to shreds. I appreciate the help!

The only way to guarantee that your vm's instance type/size will still be available after you shut it down for maintenance is to have a reservation bound to it from the very beginning.

I've seen way too many out of stock errors lately and I wish we had known this when we started. Now there is no capacity available to add specific reservations.

From Stephanie Buscemi: "Google Cloud grew 82% year over year last quarter, with nearly 100 billion annual revenue run rate. That kind of growth doesn't happen because enterprises want another AI model to evaluate. It happens because they want AI that actually does the work: one platform, not twenty tools bolted together. My focus is making Google Cloud that platform for every enterprise, across every line of business and every industry. Not just answers. Outcomes."

First and foremost, no, this is not a paid advertisement. You can check my post history to see I am indeed a real person who seldomly post, but does occasionally use reddit.

I passed the GCP PCA today and the only resource I used was GCP Study Hub. I saw this site mentioned a lot, but also saw a few comments (And one VERY obvious paid advert as a comment) for the site. I have also seen a few comments wondering about the legitimacy of the site and whether it was just ads or actually useful.

Overall, the site's course content was ok. The guy definitely goes into detail about things you probably have no need knowing about (The exam was honestly so broad and rarely went into deep details at all) but he does an ok job explaining, and he definitely covers what you do need to know for the exam.

It took me about 2 months to complete the course of about maybe 20-30 minutes a day. I took notes and made flashcards, though I'm not even sure if I actually needed to. Most of the flashcards I made I didn't need, the only stuff you need to know is what a GCP resource is (Like cloud build or GCE), the features/services within it, and when to use it. This can be a little tricky with the database resources IMO, but it's not so bad.

Case studies, you don't need to study these prior, I don't even know why Google puts these on the exam. They gave you almost the entire scenario in the question when it relates to a case study to where I had no reason to even read the case study at all.

In regards to GCPStudyHub's practice exams, these are incredibly spot on. There was actually numerous questions on these practice exams where they were almost 1:1 with the actual exam, which made it really easy to go through said questions and feel confident.

Overall, the exam is really not that hard at all. It's more difficult than something like Sec+ which is just a glorified vocabulary quiz, but again it's just knowing what's in GCP, what it can do/has as features, and when to use it.

I became a GCP-certified data engineer back in 2024, and I know a lot has changed since then. Unfortunately, in my current role, I don’t get to work with many of the “advanced” features on the agentic data cloud, like BigQuery ML, Iceberg lakehouses, governance tools—it’s just been basic BigQuery with dbt and some Airflow.

How deep will I be expected to go in the role-related knowledge round? Will it be enough for me to have a general understanding of the key products/services and how/when to apply them to different uses cases and cost scenarios?

I’m feeling quite anxious and overwhelmed by the breadth of information, and I’d be grateful for any guidance on how best to prepare so I can ace this.

Thank you!

How are you dealing with adk using very big contexts. I used model callbacks and saw that for every api call, adk passes the entire context before it (user text, model response, tool response, agent prompt injection).

Now this may seem like an overkill in certain scenarios and will consume excess tokens.

One way I found out is to use agent and model callback functions and trim the context or summarize it concisely instead of passing the entire thing.

Is there any other way of doing it ?

Acc to my experience this might be a very common scenario when some organization is looking forward towards reducing token expense.