Intrigued by the art of cloud architecture? Discover how to design, develop, and manage robust, secure, scalable, and dynamic solutions on Google Cloud as you prepare for the Professional Cloud Architect exam!
Automation is essential for moving applications from development to production efficiently. Cloud Build executes builds on Google Cloud and produces artifacts like Docker containers, while Artifact Registry provides a central place to manage those container images and packages. Cloud Deploy then automates delivery to target environments in a specific sequence, helping streamline the application lifecycle and reduce manual errors.
Choosing the right platform depends on whether you use containers or serverless code. Google Kubernetes Engine (GKE) is ideal for complex, containerized workloads, while Cloud Run offers a serverless environment that scales automatically. App Engine is another fully managed environment for hosting web applications. Architects must select a deployment archetype, such as regional or multi-regional, to ensure high availability.
To minimize risk during updates, teams use progressive rollouts to deploy changes gradually across the infrastructure. A Canary Deployment releases updates to a small group of users before a full rollout, while a Blue-Green Deployment switches traffic between two identical environments to avoid downtime. Cloud Load Balancing can redirect traffic to healthy instances if a specific zone or region fails, and Autohealing uses health checks to automatically recreate unhealthy VMs, ensuring the system repairs itself.
Disaster recovery planning is vital for maintaining business continuity during major infrastructure outages. Architects define Recovery Time Objective (RTO), the maximum acceptable time to restore service, and Recovery Point Objective (RPO), the maximum amount of data loss an application can tolerate. An Active/Passive strategy uses a standby environment that mirrors the primary one, and even the CI/CD pipeline itself needs a backup strategy to ensure updates can continue during a disaster.
Event-Driven Architectures often rely on asynchronous synchronization, a design pattern where data updates are sent between locations with a slight delay. This approach is vital for decoupling system components, which ensures that one part of the system can function independently of others. By using these patterns, architects can improve fault tolerance across different cloud regions or data centers.
When using an asynchronously replicated database, there is a risk that the same data might be changed in two places at once. To handle this, developers must implement a conflict resolution strategy to determine the final consistent state of the data. This is a core part of managing distributed services where data must eventually match across all deployment locations, ensuring the system remains reliable even when services are spread across multiple clouds.
Cloud bursting is a strategy used to increase capacity by moving workloads to a secondary cloud during peak times. This process often uses partitioned data to keep different parts of the application organized and efficient. Architects use these methods to enhance scalability by handling more users without slowing down, improve efficiency by using resources only when needed, and maintain performance with low latency for users in different locations.
Apigee and Cloud Endpoints are primary platforms for API management that help developers build, secure, and scale application interfaces. These services act as a proxy layer, providing an abstraction that hides the complexity of backend services from users. By using this facade, architects can ensure that backend systems remain protected while exposing necessary data to external consumers, which is essential for maintaining a clean and manageable application architecture.
To maintain system health, Apigee uses Traffic Management policies to control how many requests a service receives. The SpikeArrest policy prevents sudden traffic surges from crashing servers, while the Quota policy limits usage for specific consumers. Security Policies manage access control using OAuth 2.0 and API keys, and these features together guarantee high availability and resilience by protecting resources from being overwhelmed.
When designing complex systems, the Tiered hybrid pattern allows organizations to host a frontend in Google Cloud while keeping the backend on-premises. This approach uses an API gateway to facilitate secure communication between these different environments, which is a critical strategy for modernizing applications without moving all data to the cloud at once. This design ensures that performance-sensitive components are placed closer to the end users.
Security is further enhanced by integrating Google Cloud Armor as a Web Application Firewall (WAF) to block common internet threats like SQL injection. Cloud Service Mesh helps manage communication and traffic between microservices in a distributed architecture, while Load Balancing distributes incoming traffic to ensure high performance and reliability. These tools provide a defense-in-depth approach by securing both the network perimeter and internal service traffic.
Finally, services like Workflows and Application Integration help orchestrate complex processes across different cloud products. These tools allow for the seamless connection of decoupled services and automate manual tasks within the application lifecycle, enabling architects to build highly efficient and scalable cloud solutions that meet modern business requirements.
Prepare and test your skills
Prepare and test your skills
A Canary Deployment releases updates to a small group of users before initiating a full rollout, while a Blue-Green Deployment switches traffic between two identical environments to avoid downtime. Both approaches are progressive rollout strategies designed to minimize risk during updates.
Recovery Time Objective (RTO) represents the maximum acceptable time required to restore a service, whereas Recovery Point Objective (RPO) defines the maximum amount of data loss an application can tolerate. Both metrics are core requirements when designing disaster recovery strategies for business continuity.
The SpikeArrest policy protects servers from crashing due to sudden surges in traffic, while the Quota policy limits total request usage for specific consumers. Both policies manage incoming traffic to prevent backend resources from being overwhelmed and ensure high availability.
The tiered hybrid pattern enables application modernization by hosting the frontend in Google Cloud while maintaining the backend on-premises, using an API gateway to facilitate secure cross-environment communication. This approach allows organizations to modernize systems without migrating all data to the cloud at once while positioning performance-sensitive components closer to end users.
A global retail company is architecting an event-driven transaction processing system on Google Cloud to handle millions of checkout events per minute during seasonal flash sales. The event processing workload runs on Google Kubernetes Engine (GKE) worker pods.
The architecture must meet the following requirements:
Which Pub/Sub consumption pattern and configuration should the cloud architect implement?