VPC networks, subnets, and Shared VPC
Custom-mode VPCs give deliberate IP planning that auto-mode trades away, and Shared VPC reconciles project-per-environment isolation with the need for one consistent network.
Speaker notes
- A VPC is the global container; a subnet is where IP addresses actually get allocated, scoped to one region — every resource with a network interface lives in exactly one subnet. Custom mode (explicit subnet creation with chosen ranges) is the production default; auto mode's convenience trades away deliberate IP planning a growing network needs.
- Shared VPC lets one host project's VPC be used by resources in multiple service projects — this is the mechanism that reconciles project-per-environment isolation with the fact that all those projects still need to talk to each other over a consistent, centrally-managed network.
- Contrast Shared VPC with VPC Peering on the next section: Shared VPC keeps one team owning the network for everyone under common ownership; Peering keeps two genuinely separate networks independently managed while still connecting privately — and peering is NOT transitive, a common surprise for engineers expecting it to behave like general routing.
Deck map
01
GCP foundations in one line
02
How the ACE exam maps to this course
03
GCP's geography and the project as the unit of isolation
04
Organization, folders, and projects
05
Org policies and how inheritance works
06
Labels, network tags, and resource manager tags
07
Billing accounts, budgets, and cost control
08
gcloud CLI, Cloud Shell, and client libraries
09
Terraform on GCP and the end of Deployment Manager
10
Gemini CLI, Cloud Assist, and Application Design Center
11
Principals, roles, bindings, and policies
12
Primitive, predefined, custom roles, and IAM conditions
13
Service accounts, keys, and impersonation
14
Workload Identity Federation
15
Break-glass access and IAM auditing
16
Choosing a machine family: E2, N4, C4
17
Disks, OS Login, and VM Manager
18
Spot VMs and managed instance groups
19
Autoscaling policies, health checks, GPUs and TPUs
20
GKE Autopilot vs Standard vs the 2026 hybrid option
21
Node pools and pod autoscaling
22
Cloud Run revisions, traffic splitting, and functions
23
Choosing between GKE, Cloud Run, and Compute Engine
24
Cloud Storage classes and lifecycle management
25
Choosing a managed database
26
The managed database lineup
27
Connection pooling, read replicas, and Pub/Sub
28
Backup, regional failover, and CMEK
29
VPC networks, subnets, and Shared VPC
30
Firewall rules, tags, and Cloud NAT
31
Load balancers, Cloud DNS, and Cloud CDN
32
VPN, Interconnect, and private access
33
How a request actually reaches shipment-api
34
Cloud Monitoring: metrics, dashboards, alerts
35
Cloud Logging: router, buckets, and audit logs
36
Trace, Profiler, Error Reporting, and Managed Prometheus
37
How the five Cloud Operations products fit together
38
Readiness checklist