Chapter 1 of 4 · Google Cloud Associate Cloud Engineer
Setting up a cloud solution environment
Resource hierarchy, org policies, IAM, Cloud Identity, APIs, quotas, locations, observability and billing.
- 4topics
- 16 minfast track
- 2diagrams and exhibits
- 20%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Resource Hierarchy and Organization PoliciesACE resource hierarchy: organization, folders and projects, standalone organizations, organization policy constraints…Diagram4 min
- 2IAM Roles, Cloud Identity and Workforce Identity FederationGranting IAM roles in a project, managing users and groups in Cloud Identity manually and automatically, and configuring…4 min
- 3APIs, Quotas, Locations and Asset InventoryEnabling APIs, observability setup, quotas and increases, product availability by location, networking, Cloud Asset Inventory and…4 min
- 4Billing Accounts, Budgets and ExportsCreating Cloud Billing accounts, linking projects, billing roles, budgets with threshold alerts and Pub/Sub, and exporting…Diagram4 min
About this chapter
What this chapter covers
Before anything is deployed, the environment must be organized, secured and paid for. This section is worth about 20 percent of the Associate Cloud Engineer exam. It covers setting up cloud projects and accounts (resource hierarchy, organization policies, IAM roles, Cloud Identity, APIs, observability, quotas, standalone organizations, networking, locations, Cloud Asset Inventory, Gemini Cloud Assist and Workforce Identity Federation) and managing billing configuration (billing accounts, linking projects, budgets and alerts, billing exports).
Questions are practical: which command, console setting or resource meets the requirement with the least effort and the least privilege.
How the topics fit together
- Resource hierarchy and organization policies covers organizations, folders, projects and policy constraints.
- IAM roles, Cloud Identity and Workforce Identity Federation covers granting roles, managing users and groups, and federating external identities.
- APIs, quotas, locations and asset inventory covers enabling APIs, quotas, product availability, observability setup, Cloud Asset Inventory and Gemini Cloud Assist.
- Billing accounts, budgets and exports covers billing accounts, linking, budgets with alerts and exports to BigQuery.
Grant roles to Google groups, not individual users, and at the lowest level of the hierarchy that works. The exam rewards least privilege and low administrative effort together.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples, commands and tables.
- What to remember for the exam: the facts to memorise and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Google Cloud Associate Cloud Engineer question bank has 661 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Google Cloud. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.