Tag

#google-cloud

Tagged “google-cloud”

11 articles

Google opens Gemini Enterprise Agent Ready as a free training path for agents in production

Google Cloud has announced Gemini Enterprise Agent Ready, a no-cost training bundle of twelve skill badges on skills.google paired with a month-long hackathon on Devpost. The angle for CI/CD teams is that the courses aim at operating agents, not demoing them.

Aug 10, 2026 · Maya Okonkwo Cloud security

Google Cloud spells out its abuse-response ladder: throttle, isolate, suspend

A Google Cloud security-team post consolidates how the platform reacts when a tenant workload starts leaking credentials, mining crypto, or burning a stolen API key. For pipeline owners the operational read is the escalation path, and how easily a shared project can end up on it.

Aug 8, 2026 · Maya Okonkwo Security & supply chain

AlloyDB puts agents behind IAM groups so nobody has to share a database password again

Google's managed Postgres is adding IAM group authentication in preview, mapping Cloud Identity and Workforce Identity Federation groups to database roles. The point is not the passwordless slogan: it is that AI agents can finally carry a real end-user identity all the way to the row filter.

Aug 1, 2026 · Tomás Vega Platform engineering

Google's borderless lakehouse wires AWS, Databricks and Snowflake catalogs into one Iceberg REST surface

Google Cloud has pushed a preview of catalog federation that lets BigQuery and Managed Spark read AWS Glue, Databricks Unity Catalog and Snowflake Horizon through an Iceberg REST catalog, and shipped an open-source Data Agent Kit that hands the same tables to MCP-speaking agents. For pipeline teams the practical shift is that the protocol coding agents already talk now reaches a synchronised view of a multi-cloud data estate.

Jul 30, 2026 · Priya Nair Platform engineering

Cloud Run moves regional failover out of the runbook and into the load balancer

Google Cloud has added readiness probes and an aggregated service-health signal that lets Cloud Run automatically shift traffic away from an unhealthy region within seconds, per a July 20 post. For teams carrying a manual regional failover runbook, the operational read is which step leaves the on-call rotation.

Jul 27, 2026 · Maya Okonkwo Platform engineering

Google's pitch: put Agent Substrate on top of GKE Agent Sandbox, and call it the AI-agent runtime

Two months after GKE Agent Sandbox went GA in May 2026, Google introduced a follow-up called Agent Substrate in the same post. The New Stack's read is that Google now wants Kubernetes to be the runtime for AI agents on the primitives GKE already uses for production services.

Jul 26, 2026 · Maya Okonkwo Security & supply chain

Time-to-exploit went negative. Mandiant maps where AI helps the vulnerability queue, and where it fails silently.

Google Cloud's Mandiant team pins mean time-to-exploit at negative seven days and publishes a blueprint for aiming large language models at the vulnerability pipeline. The failure modes it lists are the ones that let the exploit through.

Jul 22, 2026 · Tomás Vega Security & supply chain

CodeMender opens in preview: Google Cloud puts an agent on the security fix

Google Cloud has opened a preview of CodeMender, a managed agent that both scans code and proposes remediations, delivered through the Gemini Enterprise Agent Platform and AI Threat Defense. It puts a fresh trust question in front of every CI/CD team: which security fixes are safe to auto-apply, and where does a human still sign?

Jul 21, 2026 · Tomás Vega Security & supply chain

Serverless without a front door: Mandiant's hardening checklist for exposed Cloud Run functions

Google Cloud's Mandiant team published a hardening guide for teams shipping public serverless functions that carry no authentication. Its recommendations put a load balancer, per-function IAM, and pipeline-side security scanning between the internet and your code.

Jul 20, 2026 · Tomás Vega Security & supply chain

k8s-aibom writes down the AI your cluster is already running

Google Cloud open-sourced k8s-aibom, an unprivileged Kubernetes controller that watches the cluster API for inference runtimes and agent frameworks and emits OWASP CycloneDX ML-BOMs from what it finds. The bet is that shadow-AI inventory is easier to solve from outside the workload than by asking developers to fill in a form.

Jul 14, 2026 · Tomás Vega Platform engineering

Google puts Cloud Run sandboxes into preview for AI-generated code

Google Cloud has moved Cloud Run sandboxes to public preview, positioning them as a runtime for AI-generated code and untrusted binaries that a pipeline would otherwise be asked to trust with host access and cloud credentials.

Jul 10, 2026 · Maya Okonkwo