< ciso
brief />
Tag Banner

All news with #google cloud tag

522 articles · page 3 of 27

Replicating SQL Server Logins to Cloud SQL

🔒 This post explains why Database Migration Service (DMS) does not migrate SQL Server instance-level logins and how to migrate them safely. It outlines the security, compliance, and identity-modernization reasons behind that design decision and shows a practical three-step approach using Microsoft's sp_help_revlogin script. The guide covers generating hashed-password CREATE LOGIN statements, applying them to Cloud SQL, and resolving orphaned users, while recommending migration to Customer-Managed Active Directory where possible.
read more →

Airtel and Google Cloud’s IPL 2026 Broadcast Architecture

📺 Airtel partnered with Google Cloud to deliver flawless live streaming for IPL 2026 across 74 matches, processing several hundred petabytes of egress and peak traffic in the multi-Tbps range. By leveraging Media CDN and deep edge localization within India, Airtel served 99.9% of tournament traffic locally with a cache hit ratio above 98% and p99 latency under 300 ms. Proactive operational practices, including Pre-tournament readiness reviews and Monitoring as a Service, enabled real-time support and ensured consistent playback during peak concurrency.
read more →

Spanner relaxes DML mutation limits for transactions

🛠️ Google Cloud Spanner now allows transactions to include any number of DML statements provided each individual statement produces fewer than 80,000 mutation mods. This change moves the previous 80,000 cumulative transaction-level cap to a per-statement limit, enabling larger, more natural transactions without code changes. Existing client libraries remain compatible, though longer transactions may increase lock contention and aborts, so developers should monitor CommitStats and optimize large operations.
read more →

KDDI Optimizes RAG Performance with ADK

📘 KDDI developed Buffmee, a consumer-facing Retrieval-Augmented Generation (RAG) app, to provide grounded, trustworthy AI-assisted learning across books, magazines, and web media. Facing latency and hallucination challenges, KDDI worked with KDDI iret and Google Cloud teams to implement automated evaluation using Gemini Enterprise, BigQuery Agent Analytics, and the Agent Development Kit (ADK). These optimizations reduced response latency by 38% and improved TTFT by nearly 18%, while boosting groundedness by 25% through systematic testing and prompt modularization. The result is a faster, more reliable experience that preserves content trust and compliance.
read more →

Cloud Security Index Shows Provider Risk Divergence

🔍 Intruder's 2026 Cloud Security Index analyzed misconfiguration data from 3,000 organizations across AWS, Azure, and Google Cloud and found that risk profiles differ dramatically by provider. Weak IAM and missing logging are nearly universal, while exposed services, permissive firewalls, weak encryption, and misconfigured services vary widely. AWS shows high prevalence in exposed services and permissive network controls, Azure's top issues center on storage and identity, and Google Cloud's dominant problems are IAM-related. Larger organizations generally have fewer exposure-style misconfigurations but worse IAM issues, and midmarket firms take the longest to remediate.
read more →

Google Cloud VPC-SC Policy Intelligence Enhancements

🔒 Google Cloud introduces enhanced VPC Service Controls policy intelligence features — the Violation Analyzer and Violation Dashboard — to simplify perimeter management and reduce MTTR for access denials. BlackLine uses these tools to protect sensitive financial data, troubleshoot violations with a single token, and adapt perimeters via ingress/egress and access-level adjustments. The tools provide unified visibility, contextual reports, and filtering to support deployment, monitoring, investigation, and policy refinement.
read more →

Google Cloud Run instances for long‑lived workloads

🆕 Cloud Run instances provide a low‑cost, dedicated compute option for long‑lived, stateful workloads such as personal AI agents. Unlike Cloud Run services that scale to zero, instances run a single, continuously running replica (up to 7 days) with a stable HTTPS URL, automatic restart policy, and the ability to stop and resume. They use shared vCPU with burst budgets to keep costs predictable — for example, 1 vCPU and 1 GiB continuously for 30 days costs $5.70 — and are currently available in preview.
read more →

Google Cloud introduces Fault Injection Testing (Preview)

🛠️ Google Cloud announces Fault Injection Testing (FIT) in public preview to help teams automate failure testing and validate application resilience. FIT lets you create experiment templates to inject targeted faults such as Cloud SQL failovers and degraded Layer 7 traffic, with an automated dry run to verify affected resources and permissions. Experiments run for a defined duration with stop-and-revert controls, and Google recommends using FIT in non-production during preview. Access is via the Cloud console, gcloud CLI, or REST API; request preview through your account team.
read more →

Uber reduces hybrid AI risk with Cloud Interconnect

🚦Uber adopted application awareness on Cloud Interconnect to prioritize business-critical traffic across its hybrid networks. As an early design partner, Uber deployed the feature in multiple locations to classify and queue application traffic using DSCP marking, protecting low-latency services during congestion. The approach improved bandwidth utilization, reduced the need for costly overprovisioning, and enabled safer migration of strategic workloads to Google Cloud.
read more →

Scaling OKF Bundles Using Knowledge Catalog

📘 This article explains how to publish and govern Open Knowledge Format (OKF) bundles across an organization by mapping OKF concepts onto Google Cloud's Knowledge Catalog. It outlines a one-time setup and a single push workflow using sample code and the kcmd CLI to register EntryGroups, EntryTypes, and an okf AspectType carrying OKF v0.2 signals. The approach makes bundles discoverable, searchable, and governed by existing IAM policies alongside BigQuery, Cloud Storage, and other cataloged resources.
read more →

Flexible billing and cost controls for AI agents

🧾 Google Cloud announces expanded billing flexibility and cost controls for agent workloads across Gemini Enterprise and developer tools like Google Antigravity and Android Studio. New options include pay-as-you-go consumption, pooled quotas, Flexible Savings Plans with 10–20% token discounts, and deferred execution pricing for off-peak discounts. Admins gain consolidated spend guardrails, hard monthly caps, anomaly detection, and centralized billing visibility to align FinOps with agent-driven innovation.
read more →

Best practices for dynamic capacity management

🚀 This post outlines practical strategies for dynamic capacity management to support large-scale AI and agent workloads, emphasizing predictable cost and performance. It describes three implementations: scheduling capacity for planned events, creating automated fallback plans with managed instance groups, and automating the lifecycle with GKE and Custom ComputeClasses. The guidance highlights tools like Dynamic Workload Scheduler, instance flexibility, Spot VMs, Hyperdisk, and dynamic resource allocation to improve utilization and resilience.
read more →

AlloyDB ScaNN four-level tree boosts vector search

🔍 AlloyDB's ScaNN index now supports a four-level tree (preview) to scale vector search to over 10 billion vectors while preserving low latency and high recall. As a managed PostgreSQL-compatible service, AlloyDB pairs Google's infrastructure with an analytical engine optimized for agentic AI workloads. The new architecture reduces compute intensity through hierarchical partitioning and improves memory efficiency via balanced tree shapes and sampling optimization, targeting <= 51 ms p95 latency at 95% recall.
read more →

10 questions startups should answer before scaling AI

🔍 This post outlines ten essential questions startups must address when moving from AI prototype to production on Google Cloud. It contrasts Google AI Studio for rapid prototyping with the Gemini Enterprise Agent Platform for enterprise controls, and emphasizes sequencing migration before you have real users. The article highlights operational pitfalls—API key leaks, IAM ownership gaps, and quota 429s—and provides practical checklist items, role guidance, and mitigation strategies including regional endpoints, retries, and consumption models.
read more →

Google Cloud announces quantum-safe key import preview

🔒 Google Cloud announced the preview of quantum-safe key import for software-based keys in Cloud KMS, extending its post-quantum offerings including quantum-safe digital signatures and KEMs. The feature uses hybrid public key encryption (HPKE) to wrap keys in a quantum-resistant envelope during transit, mitigating store-now, decrypt-later risks. The import workflow integrates with existing Cloud KMS APIs and supports client-side wrapping via libraries like Tink and OpenSSL, with options for X-Wing, ML-KEM-768, or ML-KEM-1024 and AES-256-GCM for symmetric wrapping.
read more →

Google Cloud Named Leader in 2026 CNAP Magic Quadrant

🚀 Google Cloud was recognized as a Leader in the 2026 Gartner Magic Quadrant for Cloud-Native Application Platforms for the third consecutive year, reflecting its focus on developer-centric, application-first capabilities. The platform unifies serverless, containerized, and agentic deployment options and integrates generative AI tools for rapid prototyping, one-click deployments, and managed MCP servers. Google highlights features like the Gemini Enterprise Agent Runtime, Application Design Center, Antigravity orchestration, and Cloud Run enhancements for secure, scalable agent and app hosting.
read more →

Serverless Apache Spark on Google Cloud: Architecture

🚀 This technical guide explains Google Cloud’s Managed Service for Apache Spark, contrasting traditional managed clusters with serverless deployment modes and execution models (interactive sessions and batches). It covers resource and cost optimization techniques including history-based autotuning, tuning cores/memory, dynamic allocation caps, and shuffle partition sizing. The article also demonstrates integrated troubleshooting using Gemini Cloud Assist to diagnose runtime failures and generate resilient PySpark fixes.
read more →

Serverless Lakehouse Catalog Modernizes Apache Hive Metastore

🛠️ The blog explains how legacy Apache Hive Metastores become bottlenecks as enterprises scale their data lakes and adopt multiple query engines. It introduces the Google Cloud Lakehouse runtime catalog, a serverless metadata registry built on the Apache Iceberg REST Catalog specification that supports both legacy Hive tables and modern table formats. The post outlines common pain points — scaling, governance, and operational TCO — and describes a migration path that extracts Hive table definitions and registers them into the serverless catalog. The result is unified governance, zero-data-copy access across engines, and reduced operational overhead.
read more →

Box and Google Cloud enable multimodal enterprise AI

🗂️ Box and Google Cloud are integrating Gemini Multimodal Embeddings 2 into Box's Agentic Platform to extend RAG beyond text and enable unified search and reasoning across documents, images, tables, and charts. This integration preserves spatial and visual structure, supports crossmodal retrieval, and bridges heterogeneous formats like .docx, .xlsx, .pdf, and .pptx. The combined system targets use cases in finance, healthcare, and enterprise auditing by enabling layout-aware embeddings, cross-file synthesis, and visual-to-text auditing.
read more →

Automating data governance with lineage and automation

🧭 This post describes Google's Governance Agent project that automates metadata propagation using column-level lineage, Knowledge Catalog, and BigQuery. It explains how the agent propagates descriptions, glossary terms, policy tags, and trust scores from upstream sources while applying confidence thresholds and conservative grounding. The project provides both a Gradio dashboard and a CLI to support steward review and automated pipelines, and emphasizes that automation is meant to reduce repetitive work, not remove steward oversight.
read more →