skills.rest
alon3153
alon3153COMMUNITY
Explore all skills by this author →
GitHub

google-cloud-solution-n-tier-serverless-web-app

Designs secure n-tier serverless web applications on Google Cloud with Terraform code.

Updated May 11, 2026
Search Tags:#architecture#serverless#networking#terraform#google cloud#cloud run#cloud sql
One-click install
npx skills add https://github.com/alon3153/upe-social-publisher --skill google-cloud-solution-n-tier-serverless-web-app-alon3153
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: google-cloud-solution-n-tier-serverless-web-app
Source: https://github.com/alon3153/upe-social-publisher/tree/main/.agents/skills/google-cloud-solution-n-tier-serverless-web-app
Command: npx skills add https://github.com/alon3153/upe-social-publisher --skill google-cloud-solution-n-tier-serverless-web-app-alon3153

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve? Designing a secure multi-tier serverless architecture on Google Cloud requires coordinating Cloud Run ingress rules, VPC egress, Cloud SQL Private Service Connect, Cloud NGFW firewall policies, and load balancer topology, which is error-prone when done manually. ## Core Features & Use Cases - Architecture Design: Produces a complete solution architecture report with Mermaid diagrams, product mappings, and nine enforced security boundaries for Cloud Run and Cloud SQL tiers. - Terraform and gcloud Generation: Generates deploy-ready HCL based on a single-source-of-truth main.tf plus bottom-up gcloud CLI deployment commands. - Validation Scripting: Creates custom automated validation scripts that verify SSL provisioning, ingress blocking, load balancer reachability, and Cloud Armor WAF protection. - Use Case: A user asks for a secure three-tier web app with EU data residency; the skill produces a regional load balancer design, Terraform code with POSTGRES_18 Cloud SQL over Private Service Connect, and a verification script. ## Quick Start Ask the assistant to design a secure three-tier serverless web application on Google Cloud and generate the Terraform code and deployment instructions.

Frequently Asked Questions about google-cloud-solution-n-tier-serverless-web-app

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design a secure three-tier serverless web app on Google Cloud?▼

Use this skill to decompose the workload into a Cloud Run presentation tier, VPC-internal Cloud Run application tiers, and a private Cloud SQL data tier. It produces an architecture report, Terraform code, and gcloud deployment commands following nine enforced security boundaries.

How to deploy Cloud Run services with private ingress and VPC egress?▼

Set the frontend ingress to INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER and backend tiers to INGRESS_TRAFFIC_INTERNAL_ONLY, then attach Direct VPC Egress with ALL_TRAFFIC. A Cloud DNS private zone maps *.run.app to Private Google Access VIPs for internal routing.

Does Cloud CDN work with a regional Application Load Balancer?▼

No, Cloud CDN is only supported on global external Application Load Balancers. Regional load balancers require a proxy-only subnet with purpose REGIONAL_MANAGED_PROXY and an explicit network parameter on the forwarding rule, and are used for data residency compliance.

Why does the Cloud SQL Auth Proxy sidecar fail under default-deny egress?▼

The sidecar must query sqladmin.googleapis.com over TCP 443 to exchange IAM tokens for ephemeral certificates at startup. If the firewall only allows TCP 5432 to the database, the handshake fails, so egress rules must also permit TCP 443 to Private Google Access VIPs.

When should I not use this serverless architecture skill?▼

Do not use it for VM-based, GKE, or non-Google Cloud architectures, as its templates and rules are specific to Cloud Run, Cloud SQL, and Google Cloud networking. It targets serverless multi-tier web applications only.

Related Skills

Explore More Software Engineering Skills→
crytligcrytlig

deploy-model

Deploy Azure OpenAI models by detecting intent and selecting optimal regions.

Community
Advanced
googlegoogle
19.1k

google-cloud-solution-n-tier-serverless-web-app

Designs secure n-tier serverless web applications on Google Cloud with Terraform and validation scripts.

Official
Advanced
xalgordxalgord
954

implementing-gcp-vpc-firewall-rules

Implement and audit GCP VPC firewall rules for network segmentation and egress control.

Community
Intermediate
2nth-ai2nth-ai
1

tech/google/cloud/compute

Deploy and manage Google Cloud resources using gcloud CLI.

Official
Advanced