Companion to the Google Cloud cheat sheet and the Google Cloud Platform series starting at What is Google Cloud Platform?.
Allow policy
IAM bindings that grant roles to principals on a resource. See IAM in Google Cloud.
Application Default Credentials (ADC)
Credential chain used by client libraries and Terraform on a workstation. See What is Google Cloud Platform?.
Artifact Registry
Managed repository for container images and packages. See Artifact Registry.
Cloud Armor
WAF and DDoS protection on external Application Load Balancers. See Protecting services with Cloud Armor.
Cloud Build
Managed CI service that runs build steps from cloudbuild.yaml. See Continuous delivery with Cloud Build.
Cloud Logging
Central log store and query engine for GCP and application stdout. See Cloud Logging.
Cloud Monitoring
Metrics, dashboards, uptime checks, and alerting. See Cloud Monitoring.
Cloud NAT
Egress-only internet access for private IPs in a VPC. See VPC networks in Google Cloud.
Cloud Run revision
Immutable snapshot of a deployed container configuration for a service. See Deploying containers with Cloud Run.
Cloud Storage bucket
Globally unique namespace holding objects. See Google Cloud Storage.
Direct VPC egress
Cloud Run outbound traffic routed through your VPC. See VPC networks in Google Cloud.
Organization
Root of the GCP resource hierarchy for a company domain. See What is Google Cloud Platform?.
Predefined role
Curated IAM role such as roles/run.admin. See IAM in Google Cloud.
Private Google Access
Subnet setting to reach Google APIs without public IPs. See VPC networks in Google Cloud.
Project
Billing and IAM boundary for GCP resources. See What is Google Cloud Platform?.
Security policy
Cloud Armor rule set attached to a load balancer backend. See Protecting services with Cloud Armor.
Serverless NEG
Load balancer backend target pointing at Cloud Run (or App Engine). See Protecting services with Cloud Armor.
Service account
Robot IAM principal for workloads and automation. See IAM in Google Cloud.
Storage class
GCS cost and availability tier (Standard, Nearline, Coldline, Archive). See Google Cloud Storage.
Uniform bucket-level access
Bucket mode that uses IAM instead of object ACLs by default. See Google Cloud Storage.
VPC network
Global private network with regional subnets. See VPC networks in Google Cloud.
Workload Identity Federation
Federated OIDC access to GCP without long-lived keys. See IAM in Google Cloud.