What you'll learn
- Explain why ACE exam objectives assume a ready Google Cloud console and how a dedicated training account provides one
- Create a dedicated Google training account and secure it with two-factor verification and backup codes
- Compare multifactor options such as SMS, Google Authenticator, and security keys, including the SIM-swap risk of SMS
- Identify the project name, project number, and project ID from the Google Cloud dashboard
- Rename a Google Cloud project from the project settings page
- Locate remaining account credit and billing health checks in the Google Cloud Billing section
Free 46-minute video lesson with a full transcript and knowledge checks. No account needed to watch.
Intro
The ACE certification covers a wide range of cloud-based knowledge. With so many objectives, it's difficult to know where to start. Let's change that.
The ACE Cert
The Associate Cloud Engineer (ACE) used to be the entry level certification for Google Cloud Platform (GCP). For folks who have never used cloud computing before, however, there is a steep learning curve diving right into the associate level cert. Thankfully, Google added a foundational level certification for folks brand new to the cloud. If this course seems like too much too fast, be sure to check out the Cloud Digital Leader course, which assumes no experience in any cloud platform.
Knowledge Check
Which Google Cloud certification is the foundational cert, designed for those with little to no cloud experience?
Getting Set Up For Success
If you look at the objectives for the ACE certification, you'll probably notice that you're expected to start DOING things in the Google Cloud Platform. That certainly makes sense, but before we can accomplish those objectives, we need to establish our Google Cloud Platform access. There are a number of ways to accomplish that, but starting with the simplest makes the most sense.
Knowledge Check
The Google Cloud Platform Free Trial (at the time this course was created, July 2024) lasts until one of two criteria are met. Which criteria are those? (Pick 2)
Select all that apply.
Creating and Configuring Training Accounts
Most of us have created gmail accounts at some point in our lives, but there are some nuances and best practices which should be followed even for "throw away" accounts. Especially since these accounts will have access to our credit card information!!!
Knowledge Check
Which are valid types of 2FA Google allows you to enable?
Select all that apply.
Limitations and How We'll Work Around Them
One of the problems with using a gmail account to configure Google Cloud Platform, is that without an organization, the hierarchy of policy inheritance isn't possible. That shouldn't be a problem, however, because most other things work the same regardless of the type of account you're using to learn.
Knowledge Check
Google Cloud Identity is a premium product which has a monthly fee.
Validation
If you haven't set up your Google Cloud Platform account yet, do that, and then try to figure out how to accomplish the following tasks. (Try to figure them out, but we'll go over how to do them together in a video afterword in case you get stuck)
TASKS:
- When your GCP trial is set up, a project is automatically created. It should be called, "My First Project" -- try to figure out how to change the name of that project.
- Find how much money is left on your free trial, along with how many days are remaining. Remember, the free trial lasts until one of those two runs out (either you use up the full $300 or 90 days pass, whichever comes first)
- We know that automatic billing will NOT start when your free trial ends. In order to keep using your cloud infrastructure after the trial expires, you need to have your billing account active. Find the place to activate your billing account (but you do NOT need to actually activate it!!!)
- BONUS: find what role has been assigned to your user for the "My First Project" project. (Or whatever you changed the name to in step 1)
Knowledge Check
How did you do on the tasks?
This interactive assessment is available in the full learning experience.
View Transcript
Intro
0:00The associate cloud engineer course has a whole bunch of objectives. Unfortunately, most of them assume that you have a cloud environment all set up and also completely empty, which is a weird state to be because cloud accounts don't just grow on trees. They form in the clouds, I guess. No, but this skill is going to be designed to get us to the point where we can start figuring out the objectives for the ACE certification. And we're going to do that by creating Google accounts and making sure that we can log in and we have everything set up so we can actually do all of the things required to get the objectives covered so that we can get this certification.
The ACE Cert
0:00The associate cloud engineering course or certificate used to be the entry level Google certification when it comes to their cloud platform that changed a while back though, and I think it was for the better. And that's because while the ACE certification does start at the very beginning like you start with an empty environment and you design it from scratch. It has some expectations like the person should have some experience in the cloud and they have experience managing things that are already deployed into the cloud.
0:33Whereas the cloud digital leader certification and course is designed for folks who are IT savvy but don't have a real grasp for what takes place in the cloud or the different types of scenarios that cloud computing can represent because cloud computing. By itself can mean a wide variety of things from multi cloud deployments to hybrid deployments. All these different things are all included in what it means to be in the cloud and so the cloud digital leader is a certification that just kind of gives you that foundation, thus the term foundational certification.
1:12And so if you're not comfortable talking about cloudy things around the water cooler, something like digital cloud leader will probably be a better fit to start with it kind of just gives you that foundational understanding of cloud computing. Now, this course is for the cloud engineer, the associate cloud engineer. And even though it used to be the entry level course, it is pretty robust and it talks about a wide variety of actual deployment into the cloud, not just concepts but actual demonstrable things that we're going to do.
1:46And so this does expect you to have that foundational understanding. Now, after that, you can go to the more advanced certifications. So this is kind of like This is step number one, and then this is step number two, and then step number three is going to be any of these professional level certifications. So if you want to eventually get these certifications for Google cloud platform . The first step is to get that associate cloud engineer, because that's a broader, but not quite as deep as the different certifications at the professional level.
2:22So I expect when we go into this course that you understand the terms when I say things like, well, this is going to be for a hybrid installation or we're talking about different regions for load balancing. We're talking about data lakes. So we're talking about a data warehouse. What all those terms mean should be comfortable or at least not so foreign that you 're a little bit dear in the headlights look right. So if you can talk about those things, but haven't actually done a lot of implementation, you're in the right place.
Getting Set Up For Success
0:00The ACE certification or Associate Cloud Engineer certification, I'll probably refer to it as ACE for the bulk of this course. It is a very well-rounded certification, meaning that it covers a wide variety of topics that are going to need to be understood in order to be successful as a cloud engineer. The problem with rounded or circular things is that it's often difficult to know where to start. Let me show you what I'm talking about. This is part of the objectives from the actual ACE course, and you'll see that section one has some pretty basic things like create a resource hierarchy, apply organizational policies, grant members, roles within a project, manage users, enable API, all of these things are well and good, but they assume that you have a cloud console that you can start doing things in right away. But of course, we have to get to that point before we can actually do any of these well-rounded objectives that are going to get us into the cloud. So while it's pretty clear that we're going to start by creating some resources, we need to have a place to do that. And there's a couple different ways that we can go about getting
1:15our empty environment going. So what we're going to do is approach it from a couple different ways. But I want to start simply before we kind of try and dive into this elaborately configured system, because we should be able to know how to elaborately configure it before we just kind of dive in headfirst. So while you may already have a Google workplace that you're a part of, or you might already have some elaborate system set up, I encourage you to actually start with a fresh account. And this may seem a little counterintuitive. But if you start with just a plain old Gmail account, just something at gmail.com, it's going to give you some advantages. Because if you mess something up, first of all, you're not messing up any cloud environment that you may be a part of, you're going to have full administrator access, because your Gmail account is going to be the owner of the entire cloud infrastructure. And so even though it's going to limit us in some ways, I think that a great place to start is to create a brand new Gmail account, or possibly two or three, depending, let me talk about that in a second, but if you start with a Gmail account, it's going to
2:32give us some advantages that make the disadvantages worthwhile. So first of all, creating a Gmail account, you've probably done this. But if you haven't done it in a while, there's a couple things you need to know one, you're probably going to be limited to four Gmail accounts that you own. And I say probably because it's not really clear from Google how they set up the limitations on how many Gmail accounts you can verify. And that's the key. Verification requires a phone, or specifically a cell phone or a mobile device that you can get a text message that will verify you're an actual human being not just trying to create tons and tons of Gmail accounts. Now, supposedly, you're limited to four Gmail accounts that you can create per cell phone or per mobile number. Now, I feel like over the years I have created more than that. So either those limitations came into place after I did that, or possibly the number resets. But there's a couple ways to get around this one, you could get a new cheap SIM for a month or whatever, so that you can verify a fresh account. Like I had a, I had a small secondary phone that I was playing with and it gave me a number and then I could verify it I didn't at the time, but I could have used
3:50that to verify like a burner phone, right? You can set that up to create accounts. Or what I did the one time I got a message that I couldn't create another account is I used my spouse's cell phone number for the verification, because she doesn't have any desire to set up multiple accounts. And so I just used her number, which allowed me to verify it and then I could use it without any issues. So if you create at least one brand new Gmail account, you're going to be able to use that account for your training. And some more advantages are, if you have a Gmail account, you can create a cloud console service and that you can then start a free trial. Now the free trial, it used to be a full year.
4:35Now the free trial from Google Cloud platform is only 90 days, but in that 90 days, you have $300 of credit that you can use to spin up machines and do all of the various things in Google Cloud platform that we're going to cover in this course without spending any of your money because this $300 US credit is truly that it is money that you can spend on Google Cloud platform, real services, real devices, live IP addresses, it's a real environment that we're going to be setting up.
5:11The one caveat is that you do have to have a credit card so that it can verify that again, you are a human, but it's also important to know that this credit card is not going to be charged if you run out of the 90 days or you spend the $300. It's whichever one of these comes first is when your free trial ends. But if you do run out of days or run out of credit, it's not going to just automatically start charging, you actually have to activate your billing. So yes, they have your credit card information, but it's not set up to start billing that credit card unless you go and make that billing arrangement in your cloud platform. So you don't have to worry that even though you're putting in your credit card to verify that you are a human being, you're not going to incur charges until you go through the process of purposefully setting that up past your 90 days or past your $300 of usage. Hopefully that makes sense.
6:07And so that's why I recommend you start with a fresh Gmail account, even if you already have a Gmail account, because this ACE course is going to be something that you set up, but you're probably not going to want long term, right? We're just going to be setting stuff up that is arbitrary. And then once your 90 days or $300 is up, you can kind of abandon Google Cloud platform on that Gmail account and keep the Gmail account or just abandon the Gmail account to every time you start a course, assuming you can get another Gmail account created. It's a great way to get $ 300 worth of credit that you can play with in the Google Cloud platform.
Creating and Configuring Training Accounts
0:00Okay, so I just opened up a new Chrome profile and I'm going to click sign in and since this is creating a new account, we're just going to simply press the create account button. And to do that, we're going to specify which type of account and this is important. If you want the free trial, what you do, you have to say a personal use account. Now, if you're doing this for business, like you're being paid for your business and they are sponsoring this, you may not be able to select for personal use. You have to select for work or business and then they might have to pay for your your Google Cloud credits. But assuming that you're doing this on your own and you want to have that $300 free trial credit, we need to say for personal use because a business account is not eligible for the free trial. So for personal use is what I'm going to say.
0:54And I'm going to say my first name is Sean, my last name is powers. I'm going to put in my birthday, I might blur this out, click next, it's going to give me some options for what this Gmail address would be. I'm going to say create your own Gmail address and I'm just going to say, CBT, ace. Sean. Looks like that's available. So very cool password. And now this is the part where it confirms I 'm not a robot and I have to enter a cell phone number that can receive a text message. So I'm going to try my actual number, I'm going to blur it out. And we'll see if I'm able to create one with my account, otherwise we'll have to or with my cell phone number, otherwise we'll have to come up with something else creative.
1:41It let me do that. So now I'm going to check my phone and I should be getting a code and I did. It's right here on my phone. I don't even have to blur this because it's going to be expired by the time you're watching this. And now a recovery email address is it's a good idea to put one in here that is valid so that if we lose our login information or something like that, this is a way that we can recover the email address like also if it's compromised or something like that. So recovery email address, I'm going to put in one of my existing email addresses, I'm going to say next. And so sure enough, CBT ace. Sean at gmail.com is my new Gmail account. So it's all set up it worked. It allowed me to use my phone, which is awesome. If it doesn't, again, you can use somebody else's phone or or get a burner phone or something that you can receive an SMS on, you 'll just need to do that if you're going to create a fresh Gmail account. Next, yes, we read all of this, I'm going to agree.
2:40That's not encouraging. Try again. Oh, no, I didn't work. Let's see if it actually created the account. That was a little unsettling, wasn't it? All right, let's try to sign into the account that we just made, which was CBT ace. Sean. Okay, thankfully did let me log in even though I got a 404 page. So yes, my account did work. And yes, I'm in. I'll turn on sync. Okay. And here we are. I'm logged in apparently it chose pink as my color, but that's fine. You'll see I'm logged in here. Hi, Sean CBT ace. Sean at gmail.com. And now what I want to do though, number, I said there are some nuances like, for example, you should have a recovery email address put in there. But also we should enable multi-factor auth or two factor auth. And that's going to make it so that our account, which is going to have our credit card information in it, if it's compromised, it will make it more difficult to compromise, right? So I have a username and password right now. But I also want to have another layer of security. And so we're going to go into our account, manage my Google account. Over here, we're going to click on
3:55security. If you look down here, it says two step verification again, two factor auth, multi factor auth, two step verification. Basically, it's a way that we can require not only our username and password, but our username, password, and something else. Usually it's something we know, which is our password and something we have, which can be like a security key we put in or a text message we receive or Google will often send us an approval thing if we have an existing Google app on our mobile device. So there's multiple ways that we can do this.
4:31However, we definitely want to turn two factor auth on. So click on that and it says I could add a phone number. But what I want to do is turn on two step verification. So click there. So here is where it's going to ask me that phone number to get that text message that will allow me to log in. And so I'm going to put in that same phone number that I use to verify this account. Now, if you look, assuming that the blurring is good, it says you can use a Google voice number for this. However, if you lose access to your Google account, well , you can't you want to have access to the Google voice number, right? So it's good to use a cell phone from a carrier to use this number for two factor authentication. So when I do that, and I know that this will work because I use this number again to create the account. So if I look at my phone again, I have that number in zero two one eight two six. All right, and I'm going to click verify.
5:28Okay, so now it says I am connected with two factor verification right there. I 'm going to click done. But if we look down here, notice that there are other ways that we can secure our account, right? There's pass keys and security keys. This would be like a USB key if you have like a UB key or something like that. Google Authenticator, this is the kind of thing where it'll ask you for like a six digit code as you're logging in, you have 30 seconds to enter it. So this is a good one that you could use instead of the text message. Because while it's good, you know, SMS is a good form of multifactor off. The problem is if your phone number is compromised, like if somebody calls and pretends to be you with your cell phone provider and they convince them to move your number to a different SIM card and then they have access to that, well, then you can be in trouble. So it's good to have different ways to get into your account. One of the ones that you should definitely do though is this one called backup codes on the bottom. If you click on that, it's going to give you here. I'll just click get backup codes. And you'll see here that these codes, which I'm going to click the trash can as soon as we're done. So I'm not these aren't blurred out.
6:37But basically these codes will act as a multifactor off. If you for some reason lose access to your phone, so you can't get that SMS off, or if you set up a different form of two factor off and you don't have access to it, you can use these codes and you get 10 of them. And they're single use. So as soon as you use one of these as your, you know, multifactor off, it's no good. But you can use these and save your account if it gets compromised or whatever. Or like I said, if you if you lose access to your cell phone, you can use these codes to log in. And generally, I recommend that you print them and there's even a button there that'll print it directly onto a piece of paper.
7:17You take that piece of paper and put it in a safe so that a fireproof safe so that you will almost never need it. But if you do, it's somewhere you know where it is and it 's secured. Because these numbers will function just as a, you know, as your phone text for a multifactor off. So you don't want these numbers to leak anywhere because then you've completely eliminated the benefit of having multifactor off. Okay, so these are the the codes that you can get. I recommend doing this. Like I said, I'm going to erase those because they're just on this video.
7:50So backup codes are something to do. If you go down here, Google prompt, they should prompt you on your phone and they might do that instead of the text message. If you have a Google app that's logged in on your phone, instead of sending you a text message, they will just send you a prompt and you can approve it that way. Yeah, my phone number is there, backup codes, and we can also do the Google Authenticator or Authy if you're familiar with Authy. And this is that thing where every 30 seconds it creates a new token. You have to use that when you log in. So it's okay to have lots of different options set up like we can set up authenticator here in your app.
8:28Like in my case, it's going to be Authy. I use Authy instead of Google Authenticator. If you scan that QR code, it will put it in there and it will generate those tokens which can act as another way to log in. So your your first level of security is always going to be your password. And then your second factor can be it can be the authenticator app. It could be the Google prompt and one of your logged in devices on your phone. It could be an SMS message and that will give you a code that you can log in. But you want to make sure that you have more than just your password securing your account. Now you might want to set up multiple Gmail accounts. But once you have your account created and you can log in, go ahead and head over to console.cloud.google.com.
9:16And this is where when you're activating the Google Cloud console, you're going to have to agree to the terms of service, continue. And this right here is where it says you could try Google Cloud with $300 in free credits, which is truly just money that you can spend. So I'm going to say try for free. And it's going to walk me through the process of getting those $300 of credit. And notice I said it says right here, just like I said, it does not auto charge after the free trial ends.
9:47We're going to put in a credit card number. But you don't have to worry that it 's just going to start charging your credit card without you going through the process of activating it for billing specifically. So here, I'm in the United States payment verification. I need to create a new payment profile. Again, I'm going to choose individual. That's my name. I'm going to kind of blur out the rest of this. All right, that's my address. And now I need to add a payment method. You can either add a credit, a debit or a bank account bank accounts take a long time to approve because they like send a couple pennies and then you need to report how many pennies showed up in your account. So that can take like three or four days in order to get that set up. So I'm going to just add a credit or a debit card. Definitely gonna blur this one out. I'm literally just using one of my personal credit cards. And we'll find out in a second if this works. But I actually have a gift card, a Visa gift card that someone has given me that counts as a debit card. So let 's see it. I just, you know, you just keep these at the grocery store. So I'm going to see if this works.
10:50If so, then that's just more information for us. But I haven't tried this in advance. So we'll see. Maybe it won't work. Maybe it will. The code on the back. It says prepaid cards can't be used. Well, now we know we've learned that together. So I'm news actually one of my real credit cards, a little bit unsettling, but we're going to do that. All right, there we go. That worked. It took my bank's debit card information. But again, it's not going to be charging me. So I'm going to say start free. It's setting up my account. What best describes my organization or needs? I'm going to say other doesn't really match any of these learning Google cloud. Who brought you to Google cloud? I'm going to say learn about specific products. I don't know why it wants all this information from me. What are you're interested in doing? I'm going to say I'm not sure yet.
11:44Best describes your role. I'm going to say system administrator. What the heck? All right. So here we are. It's set up Google Cloud Platform for us. It created a project. We're going to talk about projects a little bit later. But my free trial has started. Okay. So it is it is already going. And if we go to our dashboard, here we go. We see that we have everything active. A Google Cloud Platform status all surfaces are normal. We're going to be going through this for the entire course, but it is set up right now. And while doing it this way, does limit us in some ways, it's going to give us a lot of advantages, specifically those $300 in credit, which are just great. And if we screw something up here, it's not going to be affecting anything real in our lives, right? This is a brand new account that we created specifically to learn the Google ACE certification.
Limitations and How We'll Work Around Them
0:00Like I said, when you have just a Gmail account that you're using for training, it does have a couple major limitations. And unfortunately, those limitations are things that you need to understand specifically for the ACE certification. The biggest issue is when you are an individual user, again, that's the thing that gives you the ability to use that $300 in free credit. Anyway, if you are an individual just using a Gmail account, you don't have an organization. Now that seems obvious, but it's kind of significant too.
0:36And we're going to learn a more about this, but I just want to explain what we 're setting up the scenario that we're going to find ourselves and how we're going to use that to our advantage instead of just like, well, I just have a solo account. So I can't learn the other stuff. Oh, yes, you can. You can learn the other stuff and it's going to be better this way in the long run. Trust me. So the specific limitation that we have when we're using just a Gmail account is the problem with inheritance. And when I talk about inheritance, I mean the policies and the roles that we give at different levels in Google Cloud platform are inherited all the way down, which means that if we were to set up policy, which is a set of roles that includes a bunch of permissions, so like we set a policy for who has access to SQL, for example, if we set it all the way up here, that is going to trickle down to every single aspect of our Google Cloud platform.
1:38That policy will be in place for everyone because every single step along the way inherits the policy and there are three main levels that we have. OK, we have the organization, which is like in our case here that I just I called it fish coe. So fish coe would be the organization and then this organization would have a domain. So this would be something like fish coe.com, which is probably an actual place .
2:08So don't go there. I hope it's not an inappropriate site, but there would be a domain associated with this and that's going to be important when we learn about how the organization works. Now, unfortunately, if you don't have an organization and you don't have that top level domain, you don't have the ability to create the next layer, which is folders. So inside an organization, there can be folders just like folders on your computer and just like we can attach a policy up at the top level, we can attach a policy to any one of these folders as well.
2:43And then if this has a policy attached to it, so like we have organized our organization, organized organization into different folders, the printing part of the factory could have a policy and then any project that is underneath is going to inherit whatever we set up. So let's say in this printing folder, we set a policy that the users in the 3D filament group all have access to start and stop print jobs.
3:14Well, that means every time we create a project, whether it's an existing project or a new project underneath this printing folder, this policy will be inherited . So anybody in the submission project, anybody who is in that one group is going to have the ability to start or stop job, same in the job sender project over here. If it was set up here in printing, it's going to be inherited all the way down. Now, there's some nuance here. For example, every single object in our tree here, so this assembly, it can only have one single parent, which makes sense, right?
3:50It's the thing that it branches off of. So assembly's parent is going to be factory. Printing's parent is going to be factory as well. They're going to have the same parent. This our track project is going to have a parent of HR. And basically that seems self-explanatory when you see it written out. But it basically means that we can't have something like this, right? That can't exist because an individual unit can only have a single parent. So that can exist.
4:21It just has to go down and every single object has one parent device. That way it knows how to inherit the policies that can be set at any level. And then so that's the that's the big limitation since we're just using a single Gmail account, we do not have an organization. In fact, it tells us that our organization name is no organization. And because we don't have an organization, we can't set the level of a hierarchy here. We have no ability to create folders. What we do have is projects.
4:53We can create projects and then they are directly tied to our no organization. But because it's no organization, we can't apply a policy there either. So we basically have to apply policies to every one of our projects in our current Google Cloud installation that we just set up and then we have $300 in credit for. So we're going to be able to understand how policies and roles work because we 're going to be setting them up on our projects, but that hierarchical stuff isn't going to work out of the box.
5:25And you might be thinking, Sean, why didn't we just set it up with an organization? The reason is, remember I mentioned that Fishco would have a domain associated with it as well? Well, in order to set up a Google Cloud platform with that organization and folders, we have to have an actual internet domain, like something.com or something.org. We have to have that own it. We have to configure it, prove that we own it, tie it to Google Cloud. And all of those things are more and more expenses and more expenditures on top of things plus for the ACE certification, you don't need to understand how the underlying domain name system with all of the text records in a DNS, you don't have to understand all that.
6:11That's above and beyond what the certification requires. So since we are setting up from scratch, we're going to do it in a way that is easily repeatable and isn't going to cost a lot of time and effort learning how the DNS system and domain registrars work, but also we do need to learn that. So what are we going to do? Because it makes sense that we set it up so we can individually create our free account. But if we need to learn the stuff, how do we get to the point we can learn that stuff?
6:41If we don't get the problem, well, here's how we're going to solve it. We have three different options for setting up Google Cloud platform. OK, the first, I mean, the one that we set up is is this, right? This is what we already went over. Just setting up Gmail accounts, which will give us the ability to get that $300 and in free credits, but also it's going to allow us to do other stuff, too. We have other Gmail accounts or Google accounts. And this is there's a subtle difference here.
7:13They look like the same. A Gmail account is something where you get email at gmail.com. You can also set up a Google account. And let's say you already have like a Yahoo account. You can create a Google account that doesn't offer email, but you can still log into Google using a different email address. Don't worry too much if that seems confusing, but basically, let's say you you already have email at Yahoo.com and you don't want to have gmail.com for email. What you can do is log into Google using your Yahoo account.
7:47You still have to create an account, but they just don't give you email. You can log into Google with your existing email account somewhere else, but you don't get a Gmail account. You don't get email through Google, which is fine if you're just looking to log in and do things in the cloud. So anyway, you have a Gmail accounts and then Google accounts. And then if you want to group things together, which is another aspect of best practices that we're going to learn about for this ACE certification, you need to assign permissions and roles to groups of users instead of individual users.
8:21So if a if a new user comes into your organization, you can just put them in the proper group instead of setting up all the new permissions and roles for individual users, even if you only have a single user in that group, it's great to assign the roles to groups instead of individual users because users come and go. But ideally, your groups will stay and they're already configured. So anyway, you can set up Google groups for groups of people, even if you don't have an organization. So this is the option that we're doing out of the box, but that doesn't give us organizational features.
8:57And we do need to learn about those organizational features. And that's where there are two other ways that we can do it. Google workspace, this used to be called G Suite. So if you have a G Suite at work and a lot of people do, you know, where you have the company calendars and Google Docs and Google Meet and all that stuff, Google workspace allows you to have users and groups and your individual users have to create an account on their own with a SMS code that they get from Google. Right. It's an organization, they're paying per user so you can create users and groups.
9:32There's also some automatic group creation where if you're in the organization, you know, the Google workspace organization, which also requires a domain. If you're in there, then there's automatic group relations for any users created inside the organization. And of course, then you are an organization with a domain and you can create folders and sign policies to your organizational level or the folders beneath it, which then contain the projects underneath that. So that does give us that ability to do.
10:05But this is a this is a pricey way to go about it, right? This is you pay per user. There's no free option for Google workspace. There used to be, but there's not anymore. OK, so that's a paid service. The other way that we could do it is with cloud identity. Now, cloud identity does not give users email, but it is a free option. Now, there is the ability to pay for like pro features of cloud identity, but cloud identity itself is a free service that you can set up in Google Cloud .
10:37And it gives you users and groups and it gives you the ability to have an organization and therefore have those folders underneath for containing your projects. And you can assign those individual policies and permissions to the folders and get that hierarchy that we need to understand and learn about. The issue here is not cost. The issue here is cloud identity still requires you to have a domain and set up that registrar information in your DNS settings and tie them to Google Cloud.
11:08So this kind of goes above and beyond the scope of what you need to understand to pass the ACE certification stuff. So I am going to set up cloud identity and you can follow along. I'll have a domain. We'll set it up so you can see how it works. But even if you don't go through the process of setting up cloud identity or Google workspace all on your own just for learning how to pass the certification. Following along with me should be enough so that you understand how things work and you'll be able to make those best practice decisions when it comes to assigning policies and stuff like that.
11:45Again, if you want to take that Gmail account that we just created together and you want to add cloud identity on top of that, that's something that you'll be able to do when we go over me setting one up later on. You'll just have to buy your own domain. You'll have to figure out the DNS stuff, tie it together, activate it and all that stuff. And then your training Gmail account will be a little less disposable at the end of training, right? I mean, you're going to actually have an organization. It's going to be tied to a domain.
12:15So it's going to get more complicated, but you you can do that. You can follow along and do that if you want to. But I don't think you're really going to need to set up your own cloud identity or especially Google workspace, which does incur a fee. Plus you have to have all the domain stuff set up, right? So just having the Gmail account that we created and possibly create another one so that you can assign permissions to another user inside your environment, or you could use your existing Gmail account as a subsequent user or like another user that is that has permission inside your Google cloud.
12:55You could do that as well. Having a couple of accounts is going to be helpful, but I don't think that you 're going to need to worry about cloud identity. Hopefully that clears up why we set it up, the way we set it up and how we're going to handle exactly how we're going to learn about stuff if we don't have our whole organization set up from scratch.
Validation
0:00Okay, so I've started by being logged into my new account. So this is CBTA Sean at gmail.com. I'm logged in and this is right after we created our Google Cloud platform and used that $300. Okay, so the first thing I'm going to do is go up to this navigation menu at the top and I'm going to start if we go to cloud overview, I'm going to start at the dashboard. This is generally where we're going to start when we are looking how to use various products inside the Google platform. So we're in here and the first thing we see is our project info. Okay, so we can see that the project name is my first project. There's the number, there's the ID. Let's poke around and see what we can find now. We could get documentation, which would be an ideal way to figure out how to change the name. That's our first task is how to change this name. We could add people to the project, but now the first thing we want to do is change that name. So let's go into the project settings right here. And inside here, oh, look at there. Right here, the project name is my first project.
1:07We can change that now it's kind of interesting to note, we cannot change the project ID. So Google will always create something. There's a couple of random words and then some numbers. So possible Sun is the name of this project and that are the the idea of that project and we cannot change that. We also can't change the project number. All right, but the project name we can . So let's call this fishmonger 13. I have no idea why. All right, so fishmonger 13 and then we're going to click save.
1:40We've successfully named it. We got a whole bunch of notifications. Now let's go back to the dashboard and we can click off here. Sure enough, there it is our project and it's now named fishmonger 13. You'll notice up here, this is where we could switch between projects, but we only have the one. It's called fishmonger 13. So number one is checked off. Number two is find out how much money is left on your free trial and how many days are remaining. And remember that our free trial runs out when either we've used up to $300 or we've gone all 90 days, whichever comes first, then our trial is going to end. All right, now again, when we first logged in, it kind of gave us that information on the front page. But if we wanted to look for it, we should probably go into billing because that's where the free trial, like what it's talking about, right? It's like, are we going to get billed or we're not going to get billed? So if we go and click billing right here, it's going to take us into the billing section and our total costs here, of course, 000, 000, that's all well and good.
2:51If we scroll down, we're going to see all of the like where we can create budget alerts, we'll do that later. Billing health checks, it looks like everything is okay. And if we scroll all the way to the bottom, we're going to see our free trial credit. And it's going to tell us exactly what we have remaining. Now, after we start using stuff and we get billed for it, this number will decrease. Okay, so we can go here and find out what we currently have left, both in dollar amounts and also in days remaining. Now, apparently they gave us 91 days instead of 90 days , maybe that's just like their way of like if you signed up late in the day on the first day, that day doesn't count. I don't know, but we have 91 days remaining in the trial or $300, whichever comes first. Okay, so that's where we find it. It's in the billing section and just scroll all the way down and find it. Now, number three, we know that automatic billing will not start until our free trial ends. In order to keep using our cloud infrastructure after the trial expires, we need to activate our billing account. But we don't need to actually activate it right now. Just find out where to go about doing that. And as I'm talking, you've probably noticed this giant blue button right
4:07here that kind of said all that same stuff, right? The free trial period cannot be paused or extended. The free trial ends after you know what we just talked about. If we want to activate so that we can continue to use our platform, but get pricing incurred, that's where we would click activate. And it's going to allow us to actually activate it. We would keep our cloud services running uninterrupted. We keep any remaining credits during our free trial. So this is interesting to note. If we were to activate this like right now, we would still get $300 in credit that we could use in that first 91 days. Okay, if we don't use that free credit, it's going to go away even if we've activated our account. But what this what this would do if I were to click activate is it would start billing once the free trial ends either by us using up the money or the the days disappearing.
5:03Okay, so that is nice that if you do activate it early, you don't lose that $ 300. You just have to use it within that first 90 days. All right, so I'm going to click cancel. I don't want to activate it, but that's the answer to number three. And now number four is our bonus question. And it is find what role has been assigned to your user for the my first project project or whatever we named it to. So in our case, fishmonger 13. All right, this is one we're gonna have to poke around a little bit. So I'm gonna go back to the menu up here, click, I'm going to cloud overview and click it's going to take us back to the dashboard. Okay, now for the project, fish monger 13, we want to find out what role our user has been assigned. So since we're talking about the project, again, we could get information here. But what we want to do is probably go down to project settings again. So if we click on project settings, we're inside here, but we don't see any permissions or any roles assigned. That's going to be and this is where it just requires some poking. I am if we click on I am, that's going to take us to the I am I am page for the project that we happen to be selected. So it's our only project. So we're currently in the fishmonger 13 project. And if we click on I am,
6:19it's going to bring us to permissions for that project. In that case, we can see we only have the one user, which is CBTA dot Sean at gmail.com. And the role that I have assigned automatically is owner. And we're going to learn more about roles and stuff. But that is the answer to our bonus question. Number four, I hope you got all four of them. I hope you've hooked around enough to find this challenge one because it was not quite clear how you get there. But I am will get us to that information on what role was assigned.
Frequently asked questions
What does the Certification Prep and Procedure lesson cover in the Google Associate Cloud Engineer course?
This 46-minute lesson gets a team member ready to work on the Associate Cloud Engineer (ACE) objectives by creating a dedicated Google training account and securing it with two-factor verification and backup codes. It then walks through the Google Cloud dashboard to identify the project name, number, and ID, rename a project from project settings, and check remaining credit and billing health in the Billing section.
Why should a team member use a dedicated Google training account to prepare for the ACE exam?
The ACE objectives, such as creating a resource hierarchy and granting roles within a project, assume a ready and empty Google Cloud console. A separate training account provides that environment, and mistakes made there do not affect anything in production or a person's real accounts.
Which multifactor authentication options are compared in this lesson, and why is SMS considered risky?
The lesson compares SMS text codes, Google Authenticator six-digit codes, and passkeys or security keys such as a USB key, and recommends generating backup codes. SMS is flagged because of SIM-swap risk: if an attacker convinces a cell provider to move a phone number to a new SIM card, they can intercept the codes.
What background should someone have before starting the Google Associate Cloud Engineer course?
The trainer expects learners to be comfortable with cloud terms such as hybrid installations, regions for load balancing, data lakes, and data warehouses. Team members who can discuss those concepts but have not done much hands-on implementation are the intended audience, which suits new cloud admins with prior cloud exposure and experienced admins validating day-to-day GCP skills.
How does this lesson fit into the rest of the Associate Cloud Engineer course?
It is the starting point of a roughly 30-hour course that moves from project creation, Cloud Identity, billing, and IAM into compute, storage, VPC networking, Kubernetes, Cloud Run, Cloud Functions, logging, monitoring, and service accounts. The account and project setup done here is the environment the team uses for the remainder of the course.
How can an IT Director or Training Manager track team progress through the ACE course?
Team reporting shows per-learner progress and completion, cohort and group views, and completion exports that can serve as audit evidence. Managers can also assign the path through Playlists and reinforce certification readiness with Practice Exams alongside the video training.
Team training path
Turn this skill into assignable team training
This free skill is a preview of the courses your team can assign, track, and report on with CBT Nuggets.
Free training library
More free lessons from CBT Nuggets
Google Cloud
AI and ML Fundamentals
Free lesson from Google Cloud Digital Leader · 52m
Microsoft Windows Server
Microsoft PowerShell 4 Foundations
Free lesson from PowerShell · 7h 57m
DevOps
Docker (v18.06.3)
Free lesson from Docker · 2h 6m
Networking
Border Gateway Protocol (BGP): Basic Operations
Free lesson from Border Gateway Protocol (BGP) · 60m
Networking
Define Wireless Network Architectures
Free lesson from Wireless Design Professional Training · 55m
Python
Introduction to Programming and Python
Free lesson from Certified Associate in Python Programming (PCAP) · 57m
$59
seat / mo, billed annually
