Cloud Platforms Agent Skills

Assess cloud infrastructure for security misconfigurations, IAM privilege escalation paths, S3 public exposure, open security group rules, and IaC security gaps across AWS, Azure, and GCP with MITRE ATT&CK mapping.

Manage production secret infrastructure with HashiCorp Vault, cloud secret stores, automated rotation, and audit logging.

Interacts with Google Cloud services using the gcloud CLI safely and efficiently, with command validation, data reduction, safety guardrails, and workflows for discovery and investigation.

Optimize GKE costs by rightsizing workloads, configuring Spot VMs, selecting machine types, and using Committed Use Discounts.

Plans, executes, and validates Google Kubernetes Engine (GKE) cluster upgrades and maintenance operations for both Standard and Autopilot clusters, producing upgrade plans, checklists, and runbooks with gcloud commands.

Deploys and optimizes AI/ML inference workloads on GKE, using GPUs, TPUs, and model servers.

Manages AlloyDB for PostgreSQL clusters, instances, and backups using gcloud CLI commands.

Provision Bigtable instances, design performant schemas, and query data using gcloud, cbt, or client libraries.

Sets up the Firebase CLI, installs Firebase agent skills, and configures project context for mobile and web app development.

Provides GKE golden path configuration defaults, production readiness checklists, and cluster default patterns for designing and verifying GKE clusters.

Creates and manages Cloud SQL instances, databases, and users for MySQL, PostgreSQL, and SQL Server using gcloud CLI commands.

Manage custom Agent resources on the Gemini Enterprise Agent Platform via REST API, including creation, configuration, listing, updating, and deletion with support for files, skills, and tools.

Configures, optimizes, and troubleshoots GKE ComputeClasses for Spot VMs with on-demand fallback, GPU/TPU targeting, machine family selection, and zone colocation.

Validate enterprise workloads against Google Cloud best practices using public client libraries and the REST API to manage evaluations, rules, scanned resources, and validation results.

Authenticates and connects to Google Cloud Agent Platform for inference with Gemini and third-party OpenMaaS models (Llama, DeepSeek, Qwen). Generates code for multiple SDKs, configures endpoints, and troubleshoots common errors.

Guides authentication and authorization to Google Cloud services, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.

Evaluates Google Cloud workloads against the Well-Architected Framework security pillar, identifies security requirements, and provides actionable recommendations for IAM, network security, data protection, and operational security.

Evaluates Google Cloud workloads against the Reliability pillar of the Well-Architected Framework, providing actionable recommendations for building, deploying, and managing reliable systems.

Manage machine learning models in the Agent Platform Model Registry: list, describe, upload, update, and delete models and their versions.

Search, manage, and scaffold skills in the Gemini Enterprise Agent Platform Skill Registry.

Guides a developer through first steps on Google Cloud, including account setup, authentication, project creation, and billing linkage.

Evaluates Google Cloud workloads against the Sustainability pillar of the Well-Architected Framework, providing actionable recommendations to minimize environmental impact.

Creates, lists, retrieves, versions, and deletes managed prompts in Google Cloud Agent Platform using the Python SDK.

Manages GenAI tuning jobs in Agent Platform by listing, inspecting, or canceling ongoing model tuning jobs.

Evaluates Google Cloud workloads against the Cost Optimization pillar of the Well-Architected Framework, identifies cost requirements and constraints, and provides actionable recommendations for building, deploying, and managing workloads cost-efficiently.

Migrate applications from Google AI Studio to Google Cloud Agent Platform, enabling enterprise features like IAM, billing, and SLAs.

Evaluates Google Cloud workloads against the Performance Optimization pillar of the Well-Architected Framework, providing actionable recommendations for resource allocation, modular design, elasticity, and monitoring.

Design well-architected, production-grade cloud systems following Azure Architecture Center best practices, including design principles, architecture styles, cloud design patterns, and technology choice frameworks.

Query Azure costs, forecast spending, and identify optimization opportunities to reduce waste.

Finds the least-privilege Azure RBAC role for an identity, generates CLI commands and Bicep code to assign it, and provides guidance on permissions needed to grant roles.

Execute Azure deployments for already-prepared applications using azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery and verification.

Check and manage Azure quotas and service limits across resource providers and regions for deployment planning and capacity validation.

Routes Azure VM and Virtual Machine Scale Set (VMSS) requests to the right workflow for recommendation, creation, troubleshooting, capacity reservation, and essential machine management.

Provides reference information and CLI commands for Azure Storage services including Blob, File Shares, Queue, Table, and Data Lake, along with guidance on access tiers, redundancy options, and SDK usage.

Assesses and automates upgrades of Azure workloads between plans, tiers, or SKUs, and modernizes Azure SDK for Java dependencies in source code.

Configure Azure API Management as an AI Gateway to govern AI models, MCP tools, and agents with policies for caching, rate limiting, content safety, and cost control.