#512 Issue
July 20, 2026
Welcome to issue #511 July 13th, 2026
News
AI GeminiSolve harder problems with AlphaEvolve, now available to everyone on Google Cloud - Today, we’re excited to share that AlphaEvolve is generally available (GA). AE is a code optimization and discovery agent built on Gemini that helps solve some of the hardest business problems organizations, researchers and developers face.
Compute Engine NetworkingC4N, now GA: Delivering cloud’s highest per vCPU network and block storage I/O for x86 workloads - The Compute Engine C4N family, now GA, is a network- and block-storage-optimized instance that minimizes I/O bottlenecks for enterprise applications.
Cloud Run Generative AI LLM SecuritySafely run AI-generated code in Cloud Run sandboxes - Today, at WeAreDevelopers World Congress, we are announcing Google Cloud Run sandboxes in public preview. Cloud Run sandboxes are a native, secure, and ultra-fast runtime environment built specifically for executing untrusted code and agent workloads, starting in milliseconds.
Threat IntelligenceDrive proactive security, prioritize risks with Google Threat Intelligence and Wiz ASM - To help you match your real-world exposures with real-time adversary activity, we’ve begun integrating Google Threat Intelligence with Wiz Attack Surface Management.
Cloud Run EventGoogle Cloud Labs: Accelerate AI with Cloud Run - Sign up now for a developer workshop near you! Learn to build and scale production-grade AI agents on Cloud Run.
Gemini StartupsMeet the 33 cybersecurity startups joining the Gemini Startup Forum - Our flagship Google for Startups program, Gemini Startup Forum: Cybersecurity, has selected its first 33 trailblazing startups.
Agents AI InfrastructureReport: 83% of organizations need to upgrade their infrastructure to support agentic AI - Highlights from the State of AI Infrastructure report detailing how organizations are rethinking infrastructure to build resilient, fluid foundations.
GCP CertificationNew ways to keep Google Cloud certifications current and boost your career - As the half-life of skills shrink, keeping them current is important to keeping your career growing, too.
AI Infrastructure QuadrantGoogle Cloud named Leader in the 2026 Gartner® Magic Quadrant™ for AI Infrastructure - In their inaugural report, Gartner® has named Google a Leader in the Gartner Magic Quadrant™ for AI Infrastructure.
Public SectorGemini Enterprise for Education named a Commander in Tambellini StarChart™: 2026 AI Agents for Administrative Efficiency—Agent Platforms - Gemini Enterprise for Education named a Commander in Tambellini StarChart™: 2026 AI Agents for Administrative Efficiency—Agent Platforms.
Articles, Tutorials
Infrastructure, Networking, Security, Kubernetes
AI Data Analytics Machine Learning SecurityShift into high gear with agents: Securing the software-defined vehicle - To better support and secure SDVs, Google Cloud and Valtech have partnered to develop Nexus SDV, a highly-scalable, AI-enabled connected vehicle platform.
Threat IntelligenceThe ‘Ghost’ in the Database: Recovering Active ADFS Signing Keys via Machine DPAPI - This post details how adversaries exploit this TTP to forge high-privilege SAML tokens and provide the blueprint to defend against it.
Cloud Router NetworkingBGP route policies: Top 3 use cases by customer demand - We detail the three most impactful use cases for Cloud Router BGP route policies that have emerged since 2025.
GKE Autopilot GPU TPUAutopilot Clusters with GKE managed DRANET: GPUs and TPUs - Learn how to deploy GKE Autopilot clusters with managed DRANET for optimized GPU and TPU networking. This guide covers setup, ComputeClass configurations, and resource claims for efficient workloads.
Google Kubernetes Engine KubernetesKueue Arrives in the Google Cloud Console - Google has integrated Kueue, an industry standard for managing high-performance resources like GPUs and TPUs for AI and batch training, directly into the Google Cloud Console. This new UI provides a visual, single-pane-of-glass experience for monitoring queue details, quota usage, and workloads across multiple clusters, significantly simplifying management and troubleshooting. It offers enhanced observability for platform administrators and an excellent onboarding tool for teams exploring batch scheduling.
DevOps Google Kubernetes EngineSandboxing Autonomous AI Agent Code Execution: A Walkthrough of GKE Agent Sandbox + gVisor - The trust problem: your agent wants to run code you didn’t write.
Cloud CDN Networking SecurityCloud CDN Now Supports Private Bucket Access — No More Public Buckets or Signed URLs - Google Cloud CDN now supports private bucket access for backend buckets on external Application Load Balancers, eliminating the need to make Cloud Storage buckets public or generate signed URLs. This enhancement allows for IAM-only access control, providing a more secure and simpler way to serve static content through Cloud CDN. It addresses a long-standing challenge by offering a third, more secure option for content delivery.
Antigravity DevOps100x Platform Engineering: Automating GCP Foundation Creation with Fabric FAST and Antigravity 2.0 - This article details how to achieve 100x Platform Engineering by automating the creation of Google Cloud Platform foundations using Fabric FAST and Antigravity 2.0. The approach enables Antigravity 2.0 to autonomously architect, validate, and self-heal compliant, enterprise-grade GCP landing zones through data-driven "Recipe" Skills. This streamlines operations, reducing manual effort and allowing engineers to focus on architectural design rather than repetitive coding.
Cloud Security Command CenterNew to Google SecOps: Exploring Detections - This article demonstrates how to leverage search in Google Security Operations (SecOps) to effectively explore both detections and alerts. It guides users through building specific queries to filter findings by rule sets, alert state, and other metadata, significantly enhancing threat hunting, incident analysis, and the development of composite security rules. This capability ultimately improves visibility and allows for better dashboarding of detection coverage within the platform.
App Development, Serverless, Databases, DevOps
Cloud Marketplace Gemini Generative AI LLMA developer's guide to publishing agents in Gemini Enterprise and Google Cloud Marketplace - For agent builders and developers looking to publish and commercialize high-impact, third-party agents through Google Cloud Marketplace and deploy them to the Gemini Enterprise app, this guide provides a step-by-step path to a fully integrated solution.
FirebaseSpark vs Blaze: The Firebase Pricing Guide I Wish I'd Read Sooner
AI JavascriptLiteRT.js, Google's high performance Web AI Inference - We're excited to introduce LiteRT.js, the newest member of the LiteRT family! LiteRT.js is our powerful solution for running machine learning models directly in the browser, extending Google's cross-platform edge AI runtime to the web. Built for JavaScript developers, LiteRT.js delivers state-of-the-art ML model inference performance on WebGPU and upcoming WebNN, with a fallback to WebAssembly for CPU. This post provides a quick tour of LiteRT.js and gives web developers everything they need to get started.
AI Antigravity GeminiBridging the Domain Gap: AI Race Coach built with Antigravity and Gemini - Google Developer Experts developed an AI-powered race coach using Antigravity and Gemini to deliver real-time, actionable advice for improving lap times. This initiative demonstrated "Trustable AI" by grounding its architecture in physics and real-time verification, enabling generative models to make high-stakes decisions with confidence. The project showcased how a sophisticated technology stack, leveraging Google Cloud Platform and Edge AI, can bridge domain gaps and scale from prototype to mission-critical applications.
Agents Cloud Run Python ServerlessThe Background Task That Froze: A Serverless CPU-Throttling Mystery - This article uncovers a mystery where background tasks on Google Cloud Run freeze or get lost due to CPU throttling that occurs right after a response is sent in request-based allocation mode. The solution involves moving latency-critical work, such as job launching, onto the request path before responding, or switching to instance-based CPU allocation for continuous processing. Understanding this serverless CPU behavior is crucial to prevent silent data loss and ensure timely task execution.
Agents AI Gemini Machine LearningGemini Managed Agents Can Now Run in the Background - How to fire a managed agent, disconnect, and reconnect later to collect the result, using the Interactions API.
AlloyDBConquering Subtransaction Contention: How AlloyDB Outclasses Standard PostgreSQL and Cloud SQL - This article details how Subtransaction SLRU contention can severely bottleneck PostgreSQL performance, especially with nested transactions or high concurrency. It explains that standard PostgreSQL often encounters latency spikes and degraded performance when subtransactions overflow its fast-path cache. In contrast, AlloyDB significantly mitigates this by doubling the fast-path subtransaction tracking limit and utilizing auto-scaling, highly optimized buffers, ensuring superior concurrency resilience and predictable latency.
Big Data, Analytics, ML&AI
BigQuery Machine LearningE-Commerce Churn Prediction in BigQuery Using TabFM - This article introduces TabFM, a Google Cloud foundation model integrated into BigQuery that enables instant e-commerce churn prediction with zero training. It leverages in-context learning to analyze historical and real-time data directly via SQL, eliminating traditional model development and robustly handling messy datasets. This empowers data analysts to deploy highly accurate predictive models effortlessly.
AI Machine LearningGoogle TabFM, Zero-Shot Tabular Predictions, Tested Honestly - This article offers an evaluation of Google's new TabFM, a foundation model enabling zero-shot tabular predictions without prior training. It benchmarks TabFM against established methods like XGBoost, revealing that while it delivers on its promise, smaller models often perform comparably with less computational overhead on typical datasets. The analysis also highlights practical considerations and the importance of rigorous testing with your own data before adopting new tools.
Gemini Enterprise Agent Platform20 questions for the Agentic Enterprise (and how Agent Platform can help) - To help you navigate the AI era with Agent Platform, we gathered 20 essential questions to ask your engineering teams, along with some practical advice and code examples to get you going. Let’s dive in.
Data AnalyticsFrontier and Center: Who evaluates the evaluations? - Discovery Bench framework modulates an evaluation case by generating “easy” and “hard” variations.
AIWe terminated a TPU mid-training and it recovered in seconds: Introduction to elastic training with MaxText - Distributed AI training is notoriously fragile because losing a single machine typically crashes the entire multi-node job, forcing a time-consuming, full-workload infrastructure restart. To address this, Google’s JAX ecosystem utilizes elastic training via Pathways, which converts a hardware failure into a catchable Python exception so the running process can survive. When an unplanned failure occurs, the system automatically replaces only the broken worker, restores the last viable checkpoint from Cloud Storage, and resumes training in place—minimizing total downtime to under two minutes without ever restarting the main controller process.
LLMEvolving LLM fine-tuning hyperparameters with AlphaEvolve on Google Cloud
Generative AIADK Gemini Enterprise Agent PlatformRevisions and traffic splitting on Agent Runtime - Google Cloud's Agent Runtime now supports revisions and traffic splitting, allowing seamless deployment of new agent versions without redeploying the entire service. This capability enables developers to manage multiple agent versions under the same URL, directing varying percentages of traffic to each for controlled rollouts or A/B testing. The service provides managed sessions, scaling, and versioning while offering extensive flexibility for customization.
ADK LLM OpenTelemetryMastering Observability in Google ADK: Implementing OpenTelemetry for GCP Metrics, Traces, and Logging - This article demonstrates how to achieve robust observability for complex LLM applications built with Google's Agent Development Kit. It details implementing OpenTelemetry to export comprehensive metrics, traces, and logs directly into Google Cloud Platform. This integration provides crucial visibility into agent reasoning, performance bottlenecks, and debugging capabilities, transforming black-box AI into an observable system.
ADK Data Science LLM PaywallDeploying Google ADK Agents: From Local Script to a Managed Cloud Runtime - A Step-by-Step Guide to Taking a Local Multi-Agent System to a Managed Cloud Endpoint.
Cloud Storage MCPTurning Data into Context: Google Cloud Storage (GCS) is Now Available in MCP Toolbox - Google Cloud Storage is now natively supported in MCP Toolbox, turning raw, unstructured data into dynamic, agent-accessible context.
Gemini Enterprise Agent Platform MCPHow to Configure Gemini Enterprise to Connect to the Google Developer Knowledge MCP Server - An Real-World Example of using the Gemini Enterprise MCP Server Connector.
JAX Machine Learning TPUPallas Kernel + vLLM on TPU: Leverage Gemma Throughput to 19,511 Tokens per Second - Throughput, latency, energy, and cost results for Gemma 2B served with vLLM, with observations on the JAX and Pallas compilation stack.
Antigravity DevOps SREBuilding an Autonomous SRE Agent with Google ADK and the Antigravity SDK - A walk through building an SRE agent that works autonomously in your cloud.
Releases
AlloyDB - External search with AlloyDB now supports Apache Solr in Preview. You can use the external_search_fdw extension to connect to a Solr cluster and query its data directly from your database.
Apigee Advanced API Security - Deprecation and shutdown of GenAI Incident Summary (generative AI Insights) The standalone GenAI Incident Summary (generative AI Insights) feature in Apigee Advanced API Security Abuse Detection, currently in Preview, is deprecated and shut down as of July 9, 2026. This feature used Google Cloud generative AI large language models (LLMs) to provide automated summaries and mitigation guidance for security incidents identified by the Abuse Detection clustering tool. For more information, see GenAI Incident Summary deprecation.
Apigee Hybrid - v1.16.7 On July 10, 2026 we released an updated version of the Apigee hybrid software, v1.16.7. For information on upgrading, see Upgrading Apigee hybrid to version v1.16.7. For information on new installations, see The big picture. Note: This is a patch release: The container images used in patch releases are integrated with the Apigee hybrid Helm charts. Upgrading to a patch via the Helm chart automatically updates the images. No manual image changes are typically needed. For information on container image support in Apigee hybrid releases, see Apigee release process. Various security and CVE fixes are included in this release.
Apigee UI - On July 6, 2026, we released an updated version of the Apigee UI. ParsePayload policy and payload operations matching in the Apigee UI The Apigee UI now supports the new payload operations matching feature: The new ParsePayload policy is now available in the proxy editor for API proxy authoring. You can use it to extract logical operations from structured payloads at runtime. The API Product page now displays payload-based operations, allowing you to configure and manage access control and quotas based on request payload content. For more information, see Manage MCP tool access with API products.
AppEngine - To modernize image processing, migrate from the App Engine Images service to Cloud Run by routing calls to a Cloud Run image transformation service while your app continues to run on App Engine (Preview).
BigQuery - For data transfers from Facebook Ads, support for the AdInsightsMMM report has been temporarily disabled. Existing data transfers from Facebook Ads that include the AdInsightsMMM report will continue to run, but the transfer won't include data from the AdInsightsMMM report. This change is due to schema changes in the Facebook Ads API. For more information, see July 06, 2026. You can now perform multi-level aggregation in GoogleSQL, which lets you use an aggregate function as an argument to another aggregate function. This feature is in Preview. An updated version of the Simba ODBC driver for BigQuery is now available. The Data Agent Kit extension is an extension for agent coding tools, such as VS Code, Antigravity, and Cursor, that lets you interact with BigQuery resources directly in your agent environment. You can use this extension to browse datasets, manage pipelines, run queries, and prompt your agent to perform other BigQuery tasks directly in your preferred IDE. This feature is in Preview. Support for hybrid search (using the VECTOR_SEARCH function to combine a semantic search with a lexical (keyword) search) has been temporarily disabled. We are working to restore this feature as soon as possible. You can use the BigQuery Data Transfer Service to transfer metadata from the following data sources into Knowledge Catalog: PostgreSQL Microsoft SQL Server This feature is in Preview.
Bigtable - Bigtable supports direct connectivity, which bypasses the Google frontend and optimizes performance for application traffic that meets certain criteria. For more information, see Direct connectivity. The Bigtable agent skill ( bigtable-basics ) is generally available (GA) in the public Google Agent Skills repository. This skill lets you equip AI agents with capabilities for Bigtable tasks, such as provisioning instances and tables, designing schemas, querying data using GoogleSQL and key-value APIs, and diagnosing performance issues or hotspots. You can bind existing tags to Bigtable instances when you create an instance and use policies to enforce mandatory tag assignments. This feature is generally available (GA). For more information, see Create an instance. You can use Organization Policy Service custom constraints to manage specific operations on continuous materialized views. This feature is generally available (GA). For more information, see Use custom organization policies. You can use the Bigtable client library for Go to execute read jobs and queries using Data Boost.
Billing - Payments documents for invoiced billing accounts available on Payment status page For Cloud Billing accounts that are paid by invoice, access to your payments documents, such as invoices and credit memos, is now available in the Cloud Billing console in the Payment status page. The Payment status page replaces the Invoices page. Self-service (online) Cloud Billing accounts will continue to access Payments documents on the Invoices page. The Payment status page provides a real-time and customizable view of your financial standing with your Cloud Billing account. The Payment status page is based on the Google payments Statement of account page, with your payments documents filtered by the Google payments account that is linked to the Cloud Billing account that you are viewing. For more information about payments documents, see: Get a Cloud Billing document such as an invoice, statement, or receipt. View your cost and payment history Google payments Statement of account
Chronicle SOAR - Release 6.3.92 is now available for all regions. Publisher Agent Version 2.7.0 Publisher Agent Version 2.7.0 is now available for all regions. Release 6.3.93 is being rolled out to the first phase of regions as listed here. This release contains internal and customer bug fixes.
Cloud Composer - The following Managed Airflow versions and builds have reached their end of support period: composer-3-airflow-2.9.3-build.28, composer-3-airflow-2.10.5-build.0, composer-3-airflow-2.10.5-build.2, composer-3-airflow-2.10.5-build.3, composer-3-airflow-2.10.5-build.4, composer-3-airflow-2.10.5-build.5, composer-3-airflow-2.10.5-build.6, composer-3-airflow-2.10.5-build.7, composer-3-airflow-2.10.5-build.8, composer-2.13.6-airflow-2.9.3, and composer-2.13.6-airflow-2.10.5. New images are available in Managed Airflow (Gen 2): composer-2.17.6-airflow-2.11.1 (default) composer-2.17.6-airflow-2.10.5 New Airflow builds are available in Managed Airflow (Gen 3): composer-3-airflow-3.1.7-build.13 composer-3-airflow-2.11.1-build.9 (default) composer-3-airflow-2.10.5-build.42
Cloud Deploy - The Cloud Deploy image now uses a Google-specific fork of Skaffold. The Skaffold version that you see if you run gcloud deploy releases describe, or if you view the release in the Google Cloud Console, is now cd-skaffold instead of a version number.
Cloud Run - Cloud Run sandboxes provide a fast and secure isolated environment to execute untrusted code, such as code generated by AI agents. For more information, see Configure sandboxes for services and Code execution in Cloud Run ( Preview ).
Cloud Spanner - You can use Gemini in Spanner Studio to fix errors in your SQL queries. When you run a query that contains an error, you can click Fix to view a line-by-line comparison of your query and a recommended correction, along with an explanation of the change. This feature is available in Preview.
Compute Engine - Generally available: The network-optimized C4N machine series is generally available for Compute Engine and Google Kubernetes Engine (GKE) customers. Powered by 5th generation Intel Xeon Scalable processors (Emerald Rapids), C4N instances are purpose-built for network- and storage-intensive workloads such as: Network and security appliances High-performance databases High-scale data analytics Distributed filesystems The C4N machine series delivers the highest I/O performance available in Compute Engine, supporting up to 400 Gbps of network bandwidth and up to 95 million packets per second (Mpps) of sustained packet processing performance. C4N also offers leading block storage performance with Hyperdisk Extreme that scales up to 25 GiB/s of bandwidth and 1M IOPS. C4N instances are available in predefined machine shapes with three different vCPU to memory ratios, ranging in size from 2 to 192 vCPUs and up to 1,488 GB of DDR5 memory. For C4N machine types with attached Local SSD disks, you can Request preview access. For more information, see C4N machine series. Generally available: The network-optimized C4N machine series is generally available for Compute Engine and Google Kubernetes Engine (GKE) customers. Powered by 5th generation Intel Xeon Scalable processors (Emerald Rapids), C4N instances are purpose-built for network- and block storage-intensive workloads such as: Network and security appliances High-performance databases High-scale data analytics Distributed filesystems The C4N machine series delivers the highest I/O performance available in Compute Engine, supporting up to 400 Gbps of network bandwidth and up to 95 million packets per second (Mpps) of sustained packet processing performance. C4N also offers leading block storage performance with Hyperdisk Extreme that scales up to 25 GiB/s of bandwidth and 1M IOPS. C4N instances are available in predefined machine shapes with three different vCPU to memory ratios, ranging in size from 2 to 192 vCPUs and up to 1,488 GB of DDR5 memory. For C4N machine types with attached Local SSD disks, you can Request preview access. For more information, see C4N machine series. Preview: Advanced Compute Images provide high-performance images to support your artificial intelligence (AI), machine learning (ML), and high-performance computing (HPC) workloads on Google Cloud. Advanced Compute Images provide a single source of trusted, performance-tuned OS images that remove the need for manual image building for specialized workloads. Each image version is pre-installed with the necessary drivers, network fabrics, and Slurm agents to help you run your workloads.
Dataplex - Knowledge Catalog connectors for importing metadata from SQL Server and PostgreSQL data sources are available in Preview. Knowledge Catalog connectors automatically extract metadata (technical, operational, and business) from external data sources and import it into Knowledge Catalog entry groups. You can schedule metadata import runs on a set schedule. For more information, see About database connectors and Manage connector jobs.
GKE new features - GKE Gateway now supports backend mutual TLS (mTLS). In addition to backend authenticated TLS, backend mTLS allows the GKE Gateway load balancer to authenticate its identity to backend Pods by presenting a client certificate. GKE Gateway configures backend mTLS using the standard Gateway API spec.tls.backend.clientCertificateRef field. This feature is supported for the following GatewayClasses: gke-l7-global-external-managed gke-l7-regional-external-managed gke-l7-rilb For more information, see Configure backend mutual TLS (mTLS) for a Gateway. In GKE version 1.34 and later, you can configure Google Cloud Managed Service for Prometheus to collect Pressure Stall Information (PSI) metrics from cAdvisor. You can use PSI metrics to monitor CPU, memory, and I/O congestion and stall times for your containers, Pods, and nodes. For more information, see Collect specific Prometheus metrics from Kubernetes. In GKE version 1.35.3-gke.1389000 and later, you can run GPU workloads on Confidential GKE Nodes with certain G4 machine types and NVIDIA RTX PRO 6000 GPUs. This feature is available in Preview. For more information, see Encrypt GPU workload data in use with Confidential GKE Nodes. In GKE version 1.36.0-gke.1601000 and later, you can enable the logging of VerticalPodAutoscaler decisions in Cloud Logging. You can use these logs to understand why specific vertical Pod autoscaling decisions were made. This feature is available in Preview. For more information, see Collect vertical Pod autoscaler event logs. The network-optimized C4N machine series is available with GKE clusters running 1.36.0-gke.3009002 or later. You can use C4N machine types in Standard or Autopilot mode.
Google Cloud Armor - Cloud Armor preconfigured rules support ModSecurity Core Rule Set (CRS) 4.22 as a rule source. For more information, see Tuning Google Cloud Armor WAF rules. This feature is Generally Available.
KMS - The Cloud KMS overview dashboard Asymmetric PQC insights chart is generally available. You can use the Asymmetric PQC insights chart and details view to identify how many and which of your asymmetric keys are susceptible to attacks from future quantum computers. This information is an important input into your quantum computing modernization planning and process. For more information about the Asymmetric PQC insights chart, see View asymmetric post-quantum cryptography (PQC) insights.
Looker - For a full list of updates, check the release page.
Migration Center - The discovery client 6.3.14 is available with a new feature and bug fixes. Preview: Added support for discovery of the following assets from your AWS account: Amazon Athena workgroups Amazon Elastic MapReduce (EMR) Amazon Data Firehose AWS Glue Amazon Kinesis Data Streams (KDS) Amazon ElastiCache For more information, see Discover assets on AWS and Directly import asset inventory data from AWS. Fixed an issue in the Linux performance collection script where the output file had insufficient permissions, preventing access by the original non-root user when the script was run with root privileges. Fixed an issue that caused an incorrect memory utilization report for Amazon Relational Database Service (Amazon RDS) and Azure virtual machine (VM) instances. Fixed an issue that could cause failures when uploading collected database information to Migration Center.
Network Connectivity Center - Include and exclude spoke filters for hybrid spokes are generally available. You can use export filters to control which subnets or routes a spoke can send to the hub. Import filters control which subnets or routes can be accepted by a spoke from the hub.
Network Intelligence Center - Connectivity Tests analyzes Proxy Network Load Balancers that are configured with Server Name Indication (SNI) routing for TLS traffic.
Security Command Center - You can modify the data residency and data encryption configuration on the Premium and Standard tiers after you activate Security Command Center for your organization. For more information, see Modify data residency or data encryption configuration.
Service Mesh - The Envoy Compressor Filter is now GA in the regular release channel. The Envoy Lua Filter is now available as a preview feature in the regular release channel.
VMware Engine - Custom organization policy constraints are generally available (GA) for Google Cloud VMware Engine. You can use custom constraints to enforce security policies and restrict configuration of your VMware Engine resources. For more information, see Use custom organization policies. Generally available: Google Cloud VMware Engine offers self-service management for customer-managed encryption keys (CMEK) using the Google Cloud console and the VMware Engine API. You can enable CMEK for your private clouds, using Cloud Key Management Service (Cloud KMS) to manage encryption keys for vSAN and vTPM. Key features and considerations include: You can transition between CMEK and Google-owned and Google-managed encryption keys (GMEK) as needed. The "Auto-Rekey" feature integrates with Cloud KMS key rotation to perform automated key rotation for the key encryption key (KEK), maintaining security without manual intervention or service downtime. Limitations: This self-service functionality is unavailable for private clouds that use CMEK through service tickets. Generally available: Google Cloud VMware Engine offers self-service management for customer-managed encryption keys (CMEK) using the Google Cloud console and the VMware Engine API. You can enable CMEK for your private clouds, using Cloud Key Management Service (Cloud KMS) to manage encryption keys for vSAN and vTPM. Key features and considerations include: You can transition between CMEK and Google-owned and Google-managed encryption keys (GMEK) as needed. The "Auto-Rekey" feature integrates with Cloud KMS to perform automated key rotation for the key encryption key (KEK), maintaining security without manual intervention or service downtime. Limitations: This self-service functionality is unavailable for private clouds that use CMEK through service tickets. Preview: You can configure disaster recovery for Google Cloud VMware Engine by using JetStream. Disaster recovery options include the following: Set up a Google Cloud VMware Engine private cloud as a recovery site for your on-premises VMware applications. Protect workloads on a primary private cloud by using a recovery site in another Google Cloud locatzion or on-premises environment. For more information, see Configure disaster recovery using JetStream. Preview: You can configure disaster recovery for Google Cloud VMware Engine by using JetStream. Disaster recovery options include the following: * Set up a Google Cloud VMware Engine private cloud as a recovery site for your on-premises VMware applications. * Protect workloads on a primary private cloud by using a recovery site in another Google Cloud location or on-premises environment. For more information, see Configure disaster recovery using JetStream.
Workstation - The Data Agent Toolkit Extension is installed by default in Code OSS for Cloud Workstations. The base VM for your workstation includes the Content-Addressable Storage File System (CASFS) kernel module, which lets you run the Android Build File System (ABFS). For more information about the introduction of this module, see the Container-Optimized OS Milestone 129 LTS release notes.