Associate Cloud Engineer deep review — September 29, 2026

Same-context AI review; independent human review pending. Study guide.

Scope and accepted lifecycle baseline

The actual five-page exam PDF was fully read in layout mode: 94 considerations under 12 numbered objectives, grouped 16/24/43/11 with weights 20/30/30/20. Actual PDF bytes, hash and page count are retained. No visible revision date is invented.

The canonical objective hash remained 1c26e61d687b69b9e2b0b00e59d537b271eae0647d525dd9d40284ea28c11d74. The monitor flagged a previously absent lifecycle snapshot, not changed objectives. After reading the standard and renewal details, the missing status baseline was explicitly initialized at 762fdb9ac414466bbef6cb44914ac1ca178e5974bc12f7e76984c891b85a3154; a subsequent monitor run reported unchanged. Initial, accepted and post-check receipts are preserved. The shorter renewal exam and designated Skills renewal route have different validity and eligibility rules.

Teaching and source evidence

The guide distinguishes service-account attachment, token creation, target access and ADC provenance; direct GKE workload principals, optional impersonation and node image-pull identity; policy evaluation layers rather than a flattened firewall priority list; and snapshot completion versus application recovery. Standalone organizations and Workstations now have explicit eligibility, ownership, persistence and restart behavior.

Cloud Run maximum-instance documentation and the autoscaling explanation support treating scaling settings as one control alongside pool limits, headroom and backpressure. The guide separates service/revision settings and labels its connection counts as invented scenarios. Spend-cap preview documentation supplies the eligible scope, estimated trigger and continuing-charge boundaries; alerts-only budgets remain distinct.

Pub/Sub delivery guarantees do not establish atomic external business effects. Logging routing, uniform-access migration and BigQuery estimate controls each gain a concrete failure distinction. The full April 22, 2026 Google app/platform announcement supplies naming context, not a deployment guarantee. Historical Container Registry shutdown is distinguished from valid Artifact Registry-backed gcr.io URLs.

Targeted documentation sections were read for these claims, not every long API example or linked document. One guessed firewall URL returned 404; the canonical evaluation-order page was located, fetched and read, with the failed initial receipt retained. All final added reference URLs are reachable.

Executed evidence and remaining labs

The exact public standard-library Python worksheet passed 32 checks: eight CIDR arithmetic cases, five invented connection-budget cases, and nineteen actual in-memory SQLite checks. The transaction exercise atomically links a reservation, business-operation deduplication record and outbox row. Duplicate retry does not reserve stock twice; a conflicting payload fails; an exception after the update rolls everything back; retry then succeeds. A different business key legitimately produces a new effect. The receipt stores the public code hash and Python/SQLite versions.

These checks do not validate a Google Cloud deployment. CIDR inventory may be incomplete; the autoscaler is not simulated; in-memory exception rollback does not prove disk durability, process-crash recovery, concurrency, dispatcher delivery or recipient idempotency. gcloud was absent from PATH; no installation, sign-in, credentials, project, billing, IAM, cloud runtime or external notification was used.

The guide has 50 answered checks, three integrated scenarios and eight proposed cloud labs, each with acceptance and failure/recovery evidence. Live cloud verification remains outstanding.

Public learning resources

Google Skills shows 17 activities and a relative twenty-hour update age, not twenty hours of instruction; the prior 73h15m duration is unverified. The Google-authored Coursera series has six cards totaling 42 hours, an overall four-week/ten-hour schedule and a conflicting FAQ. Its first course now covers Gemini Notebook study preparation, while a GKE outcome still names Container Registry. No paid lesson was inspected.

A current Pluralsight ACE path was found: seven courses total 7h39m and four labs 2h15m, versus the rounded ten-hour header. Core dates are mostly 2025; the gcloud demo and labs are 2026. Split planning/deployment titles require mapping to the combined current domain. Whizlabs direct and browser views exposed a title-only shell; differing search-index counts were not accepted as full current catalog evidence. O'Reilly returned 403. No proprietary assessments or recalled exam items were read. Places to learn remains last.

The operational receipt records executed local checks and, after completion, unit tests, repository validation, catalog consistency, strict site generation, generated-site validation and diff checks. Source freshness is current; the program outcome remains reviewed with blockers for live-cloud and independent-human verification.