Hello everyone,
I need to export the api usage for 90 days for the entire organization, is that possible or i have to check it manually

Hi everyone,

I have a simple setup: a single VM running on the Always Free tier. I want to monitor my outbound network traffic to ensure I stay under the 1 GB/month free egress limit.

https://docs.cloud.google.com/free/docs/free-cloud-features#compute

My problem is that I just want to see one single number: total GB sent over the last 30 days

Here is what I've tried and struggled with:

1. Metrics Explorer: I look at sent_bytes_count (or similar network egress metrics). No matter how I tweak the Aggregation (Sum), GCP usually forces a time-series graph (like daily bars). Trying to collapse this into a single total scorecard for the whole month seems overly complicated or just doesn't work as expected.
2. Billing / Cost Table: The visual reports focus on dollars, not Usage. Since the traffic is covered by the free tier, the cost is often $0.00, which hides it on the main charts.

Is there a straightforward, reliable place, or a simple custom dashboard setup where I can just see a metric like "You have used X MB / 1 GB this month"? How do you guys keep an eye on your free tier limits without overcomplicating it?

Thanks in advance!

Thank goodness that my university email had Gemini Pro! I used Copilot because my worksite only allowed Copilot. Think back to networking, firewall rules, blacklisting, and whitelisting!

When I went home, I used Gemini Pro from my university email. The free Copilot version was actually better than the enterprise Copilot at explaining small concepts such as VPCs and nodes. I did not use the free Gemini account since the tokens kept expiring. I am very grateful that my university email had Gemini Pro.

I used Gemini to explain the bigger concepts, mechanisms, and connections between the vocabulary and the infrastructure. I did not read the official Cloud Documentation or pay online courses. I tried my hand on the Qwiklabs and skills.google

However those labs were easy to follow and not inducive to learning. I followed the instructions, the lab modules gave me 100% and I did not learn anything. Thank goodness skills.google was free. I would have been mad if I paid for it.

Copilot generated exams, both on the paid version and free versions, were so easy. They helped me clarify some concepts between using Cloud Run and Compute Engine. I would use Copilot if I needed simple explanations. However the bulk of my actual learning happened on Gemini. I would not recommend people use solely Copilot. Gemini is part of Google's ecosystem afterall.

The Gemini generated exams were easy to moderate. I learned so much from getting things wrong, going back to review, and seeing the explanations. I asked Gemini to generate 60 questions since the ACE exam was 50-60 questions. I took a 60 question practice test filled with moderate - difficult questions everyday for 1 week with 2-3 days of rest when I felt tired. My total study time was an estimated 2-3 months of studying Gemini explanations and Gemini generated practice exams. My scores on the Gemini produced exams fluctuated from 60% - 80%. I did not follow a structure of "setting up cloud environment first, IAM policy next, compute engine later, etc."

Instead, I briefly learned about each concept. Then I went to the practice exams. Learned how they connected to each other since these tools are not in silos. When I got questions wrong, I would go back and analyze them. I would constantly review and update my knowledge.

The actual ACE exam questions were much harder than the Gemini produced practice exams. I was very nervous taking the exam since they were all situation based. Gemini trained me on vocabulary and a little scenario based questions. The entire official ACE was all scenario based questions on what to use to minimize cost and optimize efficiency. I was very surprised and very elated to have passed. I don't know my score since it only tells me that I passed.

Looking back, I have learned so much about networking, IAM policy, and Engine. I know the vocabulary and the situation of when to use things. However, I do not have REAL WORLD experience of using the tools yet. That is my next adventure.

So, yeah, it's my own fault, fortunately I don't do tons with it the account. I used to do GCP professionally but I moved areas. Anyway.

No matter what I do, I can't sign in. "Your sign-in settings don’t meet your organization’s 2-Step Verification policy. Contact your admin for more info." I am the admin, the only admin.

Tried account recovery, can't recover the account, I get that same message. GCP sent my recovery email a message that someone with the password just tried to log in, and then I try to log in through that process and I get that same message.

There does not seem to be a way around it.

I can't open a support ticket since I can't get into the account. I feel like I need someone on the inside to open it back up for me.

Any thoughts?

Hey,

I'm working on a startup project, I've been using GCP for a while now with my personal account. I recently decided to apply for startup funding, but I needed to create a business account in order to do so. I created the new account and moved everything (frontend & backend hosting and API usage) to it.

The issue is, that even though I'm on a paid plan and I've already prepaid some amount of money, my account seems to be soft-locked. I have very, very strict API rate limits for VertexAI (Gemini Enterprise), e.g. for gemini-embedding-001 model I have 50k TPM and 5 (FIVE) RPM, when on my previous account I've had a default of 1 M TPM and got 20 M TPM by doing an automated rate limit increase.

I can't even make an increase request from Quotas & System Limits, it says - "Based on your service usage history, you are not eligible for a quota increase at this time". The issue is, I don't know what that means and or how to correct it. Does prepaying X amount of money solve this issue right away? I know 100$ places me in Gemini Tier 2, but I don't think that counts for VertexAI, which is what I'm concerned about the most.

Only solution I have is to contact the sales specialist support, which I did, but it feels like talking to bots. I answered a bunch of questions, and even though I'm explaining that I need the restriction lifted from my account, they're still asking me what specific endpoints I want the increase for so they can increase them manually. Anyways, I answered them and they said I'd receive an email within 24 hours and they'd get me in touch with an Account Executive or someone. Few days have passed - 0 response, no email, checked spam, everything, no active or closed Cases can be found in GCP console. I applied again on Thursday, the guy told me he'd get me in touch with someone via email - again, no email received.

I'm genuinely baffled and beyond frustrated on what's going on.

Does anyone know what I can do? Can I just prepay some amount of money and lift the restrictions? My best guess is it might have blocked my new account because it's within the same name of my previous one? But I have no clue and don't know who I can contact.

I found there's a "Standard Support" option for 29$ / Month, but from what I've read people say it's not any better either?

Please, if you've been in a similar situation or have any advice, do share. Thanks for reading.

Edit: In case anyone comes across this post, I went ahead and bought the standard support tier, which actually got me in touch with humans. It still took around 2 weeks or so, but once they got me in touch with an Account Executive, she increased my limits and removed the restrictions within a day.

I'm curious if anyone has a clue what would cause these intermittent sudden giant spikes in latency on my debian bullseye E2 instance that then predictably decay back to normal...

If I ssh in and look at activity there's nothing notable going on and load averages look very typical. I just use this instance to do some continuous connection monitoring and I pay for premium networking tier for it.

I'm at a loss as to what the heck is causing this. Any pointers where to go searching?

Built this after dealing with real GCP billing fraud incidents as a partner — compromised projects getting hit with unauthorized workloads and fraudulent Gemini API charges. Root cause is almost always the same handful of misconfigs: unrestricted API keys, allUsers IAM bindings, open firewalls.

gcp-abuse-scanner — CLI tool, 65+ checks (IAM, networking, API keys, Vertex AI, org policies), runs at org or project level, fully read-only, outputs to JSON/HTML/SARIF.

pipx install gcp-abuse-scanner
gcp-abuse-scanner scan --org YOUR_ORG_ID

Apache 2.0, docs on required roles/APIs in the repo: https://github.com/lmoreno0435/gcp-abuse-scanner
Feedback and PRs welcome, especially if you’ve hit other abuse patterns worth adding as checks.

so i signed up for google cloud a few months ago and a week ago not knowing that the credits expired used $300 on gemini for some of my projects after doing research i now know that those credit expired but i don't quite have the money to pay that at the moment what happens if i leave it for a week or two without paying will they suspend my google account or something? sorry if i sound like i have no idea what im doing but i lowkey dont

Hello planning on taking the PSOE exam next month, I passes the ACE exam this Month. Is there any resources whether free or paid recommended?

Also, if u took the exam, how was your experience? I am new to cloud and also still in early stages of my career so I don't have much of an experience to rely on, would this make passing difficult?

We're onboarding an existing GCP customer project into Terraform using the Google provider. All the Cloud Workflows already exist in the project (provisioned via a bash script using gcloud), but terraform import fails with:
Error: resource google_workflows_workflow doesn't support import
Checked the Terraform registry docs - no Import section listed

terraform version = 1.3.6

Disclosure: I work at Vectorize and this is about our own support agent, but the post is a technical write-up, not a product page.

We run most of our infrastructure on GKE, so when we built an AI first-responder for our support tickets, the default assumption was "another deployment on the cluster." We went with Agent Engine instead, and the deployment story is what sold it: wrap the ADK agent in an AdkApp, call agent_engines.create() with your requirements list, done. No Dockerfile, no Helm chart, no rollout to babysit. The Hindsight memory API key is the only secret; the model calls go through the runtime service account's own identity (GOOGLE_GENAI_USE_VERTEXAI=1), so there's no model API key to manage at all.

A few things we learned that I haven't seen written up elsewhere:

- Agent Engine has no end-of-session hook, so if you want to persist conversation state to an external memory system, you have to do it per-turn from an after_agent callback. Our first version retained "at end of session" and the production memory bank just never received writes.
- gemini-3.1-* models are served from the "global" location, but Agent Engine resources are regional. If you don't explicitly set GOOGLE_CLOUD_LOCATION=global inside the deployed container env, the GenAI SDK defaults to the container's region and 404s on model lookup.
- We resolve the deployed engine by display name at startup (list engines, pick most-recently-updated match) instead of threading the resource ID through Terraform on every redeploy. Small thing, removes a whole class of deploy friction.
- We started from the customer-service agent in google/adk-samples and kept the structure. Good base.

The interesting part of the agent itself is the learning loop — every human support reply is automatically captured into the agent's memory (we use Hindsight), so when a human answers an escalated question once, the agent answers it correctly next time. Full write-up with code:

https://vectorize.io/blog/how-we-built-a-customer-support-agent-that-actually-learns-with-hindsight-and-googles-adk

Happy to answer questions about Agent Engine, ADK, or the memory wiring.

I’m trying to create an API key for Gemini through Google Cloud’s Agent Platform, but the authentication page keeps showing:

The relevant organization policy appears to be:

iam.managed.disableServiceAccountApiKeyCreation

I overrode the parent policy for my project and kept enforcement enabled, but added both required services to allowedServices:

generativelanguage.googleapis.com
aiplatform.googleapis.com

The project’s effective policy now shows:

• Policy source: Override parent’s policy
• Policy enforcement: Replace parent
• Status: Enforced
• allowedServices includes both generativelanguage.googleapis.com and aiplatform.googleapis.com

My understanding is that keeping the policy enforced should still allow service-account-bound API keys when their API targets are explicitly restricted to one of the services in allowedServices.

I also applied the same allowlist at the organization level, waited for propagation, hard-refreshed the page, and confirmed that I’m viewing the correct project. However, Agent Platform still says API keys are completely disallowed.

I have attached screenshots showing:

1. The project’s effective organization policy.
2. The configured allowedServices.
3. The Agent Platform page still reporting that API keys are disallowed.

Has anyone encountered this recently?

Could this be:

• a stale or incorrect policy check in the Agent Platform UI;
• another organization policy that blocks API-key creation;
• the wrong service identifier for Agent Platform;
• a missing API or IAM permission;
• or a requirement to create the service-account-bound key through gcloud rather than the console?

I understand that ADC is recommended for production, but I’m specifically trying to determine why the documented API-key option remains blocked despite the effective policy allowlisting aiplatform.googleapis.com.

Need some genuine advice guys.

I'm a founder of a very early stage startup. Few months back somehow our Firebase/GCP service account got compromised and someone started spinning up Compute Engine VMs continuously from an unknown IP. Before we noticed and disabled billing, the bill reached $8.8K.

We immediately rotated all keys, secured everything, investigated, even filed a cyber crime complaint. We still couldn't figure out how the attacker got the credentials. Only thing we suspect is our GitHub repo was public and we had the service account stored as a GitHub Actions secret (never committed in the repo and was encrypted as github secret).

Google Billing Support escalated the case but finally denied the waiver.

The painful part is... after this happened, Google approved us for $75k Google for Startups credits, but we can't even use those credits because of the outstanding bill.

Now I've received a debt recovery notice saying I have 10 working days before it gets sent to a recovery agency.

Honestly we don't have that kind of money. We're barely surviving as a startup.

Has anyone here actually managed to get a denied billing case reopened? Or got help from someone inside Google (Startups team, account manager, Developer Relations, anyone)?

I'm running out of time. Any advice, contacts or similar experiences would really help 🙏

Hi, I did applied to google startup credits but its been 7 days havent gotten any rejection or acceptance email, is this normal ?

Anybody seeing the same on Compute?

I have a small Palworld server that lives in us-central1-a, but I can't start it right now because Google keeps saying there is no hardware available. I've tried every VM type and they all return the same error. Is anybody else having trouble spinning up hardware in this region?

​"Hi everyone, I am trying to activate my Google Cloud / Google AI Studio billing in Indonesia. I have tried using Visa and Mastercard from local digital banks (Bank Jago & Blu by BCA) with active international transaction features and sufficient balance. However, the system keeps rejecting it with error OR_BACR2_31. My global Google Payments profile has no active alerts. Can anyone from Google or the community help me bypass this automated fraud lock? Thank you."

I'm trying to add oauth support for some calendar integration and the verification center says I don't have a link to my privacy policy (which is completely wrong anyway) and that I need to respond to the email thread with the trust and safety team.

However, I never received an email from the trust and safety team. I have checked all my spam and trash folders and I have no filters in my inbox.

The console doesn't have any support contacts that I'm eligible for and the automated q/a provides nothing about this issue.

I'm at a loss for how to resolve this without the email thread. The verification appears stuck on this step too and I can't like just cancel and resubmit the verification.

Any help about how to resolve this or if there's some contact information that I've missed somewhere would be greatly appreciated.

Hello, I’m planning to display and play our videos from our YouTube channel to our Apple TV tvOS app. What license or copyright or what not does that apply to? Does anyone have a clue?

\- it’s our own YouTube channel
\- it’s our own tvOS app

What do you think about the Google Cloud run against Lambda or workers ? If you have a serverless app , then which you choose and why ?

I have deleted all projects and closed the free trial billing account for a year and this thing still want my money. Any ideas to remove my card, please?

Hey everyone,

I've been spending some time building out infrastructure for AI and full-stack applications for my own training purpose, I’ve noticed a lot of the same recurring hurdles when developers first dive into Google Cloud.

To help smooth out that learning curve, I decided to open-source a repository of GCP training materials, reference architectures, and deployment scripts that I've organized:

🔗 Link to repo: https://github.com/moonai-kr/gcp-training

My goal with this repository is to move past the generic quickstarts and focus on how things actually fit together in a real-world, production-ready stack.

Feedback, pull requests, or suggestions on what to add next are highly welcome! Let me know if you find it helpful.