Google Cloud Solution Agentic AI Borderless Data Lakehouse
GoogleOfficialPublished by Google
- Skill
- Workflow
- Cloud and DevOps
- Apache-2.0
- No issues found
AutoGineer summary
Written by AutoGineer from the skill’s own files, not by the author
This skill provides a comprehensive, four-phase workflow to assist users in architecting and implementing borderless open data lakehouse solutions. It guides users through requirements discovery, technical component mapping, architecture design, and the creation of an implementation plan using Infrastructure as Code (IaC). The process is specifically tailored for multi-cloud environments involving Google Cloud, AWS, and Azure, utilizing technologies such as Apache Iceberg, BigQuery, and Managed Service for Apache Spark.
What it does
- Analyzes workload requirements and constraints for multi-cloud data architectures.
- Maps technical components to appropriate Google Cloud products and features.
- Generates architecture diagrams in Mermaid format for data ingestion and serving subsystems.
- Provides guidance on security, reliability, and operational excellence for hybrid environments.
- Produces Infrastructure as Code templates and step-by-step deployment instructions.
- Outlines validation procedures to verify connectivity, security policies, and infrastructure deployment.
When to use it
- When architecting multi-cloud storage infrastructure across Google Cloud, AWS, and Azure.
- When establishing ingestion and AI serving subsystems for distributed data.
- When configuring Cross-Cloud Interconnect for private network connectivity.
- When deploying Gemini Enterprise Agent Platform and BigQuery data agents.
Advantages
- Ensures architectural consistency by following established Google Cloud design patterns.
- Provides a clear, iterative process from initial discovery to final validation.
- Promotes modular network design using transit VPCs and secure connectivity practices.
- Standardizes the use of Terraform for automated resource provisioning.
Usage examples
- “Help me design a multi-cloud data lakehouse that connects AWS S3 and Google Cloud Storage.”
- The agent will initiate the requirements discovery phase to understand your data sources, security needs, and analytical requirements before proposing a technical architecture.
- “I need to deploy a BigQuery data agent for my cross-cloud environment.”
- The agent will guide you through the implementation plan phase, providing the necessary prerequisites and deployment instructions to configure the agent.
Install
Download the skill as a ZIP:
https://mp-staging.autogineer.com/agent-skills/google/google-cloud-solution-agentic-ai-borderless-data-lakehouse/downloadUnzip it into the cross-client skills folder of your project:
mkdir -p .agents/skills && unzip google-cloud-solution-agentic-ai-borderless-data-lakehouse.zip -d .agents/skills
Documentation by Google
Borderless open data lakehouse agentic AI system
Follow this workflow to help users design and implement a custom multi-product solution in the cloud for a given workload, use case, or requirement.
Attribution
MUST READ: Before executing any gcloud, REST API, or MCP command, you
MUST read and follow the instructions in
Usage Attribution.
Product Renaming & Terminology
When generating solution designs, architecture diagrams, and documentation, use the updated Google Cloud product names. For details on legacy vs. updated product names and terminology, see references/product_renaming.md.
Workflow
The solution design and implementation workflow consists of the following phases:
Phase 1: Requirements discovery and analysis: Analyze the workload's requirements, constraints, dependencies, and current state.
Phase 2: Solution design: Build a technology stack, architecture, and deployment configuration for the workload based on Google Cloud design best practices and recommendations.
Phase 3: Implementation plan: Generate automation and instructions to deploy the solution.
Phase 4: Solution validation: Validate that the deployment meets the requirements of the workload.
Phase 1: Requirements discovery and analysis
[ ] [ ] Step 1: Discover requirements: Understand the functional and non-functional requirements, business goals, and current state (if any) of the workload, including its architecture, dependencies, and constraints. Use the following questions to guide the requirements discovery process:
What are your primary data sources?
How do you manage and federate metadata across your data sources?
What are your security and credential management requirements?
What are the analytical and computational requirements to join and transform this borderless data?
What types of natural language prompts or user queries do you expect AI agents or end-users to execute against this data?
[ ] [ ] Step 2: Identify components: Based on the requirements analysis, identify the components of the workload and their relationships. Also identify any borderless components, hybrid components, or on-prem components that the solution needs to integrate with.
[ ] [ ] Step 3: Generate component decomposition: Generate a technical decomposition of the components of the workload.
[ ] [ ] Step 4: Ask for confirmation: Ask the user to confirm whether the generated technical decomposition matches their workload requirements.
[ ] [ ] Step 5: Iterate: If the user requests changes, then generate an updated technical decomposition, and ask the user to confirm the changes. Continue iterating until the user confirms the technical decomposition.
Phase 2: Solution design
[ ] [ ] Step 1: Retrieve relevant Google Cloud documentation: Use available search or fetch tools to read the content of the following Google Cloud documentation to ground the guidance that you generate in the remaining steps of this phase before proceeding.
Build hybrid and borderless architectures using Google Cloud
Network segmentation and connectivity for distributed applications in Cross-Cloud Network
Patterns for Connecting Other Cloud Service Providers with Google Cloud
Important: Use the content that you retrieve from Google Cloud documentation to ground the guidance that you generate in the remaining steps of this phase.
[ ] [ ] Step 2: Map components to Google Cloud products: For each component in the confirmed technical decomposition, identify the appropriate Google Cloud products and features, based on the guidelines in references/product_mapping.md.
[ ] [ ] Step 3: Create architecture diagram: Create an architecture diagram that shows the components, their relationships, and data/control flows.
The diagram must be in the Mermaid format: https://github.com/mermaid-js/mermaid.
The diagram must show a clear distinction between the products in the data ingestion subsystem and the serving subsystem.
The diagram must show Managed Service for Apache Spark as a shared component for ETL/ingestion processing, bridging the data ingestion and serving subsystems (distinct from interactive IDE analytics workflows).
[ ] [ ] Step 4: Generate design recommendations: Generate design guidance based on the guidelines in references/design_recommendations.md.
[ ] [ ] Step 5: Draft solution architecture: Compile the requirements, technical decomposition, product mapping, architecture diagram, and design recommendations into a single Markdown file named
solution-architecture-guide.md, based on the template in assets/output-template.md.[ ] [ ] Step 6: Request review: Present the generated solution architecture to the user and request their feedback or approval.
[ ] [ ] Step 7: Iterate: If the user requests changes, generate an updated solution architecture and repeat steps 2-6 until the user approves the solution architecture.
Phase 3: Implementation plan
[ ] [ ] Step 1: Retrieve relevant implementation resources:
Terraform Registry documentation for biglake_iceberg_catalog
Create an Apache Iceberg table with metadata in Lakehouse runtime catalog
Accelerate Spark batch workloads and sessions with Lightning Engine
Important: Use these resources as the technical foundation for the IaC and deployment instructions you generate in the remaining steps of this phase.
[ ] [ ] Step 2: Identify deployment prerequisites: Document prerequisites for the deployment, including the following:
Projects and billing associations
Required Google Cloud APIs
Required IAM permissions
Any other prerequisites
[ ] [ ] Step 3: Generate Infrastructure as Code (IaC): Generate code (e.g., Terraform) and deployment scripts to automate the provisioning of the proposed Google Cloud resources.
[ ] [ ] Step 4: Write deployment instructions: Draft sequential, step-by-step deployment instructions to execute the IaC and initialize the workload components.
[ ] [ ] Step 5: Request review: Present the generated deployment instructions to the user for feedback and confirmation.
[ ] [ ] Step 6: Iterate: If the user requests changes, generate an updated implementation plan and repeat steps 2-5 until the user approves the implementation plan.
Phase 4: Solution validation
[ ] [ ] Step 1: Retrieve relevant verification resources (optional): If the resources from Phase 3 are not already in your context, retrieve the same implementation resources as the starting point for the validation checks and verification scripts that you generate in this phase.
[ ] [ ] Step 2: Define validation checks: Outline validation steps to verify that the deployed infrastructure meets the workload requirements:
Deployment dry-run: Commands like
terraform planto preview changes.Connectivity and routing: Verification of network paths, load balancer routing, and service endpoints.
Security policies: Verification of restricted access, firewall rules, and IAM enforcement.
[ ] [ ] Step 3: Generate verification scripts: Draft lightweight scripts or command-line instructions (e.g. using
curlorgcloud) that the user can run to perform these validation checks.[ ] [ ] Step 4: Compile validation report: Document the validation steps, verification scripts, and expected outcomes in a single Markdown file.
[ ] [ ] Step 5: Conduct validation and finalize: Assist the user in executing the validation checks and troubleshooting any deployment issues. After the solution is validated successfully, request final approval from the user.
[ ] [ ] Step 6: Iterate: If the user requests changes, then generate an updated validation plan and repeat steps 2-5 until the user approves the validation plan.
Files
- ATTRIBUTION.mdAdded by AutoGineer934 B
- LICENSELicence file added by AutoGineer11.1 KiB
- SKILL.md10.1 KiB
- assets/output-template.md6.5 KiB
- references/attribution.md2.0 KiB
- references/design_recommendations.md4.9 KiB
- references/product_mapping.md3.7 KiB
- references/product_renaming.md1.5 KiB
references/design_recommendations.md
Design Recommendations Guidance
Generate design guidance based on the following Google Cloud best practices and recommendations:
Security, privacy, and compliance:
To create and manage permissions for Google Cloud resources, use Google's Identity and Access Management (IAM) service.
To securely access raw data in Cloud Storage, use BigQuery Cloud resource connections.
To securely manage borderless external catalog authentication, use the security standard of the source platform to choose between Lakehouse Iceberg REST catalog federation with Secret Manager and OIDC token federation.
To delegate storage access and apply fine-grained IAM policies at the table level for tables stored in Cloud Storage, enable credential vending for your Lakehouse for Apache Iceberg runtime catalog.
To enforce the principle of least privilege, manage access through system-managed identities.
Use Cloud NAT and Cloud Router to enable resources in private subnets to securely access external cloud sources without exposure to the public internet.
Use Sensitive Data Protection to discover, classify, and de-identify sensitive data in prompts, responses, and data lake files using masking or encryption.
For more information about security, privacy, and compliance in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/security.md.txt
Reliability:
To ensure reliable performance and minimize data transfer costs over borderless networks, use Cross-Cloud Interconnect to establish a private connection between Google Cloud and other cloud providers, avoiding the unpredictable latency of the public internet.
Configure Dedicated or Partner Interconnect with redundant connections in different edge availability domains and locations.
Use Cloud DNS routing policies to route traffic to regional load balancers, enabling automatic failover to alternative regions during outages.
For more information about reliability in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/reliability.md.txt
Operational excellence:
Place external connections and routing in a dedicated transit VPC to serve as a shared, modular connectivity service for other VPCs and simplify network administration.
Use Terraform as the Infrastructure as Code (IaC) tool to define and automate the provisioning of heterogeneous resources, ensuring consistency across environments.
Configure bidirectional DNS forwarding between Cloud DNS and external DNS servers to enable seamless name resolution across hybrid environments.
For more information about operational excellence in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/operational-excellence.md.txt
Cost optimization:
To save costs and overhead associated with building and maintaining CDC pipelines, use BigQuery federated queries to AlloyDB to query your data directly.
In cases where latency is not critical, use the Standard Network Service Tier for outbound internet traffic to reduce network egress costs.
For more information about cost optimization in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/cost-optimization.md.txt
Performance efficiency:
To mitigate AI model hallucinations, ground your model on the unified data profile to enforce business definitions and statistical validation.
To perform exact-match filters to operational databases, use BigQuery federated queries.
To offload memory-heavy and complex data manipulation, such as vectorized borderless joins, use Managed Service for Apache Spark with Lightning Engine.
Use Cross-Cloud Interconnect to establish high-bandwidth, low-latency private connections to other CSPs to maximize throughput for distributed applications.
Configure redundant intra-regional network connections in an active/active design using Equal Cost Multi-Path (ECMP) routing to aggregate bandwidth.
Select Google Cloud regions that are geographically close to the external CSP's regions to minimize latency and improve data transfer performance.
For more information about performance efficiency in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/performance-optimization.md.txt
Sustainability:
To maximize compute efficiency and reduce energy consumption, use Managed Service for Apache Spark with Lightning Engine to handle massive joins and complex windowing.
Use BigQuery Omni to query data in place on AWS or Azure (Amazon S3 or Azure Blob Storage) to avoid resource-intensive borderless data replication.
For more information about sustainability considerations, see https://docs.cloud.google.com/architecture/framework/sustainability/printable.md.txt
Requirements and compatibility
Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta
“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.
Security
No issues found by our static scan· No issues found
A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.
Attribution and licence
- Published by
- Publisher
- Google (Official)
- Source
- google/skills · skills/cloud/google-cloud-solution-agentic-ai-borderless-data-lakehouse · commit 2194d3b
- Licence
- Apache License 2.0 (redistribution allowed)
- LICENSE (added by AutoGineer from LICENSE)
- ATTRIBUTION.md (written by AutoGineer)
- Synced
AutoGineer is not affiliated with or endorsed by Google.
Download ZIP
The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download google-cloud-solution-agentic-ai-borderless-data-lakehouse.zip