Generated banner for Google Cloud Solution Agentic AI Borderless Data Lakehouse
Generated logo for Google Cloud Solution Agentic AI Borderless Data Lakehouse

Google Cloud Solution Agentic AI Borderless Data Lakehouse

GoogleOfficialPublished by Google

  • Skill
  • Workflow
  • Cloud and DevOps
  • Apache-2.0
  • No issues found

From the author

Discovers requirements and designs a borderless open data lakehouse using Lakehouse for Apache Iceberg and BigQuery data agents. Use when architecting multi-cloud storage infrastructure (Cloud Storage, AWS S3, Azure Blob), establishing ingestion and AI serving subsystems, configuring Cross-Cloud Interconnect, or deploying Gemini Enterprise Agent Platform and BigQuery data agents. Don't use for single-cloud data warehouses, or when the focus is on Knowledge Catalog metadata governance and Spark-driven IDE analytics workflows (use google-cloud-solution-agentic-analytics-spark-knowledge-catalog instead).
— the description by Google

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill provides a comprehensive, four-phase workflow to assist users in architecting and implementing borderless open data lakehouse solutions. It guides users through requirements discovery, technical component mapping, architecture design, and the creation of an implementation plan using Infrastructure as Code (IaC). The process is specifically tailored for multi-cloud environments involving Google Cloud, AWS, and Azure, utilizing technologies such as Apache Iceberg, BigQuery, and Managed Service for Apache Spark.

What it does

  • Analyzes workload requirements and constraints for multi-cloud data architectures.
  • Maps technical components to appropriate Google Cloud products and features.
  • Generates architecture diagrams in Mermaid format for data ingestion and serving subsystems.
  • Provides guidance on security, reliability, and operational excellence for hybrid environments.
  • Produces Infrastructure as Code templates and step-by-step deployment instructions.
  • Outlines validation procedures to verify connectivity, security policies, and infrastructure deployment.

When to use it

  • When architecting multi-cloud storage infrastructure across Google Cloud, AWS, and Azure.
  • When establishing ingestion and AI serving subsystems for distributed data.
  • When configuring Cross-Cloud Interconnect for private network connectivity.
  • When deploying Gemini Enterprise Agent Platform and BigQuery data agents.

Advantages

  • Ensures architectural consistency by following established Google Cloud design patterns.
  • Provides a clear, iterative process from initial discovery to final validation.
  • Promotes modular network design using transit VPCs and secure connectivity practices.
  • Standardizes the use of Terraform for automated resource provisioning.

Usage examples

“Help me design a multi-cloud data lakehouse that connects AWS S3 and Google Cloud Storage.”
The agent will initiate the requirements discovery phase to understand your data sources, security needs, and analytical requirements before proposing a technical architecture.
“I need to deploy a BigQuery data agent for my cross-cloud environment.”
The agent will guide you through the implementation plan phase, providing the necessary prerequisites and deployment instructions to configure the agent.

Install

  1. Download the skill as a ZIP:

    https://mp-staging.autogineer.com/agent-skills/google/google-cloud-solution-agentic-ai-borderless-data-lakehouse/download
  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip google-cloud-solution-agentic-ai-borderless-data-lakehouse.zip -d .agents/skills

Documentation by Google

Borderless open data lakehouse agentic AI system

Follow this workflow to help users design and implement a custom multi-product solution in the cloud for a given workload, use case, or requirement.

Attribution

MUST READ: Before executing any gcloud, REST API, or MCP command, you MUST read and follow the instructions in Usage Attribution.

Product Renaming & Terminology

When generating solution designs, architecture diagrams, and documentation, use the updated Google Cloud product names. For details on legacy vs. updated product names and terminology, see references/product_renaming.md.

Workflow

The solution design and implementation workflow consists of the following phases:

  • Phase 1: Requirements discovery and analysis: Analyze the workload's requirements, constraints, dependencies, and current state.

  • Phase 2: Solution design: Build a technology stack, architecture, and deployment configuration for the workload based on Google Cloud design best practices and recommendations.

  • Phase 3: Implementation plan: Generate automation and instructions to deploy the solution.

  • Phase 4: Solution validation: Validate that the deployment meets the requirements of the workload.

Phase 1: Requirements discovery and analysis
  • [ ] [ ] Step 1: Discover requirements: Understand the functional and non-functional requirements, business goals, and current state (if any) of the workload, including its architecture, dependencies, and constraints. Use the following questions to guide the requirements discovery process:

    • What are your primary data sources?

    • How do you manage and federate metadata across your data sources?

    • What are your security and credential management requirements?

    • What are the analytical and computational requirements to join and transform this borderless data?

    • What types of natural language prompts or user queries do you expect AI agents or end-users to execute against this data?

  • [ ] [ ] Step 2: Identify components: Based on the requirements analysis, identify the components of the workload and their relationships. Also identify any borderless components, hybrid components, or on-prem components that the solution needs to integrate with.

  • [ ] [ ] Step 3: Generate component decomposition: Generate a technical decomposition of the components of the workload.

  • [ ] [ ] Step 4: Ask for confirmation: Ask the user to confirm whether the generated technical decomposition matches their workload requirements.

  • [ ] [ ] Step 5: Iterate: If the user requests changes, then generate an updated technical decomposition, and ask the user to confirm the changes. Continue iterating until the user confirms the technical decomposition.

Phase 2: Solution design
Phase 3: Implementation plan
Phase 4: Solution validation
  • [ ] [ ] Step 1: Retrieve relevant verification resources (optional): If the resources from Phase 3 are not already in your context, retrieve the same implementation resources as the starting point for the validation checks and verification scripts that you generate in this phase.

  • [ ] [ ] Step 2: Define validation checks: Outline validation steps to verify that the deployed infrastructure meets the workload requirements:

    • Deployment dry-run: Commands like terraform plan to preview changes.

    • Connectivity and routing: Verification of network paths, load balancer routing, and service endpoints.

    • Security policies: Verification of restricted access, firewall rules, and IAM enforcement.

  • [ ] [ ] Step 3: Generate verification scripts: Draft lightweight scripts or command-line instructions (e.g. using curl or gcloud) that the user can run to perform these validation checks.

  • [ ] [ ] Step 4: Compile validation report: Document the validation steps, verification scripts, and expected outcomes in a single Markdown file.

  • [ ] [ ] Step 5: Conduct validation and finalize: Assist the user in executing the validation checks and troubleshooting any deployment issues. After the solution is validated successfully, request final approval from the user.

  • [ ] [ ] Step 6: Iterate: If the user requests changes, then generate an updated validation plan and repeat steps 2-5 until the user approves the validation plan.

Files

references/design_recommendations.md

Design Recommendations Guidance

Generate design guidance based on the following Google Cloud best practices and recommendations:

  • Security, privacy, and compliance:

    • To create and manage permissions for Google Cloud resources, use Google's Identity and Access Management (IAM) service.

    • To securely access raw data in Cloud Storage, use BigQuery Cloud resource connections.

    • To securely manage borderless external catalog authentication, use the security standard of the source platform to choose between Lakehouse Iceberg REST catalog federation with Secret Manager and OIDC token federation.

    • To delegate storage access and apply fine-grained IAM policies at the table level for tables stored in Cloud Storage, enable credential vending for your Lakehouse for Apache Iceberg runtime catalog.

    • To enforce the principle of least privilege, manage access through system-managed identities.

    • Use Cloud NAT and Cloud Router to enable resources in private subnets to securely access external cloud sources without exposure to the public internet.

    • Use Sensitive Data Protection to discover, classify, and de-identify sensitive data in prompts, responses, and data lake files using masking or encryption.

    • For more information about security, privacy, and compliance in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/security.md.txt

  • Reliability:

    • To ensure reliable performance and minimize data transfer costs over borderless networks, use Cross-Cloud Interconnect to establish a private connection between Google Cloud and other cloud providers, avoiding the unpredictable latency of the public internet.

    • Configure Dedicated or Partner Interconnect with redundant connections in different edge availability domains and locations.

    • Use Cloud DNS routing policies to route traffic to regional load balancers, enabling automatic failover to alternative regions during outages.

    • For more information about reliability in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/reliability.md.txt

  • Operational excellence:

    • Place external connections and routing in a dedicated transit VPC to serve as a shared, modular connectivity service for other VPCs and simplify network administration.

    • Use Terraform as the Infrastructure as Code (IaC) tool to define and automate the provisioning of heterogeneous resources, ensuring consistency across environments.

    • Configure bidirectional DNS forwarding between Cloud DNS and external DNS servers to enable seamless name resolution across hybrid environments.

    • For more information about operational excellence in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/operational-excellence.md.txt

  • Cost optimization:

  • Performance efficiency:

    • To mitigate AI model hallucinations, ground your model on the unified data profile to enforce business definitions and statistical validation.

    • To perform exact-match filters to operational databases, use BigQuery federated queries.

    • To offload memory-heavy and complex data manipulation, such as vectorized borderless joins, use Managed Service for Apache Spark with Lightning Engine.

    • Use Cross-Cloud Interconnect to establish high-bandwidth, low-latency private connections to other CSPs to maximize throughput for distributed applications.

    • Configure redundant intra-regional network connections in an active/active design using Equal Cost Multi-Path (ECMP) routing to aggregate bandwidth.

    • Select Google Cloud regions that are geographically close to the external CSP's regions to minimize latency and improve data transfer performance.

    • For more information about performance efficiency in Google Cloud, see https://docs.cloud.google.com/architecture/framework/perspectives/ai-ml/performance-optimization.md.txt

  • Sustainability:

    • To maximize compute efficiency and reduce energy consumption, use Managed Service for Apache Spark with Lightning Engine to handle massive joins and complex windowing.

    • Use BigQuery Omni to query data in place on AWS or Azure (Amazon S3 or Azure Blob Storage) to avoid resource-intensive borderless data replication.

    • For more information about sustainability considerations, see https://docs.cloud.google.com/architecture/framework/sustainability/printable.md.txt

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
Google
Publisher
Google (Official)
Source
google/skills · skills/cloud/google-cloud-solution-agentic-ai-borderless-data-lakehouse · commit 2194d3b
Licence
Apache License 2.0 (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by Google.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download google-cloud-solution-agentic-ai-borderless-data-lakehouse.zip