Professional Cloud ArchitectDesign and plan a cloud solution architectureMedium
A research institution processes large genomic datasets that are stored in Cloud Storage. These datasets need to be processed by a custom scientific application running on Compute Engine VMs. The application is sensitive to network latency and requires high-throughput access to the data. The institution wants to optimize performance and reduce egress costs when accessing data from Cloud Storage. Which network configuration should be implemented?
- AEnable Private Google Access on the subnet where the VMs are located.
- BUse Cloud VPN to connect VMs to Cloud Storage.
- CAccess Cloud Storage over the public internet.
- DMount Cloud Storage buckets as file systems using Cloud Filestore.
Show answer & explanationAnswer & explanation
Correct answer: A. Enable Private Google Access on the subnet where the VMs are located.
Enabling Private Google Access on the subnet allows VMs without external IP addresses to access Google Cloud services, including Cloud Storage, over Google's internal network. This reduces latency, increases throughput, and eliminates egress costs to the public internet.
Why the other options are wrong
- B. Cloud VPN is for connecting on-premises networks to Google Cloud, not for connecting VMs within Google Cloud to other Google Cloud services efficiently.
- C. Accessing over the public internet incurs egress costs and higher latency, which is contrary to the requirements.
- D. Cloud Filestore is a managed file storage service, not a mechanism to mount Cloud Storage buckets directly as file systems. While Filestore could store data, it's a different storage solution, not a network configuration for optimizing access to existing Cloud Storage data.
Private Google Access
A feature that allows VMs with only internal IP addresses (no external IP) to reach Google APIs and services, such as Cloud Storage and BigQuery, over Google's internal network.
- Enables private communication to Google services
- Bypasses the public internet
- Reduces egress costs and improves performance
Memory trick: Private Google Access keeps your data within Google's fast lanes.