End Security Risks with the Unattended Projects Recommender Feature

6110
Of your peers have already read this article.
3:00 Minutes
The most insightful time you'll spend today!
In fast-moving organizations, it’s not uncommon for cloud resources, including entire projects, to occasionally be forgotten about. Not only such unattended resources can be difficult to identify, but they also tend to create a lot of headaches for product teams down the road, including unnecessary waste and security risks.
To help you prune your idle cloud resources, we’re excited to introduce Unattended Project Recommender. It’s a new feature of Active Assist that provides you with a one-stop shop for discovering, reclaiming, and shutting down unattended projects. With actionable and automatic recommendations, you no longer have to worry about wasting money or mitigating security risks presented by your idle resources. Unattended Project Recommender uses machine learning to identify, with a high degree of confidence, projects that are likely abandoned based on API and networking activity, billing, usage of cloud services, and other signals. This feature is available via the Recommender API today, making it easy for you to integrate with your company’s existing workflow management and communication tools, or export results to a BigQuery table for custom analysis.
Thousands of projects can be unattended in large organizations, presenting major security risks
Your cloud projects can go abandoned or unattended for a number of reasons — ranging from a test environment that’s no longer needed, to project cancellation, to project owner switching jobs, and more. Not only can such projects contribute to your cloud bill (waste) but they may contain security issues such as open firewalls or privileged service account keys that attackers can exploit to get a hold of your cloud resources for cryptocurrency mining or, worse, compromise your company’s sensitive data. These security risks tend to grow over time because the latest best practices and patches are usually not applied to unattended projects.
We experience this issue here at Google, too… In fact, it has been on Google’s internal security team’s radar for some time now, so we joined forces and looked into this problem together, starting with our very own “google.com” organization cloud projects. We quickly found some projects that were unattended, but remediating this issue was easier said than done due to challenges in several areas:
- Detection: With lots of signals available to you via sources like Cloud Monitoring, what are the right ones you should look at (e.g. API, networking, user activity)? How can you tell the difference between an unattended project and a project that has a low level of activity by design (e.g. a “shell” project that holds an auth token)?
- Remediation: Once you have identified a project that seems abandoned, how do you go about ensuring that it’s indeed an unattended project? How do you reduce the risk of deleting something that might be essential to a production workload, causing irreversible data loss? How do you solve this at the scale of your entire organization, beyond a one-time cleanup?
Over the course of 2021 we built and tested a Google-internal prototype first, cleaning up many of our internal unattended projects, and then worked with a number of Google Cloud customers to build and tune this feature based on real-life data (thank you to all of our early adopters for working with us and your generous feedback that helped us shape this feature!) It was not uncommon for us to come across organizations with thousands of unattended projects, and we’re very excited to bring Unattended Project Recommender to all customers, in public preview.
Discovering and acting on unattended project recommendations
Unattended Project Recommender analyzes usage activity across all projects under your organization, including the following data:
- API activity (e.g. service accounts with authentication activity, API calls consumed)
- Networking activity (ingress and egress)
- Billing activity (e.g. services with billable usage)
- User activity (e.g. active project owners)
- Cloud services usage (e.g. number of active VMs, BigQuery jobs, storage requests)
Based on these signals, it can generate recommendations to clean up projects that have low usage activity (where “low usage” is defined using a machine learning model that ranks projects in your organization by level of usage), or recommendations to reclaim projects that have high usage activity but no active project owners. Here’s what an example post-processed summary list of recommendations can look like for the “foobar” organization that has 3 projects:
Project ID: demo-project-307815Recommendation: CLEANUP_PROJECTProject ID: new-projectRecommendation: N/AProject ID: bobs-playground-projectRecommendation: RECLAIM_PROJECT
In addition to the recommendations, you can also examine the underlying project activity insights that the recommendations are based upon. The insights provide additional information that can be useful for integration with your organization’s existing workflows and automation (e.g. send an auto-generated email or chat message to project owners based on the list provided by the owners field). Here’s an example insight payload:
content:activeAppengineInstanceDailyCount: 0activeCloudsqlInstanceDailyCount: 0activeGceInstanceDailyCount: 3activeServiceAccountDailyCount: 1apiClientDailyCount: 18922 // Daily average API calls producedbigqueryInflightJobDailyCount: 0bigqueryInflightQueryDailyCount: 0bigqueryStorageDailyBytes: 0bigqueryTableDailyCount: 0consumedApiDailyCount: 0 // Daily average API calls consumeddatastoreApiDailyCount: 0gcsObjectDailyCount: 11gcsRequestDailyCount: 0gcsStorageDailyBytes: 2663548hasActiveOauthTokens: false // OAuth tokens used in the last 180 dayshasBillingAccount: truenumActiveUserOwners: 1owners: // List of project owners- activeOnProject: falsemember: user:user1@example.com- activeOnProject: truemember: user:user2@example.comserviceWithBillableUsage:– Cloud Storage- Compute EnginevpcEgressDailyBytes: 264456938 // Daily average VPC egress bytesvpcIngressDailyBytes: 392435047 // Daily average VPC ingress bytesusagePercentile: 20 // Level of usage relative to other projects
GCP projects are used in many different ways and for many different purposes. In case you get a recommendation to delete a project that’s being used in a way that’s out of the scope for this feature, you can dismiss the recommendation and it will stop showing up for the given project.
Restoring deleted projects
When you choose to shut down a project using the projects.delete() method, it gets marked for deletion. After a project is marked for deletion, it becomes unusable, all resources within that project are shut down, and a 30-day wait period for the project and all of its data to get fully deleted begins.
In case a useful project is accidentally shut down, you have the option to restore the project within that 30-day wait period. Since restoring allows you to recover most but not necessarily all of your project data and resources, we recommend carefully examining the utilization insights associated with a project and considering any additional utilization signals that may not be captured by the Unattended Project Recommender before taking the cleanup action.
Early customer success stories
A number of enterprise customers are already using Unattended Project Recommender to keep their organizations clean of unattended projects and resources.
Decathlon, a French sporting goods retailer, is excited for the insight Unattended Project Recommender will bring to their environment, and are already deploying it as a part of their latest cloud security initiatives.
“After a thorough test of this feature and the validation of our CISO, we ended up deleting our first 775 projects, and no one complained! A great help to improve our security. The next step for us will be to operationalize it at scale, and implement a company wide policy for unattended resource management.” —Adeline Villette, Cloud Security Officer
For Veolia, one of the world’s largest water, waste and energy management companies, not only does this feature reduce security risks and waste, but also helps drive cultural shift and alignment with its ecological transformation strategy.
“This feature allows us to reduce our costs and security debt on assets that are no longer in use, and is also fully in line with Veolia’s philosophy of limiting its carbon footprint. After having tested Unattended Project Recommender on more than 3,000 projects throughout our organization, we are looking to bring it as proactive alerts to our project owners at scale.”—Thomas Meriadec, Product Manager
Box, a secure cloud content management provider, views it as a foundation for building a repeatable process to remediate unused resources.
“Unattended Project Recommender is a great fit for us. It gives us a unified view of project usage across our entire organization and enables us to address security risks of legacy projects in a systematic and organized manner, ensuring an even safer environment.” —Matt Bowes, Staff Security Engineer
Getting started with the Unattended Project Recommender
To help you get started, we’ve prepared a Cloud Shell tutorial (source code) that you can use to find unattended project recommendations within your own Projects/Folders/Organization. Click this button to clone the tutorial from GitHub and run in your Cloud Shell environment:

As you can see, listing recommendations for your projects only takes a few clicks with the tutorial (special thanks to Lanre Ogunmola, Security & Compliance Specialist, for making this look so easy)! For additional detail on using the gcloud CLI or API to discover unattended project recommendations, please refer to the documentation page.
You can also automatically export all recommendations from your Organization to BigQuery and then investigate the recommendations with DataStudio or Looker, or use Connected Sheets that let you use Google Workspace Sheets to interact with the data stored in BigQuery without having to write SQL queries.
As with any other Recommender, you can choose to opt out of data processing at any time by disabling the appropriate data groups in the Transparency & control tab under Privacy & Security settings.
We hope that you can leverage Unattended Project Recommender to improve your cloud security posture and reduce cost, and can’t wait to hear your feedback and thoughts about this feature! Please feel free to reach us at active-assist-feedback@google.com and we also invite you to sign up for our Active Assist Trusted Tester Group if you would like to get early access to the newest features as they are developed.
Google Invests 1 Billion Euros on Germany to Support Growing Businesses

3537
Of your peers have already read this article.
2:00 Minutes
The most insightful time you'll spend today!
In September 2001, the first-ever German Google employee switched on their computer in Hamburg. Since then, we’ve grown to more than 2,500 employees in four offices across Germany. Berlin, Frankfurt, Hamburg and Munich have long been our home, and we continue to invest in the growth of the local economy.
Today, 20 years after the start of “Google Germany”, we are pleased to present one of our most important investment programs to date in this country. With the expansion of our Cloud Region in Frankfurt in a new Google-owned Hanau facility, a new Google Cloud region in Berlin-Brandenburg, and a broad investment plan in renewable energy, our commitment is clear: Google is investing in Germany’s potential and supporting the transition to a digital and sustainable economy. Between now (2021) and 2030, this investment in digital infrastructure and clean energy will total approximately 1 billion euros.
Expanding our Frankfurt cloud region to support growing demand from German businesses and organizations
In Hanau, only 20 kilometers from the DE-CIX Internet hub in Frankfurt, Google is proud to be nearing completion of an additional cloud facility that will be fully operational in 2022. This expansion of our existing Frankfurt Google Cloud region will serve the growing demand for Google Cloud services in Germany.
The 4-story building is 10,000 square meters and was sustainably constructed with energy efficient infrastructure and adherence to our circular economy model for waste. The symbolic handover of the keys from developer NDC-Garbe, together with local government officials, took place on site yesterday.
A new cloud region in Berlin-Brandenburg
In addition to the Hanau expansion of our Google Cloud region in Frankfurt, we are pleased to announce that a new Google Cloud region will be located in Berlin-Brandenburg, further extending our ability to meet growing demand for cloud services in the country. When open, this will be our second Google Cloud region in Germany, providing enterprise customers with faster access to secure infrastructure, smart analytics tools and an open platform. Designed and dedicated to providing enterprise services and products for Google Cloud customers of all sizes and industries in Germany, the Berlin-Brandenburg region will have three zones to protect against service disruptions and join the existing network of 27 Google Cloud regions connected via our high-performance network.
One of the cleanest clouds in the industry becomes even cleaner
Since 2017, Google has matched 100% of our global, annual electricity use with renewable energy. Last year, we set out to run our business on carbon-free energy everywhere and at all times by 2030, enabling us to offer cloud customers one of the cleanest clouds in the industry, while helping Europe achieve its ambitious climate goals.
Today, we’re excited to announce that ENGIE Deutschland has been selected as Google’s carbon-free energy supplier in Germany. Under the terms of the agreement, ENGIE will assemble and develop, on Google’s behalf, a 140 megawatt (MW) carbon-free energy portfolio in Germany that has the ability to flex and grow with us as our needs change. This includes a new 39MW solar Photovoltaic system, and 22 wind parks in five federal states that will see their lives extended so they continue to produce electricity instead of being dismantled. This portfolio will ensure that the energy delivered to Google’s German facilities will be nearly 80% carbon-free by 2022 when measured on an hourly basis. This is a first but important step on Google’s journey to reach our goal of full electricity decarbonization by 2030.
This is the first energy supply of its kind in Europe, with a focus on sourcing carbon-free energy for every hour of Google’s operations. Not only will this new agreement draw the roadmap for the industry and more 24/7 carbon-free energy contracts in Europe, but it provides our cloud customers with two more regions where they can lower their carbon footprint. And importantly, by working with our energy suppliers to transform how clean energy is delivered to customers, Google is supporting the broader decarbonization of the German electricity grid.

What customers and partners are saying
As companies continue to grapple with changing customer demands, technology has played a critical role, and we’ve been fortunate to partner with and serve people, companies, and government institutions in Germany and around the world to help them adapt. The Google Cloud region in Berlin-Brandenburg and the expansion of our Google Cloud region in Hanau will help our customers — such as BMG, Delivery Hero, and Deutsche Bank — adapt to new requirements, new opportunities and new ways of working.
“We are very pleased about the symbolic handover of the keys to the building here in Hanau to Google Cloud,” said Hanau Mayor Claus Kaminsky. “With Google, we have a strong partner at our side who is supporting us in setting up Hanau’s economic future, both digitally and sustainably. The data center facility of Google Cloud embodies this transformation: We bring the cloud to us in Hanau and thus support the digital transformation of companies and public authorities. Not only in our city and Hesse, but throughout Germany and Europe. The new building meets high sustainability standards and the clean energy initiative presented today by Google is in line with our aspirations for sustainable digitalization.”
“Sustainability is a central pillar of Deutsche Bank’s strategy and we have made strong public commitments to be part of the solution,” said Bernd Leukert, Chief Technology, Data and Innovation Officer and Member of the Management Board at Deutsche Bank. “We welcome the new Google Cloud region in Germany, which will enable us to deliver additional resilience and performance for our German client base.”
Ralf Bernhard, Senior Originator Renewables, ENGIE, said: “ENGIE is excited to collaborate with Google based on a first-of-a-kind agreement which will support the company with its sustainability goals and ambitious carbon-free energy target. Thanks to our expertise in energy and risk management, we can seamlessly integrate renewable energy from existing plants and develop new assets to design a tailor made product that meets Google’s needs and plans to go even greener.”
20 years since Google first touched down in Germany, our commitment to helping Germany continue to lead in technical innovation is stronger than ever. We are excited to continue working with our partners in Hesse, Berlin and Brandenburg and across Germany to advance infrastructure and clean energy projects, help accelerate digital transformation, and secure a sustainable future for German and European companies and organizations.

3590
Of your peers have already downloaded this article
1:30 Minutes
The most insightful time you'll spend today!
Through customer interviews, a survey, and data aggregation, Forrester concluded that migrating and running SAP on Google Cloud has a number of benefits, including financial benefits.
Download this Forrester infographic to understand the 3-year financial impact it can have on your organization.
The Journey ahead for Google Cloud and SAP

3416
Of your peers have already read this article.
1:30 Minutes
The most insightful time you'll spend today!
The partnership between Google Cloud and SAP is entering a new chapter. Over the years, our close partnership with SAP and our mutual dedication to customers has inspired us to do some of our most unique and innovative work—such as building Fast Restart and Memory Poisoning Recovery capabilities for S/4HANA workloads, offering real-time access to our advanced machine learning (ML) capabilities, and developing integrations with the industry’s best cloud security and network infrastructure.
With an expanded, strategic partnership, we are capitalizing on one of the cloud’s most valuable benefits: enabling customer choice without driving up cost or complexity. Customers have shared that they appreciate what Google Cloud has done over the years to support their ability to choose—from our support for multi-cloud environments to our track record with open-source technologies like Kubernetes, to name a couple of examples.
“We chose Google Cloud to support our SAP implementation. Our decision had a lot to do with the relationship between Google Cloud and SAP and also for the applications and services that are offered by Google Cloud, like BigQuery, which are helping to enable data and analytics within our organization.”— Sam Moses, Vice President of Corporate Systems, The Home Depot
Now, we’re placing this same emphasis on customer choice, flexibility, and freedom to help SAP customers get greater ROI from their cloud investments in three ways:
- Execute seamless business transformations that deliver all of the benefits of modern, cloud-native applications and services—quickly, economically, and without disrupting day-to-day operations
- Migrate critical business systems to the cloud, in order to lock in OpEx savings and refocus their IT teams on strategic business technology initiatives
- Augment existing business systems with cloud capabilities in AI, ML, and analytics
The cornerstone of our expanded partnership is the RISE with SAP program—a comprehensive set of tools, technology, and expert support for a fast, predictable, cost-effective path to business transformation with SAP in the cloud. RISE is also designed to meet every SAP customer on their own terms, whether they’re undertaking an enterprise-wide cloud migration or pursuing an incremental or hybrid-cloud approach.
To support customers taking advantage of RISE with SAP, Google Cloud will work even more closely with SAP to accelerate customers’ cloud migrations and business process modernization across several key areas. This includes ensuring global availability of multiple SAP services and products—such as SAP Business Technology Platform and SAP HANA Cloud—on Google Cloud’s reliable, scalable infrastructure and high-speed network. Google Cloud is also committed to bringing SAP’s solution for RPA in manufacturing to the Google Cloud Marketplace to support business process modernization.
Additionally, integrating our AI, ML, and analytics capabilities with key SAP solutions will help companies augment their business systems with sophisticated capabilities and technologies so they can draw more value out of the data stored with them.
“We can deliver our 160 key business insights two or three orders of magnitude faster with BigQuery. When you think about our marketing campaigns and month-end finance processes, we’re talking about jobs that used to take five to eight hours to complete that are now running in seconds.”— Dan Semmens, Head of Data and AI, ATB Financial
Join us on the journey ahead
There’s so much more to come from SAP and Google Cloud. Learn more about our commitment to enabling digital transformation and hear more from customers about their SAP on Google Cloud deployments.
What You Can Learn from ‘Up or Out’ Framework for Cloud Adoption

3221
Of your peers have already read this article.
1:30 Minutes
The most insightful time you'll spend today!
In times of significant disruption, organizations are faced with three choices: Retrench within legacy solutions, pause and do nothing while waiting for more data or different circumstances, or press ahead, potentially even accelerating to realize the desired outcome. In such an environment, it is critical to ensure you’re delivering the greatest possible impact to the business.
In Google Cloud’s Office of the CTO, or OCTO, we have the privilege of co-innovating with customers to explore what’s possible and how we can re-imagine and solve their most strategic challenges. These collaborative innovation engagements are often core to critical transformational projects, which often include the rehosting, evolution, and at times re-architecture of existing business solutions.
We are happy to offer this brand new white paper, where we have distilled the conversations we’ve had with CIOs, CTOs, and their technical staff into several frameworks that can help cut through the hype and the technical complexity, to help devise the strategy that empowers both the business and IT. We called one such framework “up or out.” (And we don’t mean some consulting firm’s hard-nosed career philosophy.)
One model that we found can help enterprises chart their cloud adoption journey delineates cloud migration along two axes—up and out, and we’ll cover this in much greater detail in the white paper itself.

As you can see, there isn’t a single path to the cloud—not for individual enterprises and not even for individual applications. The up or out framework can help an IT organization and its leadership characterize how they can best benefit from migrating their services or workloads. The framework acts as a general pattern that highlights the continuum of approaches to explore, and you can learn all about it by downloading this detailed white paper.
Or, if you’re really ready to jump start your migration today, you can take advantage of our current offer by signing up for a free discovery and assessment.
Google is named a Leader in 2020 Magic Quadrant for Cloud Infrastructure and Platform Services

3560
Of your peers have already read this article.
10:30 Minutes
The most insightful time you'll spend today!
The capability gap between hyperscale cloud providers has begun to narrow; however, fierce competition for enterprise workloads extends to secondary markets worldwide. Infrastructure and operations leaders should evaluate cloud providers with a broad range of use cases and a wide market presence.
Market Definition/Description
Cloud computing is a style of computing in which scalable and elastic IT-enabled capabilities are delivered as a service using internet technologies. Cloud infrastructure and platform services (CIPS) are defined as standardized, highly automated offerings, in which infrastructure resources (e.g., compute, networking and storage) are complemented by integrated platform services. These include managed application, database and functions as-a-service offerings. The resources are scalable and elastic in near-real time and are metered by use. Self-service interfaces are exposed directly to the customer, including a web-based user interface (UI) and an API. The resources may be single-tenant or multitenant, and can be hosted by a service provider or on-premises in the customer’s data center.The scope of this Magic Quadrant has changed, compared with its predecessor, the “Magic Quadrant for Cloud Infrastructure as a Service.” Gartner has developed this Magic Quadrant to reflect the changing dynamics of cloud services offered and the ways that enterprise customers adopt them. Ultimately, hyperscale cloud providers, and the broad array of services they offer beyond infrastructure as a service (IaaS), have found strategic importance in Gartner’s enterprise clients and the Magic Quadrant needed to evolve to reflect as much.The scope of the Magic Quadrant for CIPS includes IaaS and integrated platform as a service (PaaS) platforms. These include application PaaS (aPaaS), functions as a service (FaaS), database PaaS (dbPaaS), application developer PaaS (adPaaS) and industrialized private cloud offerings that are often deployed in enterprise data centers.
Understanding the Vendor Profiles, Strengths and Cautions
CIPS providers that target enterprise and midmarket customers generally offer high-quality service, with excellent availability, good performance, high security and good customer support. Exceptions will be noted in this Magic Quadrant’s evaluations of individual providers. When we say “all providers,” we specifically mean “all the evaluated providers included in this Magic Quadrant,” not all CIPS providers in general. Keep the following in mind when reading the vendor profiles:
- All the providers have public cloud IaaS and PaaS offerings. Most also offer, or are in the process of building, industrialized private cloud offerings, in which every customer is on standardized infrastructure and cloud management tools. In some cases, the provider’s industrialized, on-premises offering may share similarities to hyperconverged infrastructure (HCI), but tethered to the cloud. However, this may not resemble the provider’s public cloud service in architecture or quality. A single architecture and feature set and cross-cloud management, for both public and private CIPS, make it easier for customers to combine and migrate across service models as their needs dictate. They also enable the provider to use its engineering investments more effectively. Gartner is beginning to describe the notion of cloud-provider-managed infrastructure, wherever it may exist, as “ distributed cloud.”
- All the providers target midmarket businesses and enterprises, as well as other companies that use technology at scale. Some of the providers may also target small businesses and startups. Just because a provider targets a segment, however, does not necessarily mean that it is well-suited to that segment’s needs. Furthermore, not all providers have the capacity to serve very-large-scale customers, and some have capacity constraints in particular regions.
- All the providers offer basic cloud IaaS — compute, storage and networking resources as a service. They also offer additional value-added capabilities, notably cloud software infrastructure services — typically middleware and databases as a service — including PaaS capabilities. These services, along with IT operations management (ITOM) capabilities as a service (especially DevOps-related services), are a vital differentiator in the market, especially for Mode 2 agile IT buyers.
- All the providers claim to have high security standards. However, the extent of the security controls provided to customers varies significantly. All the providers evaluated can offer solutions that will meet common regulatory compliance needs, unless otherwise noted. All the providers have undergone SOC 1, SOC 2 and SOC 3 audits, as well as SSAE 16, ISO/IEC 27001, ISO/IEC 27017 and ISO/IEC 27018 audits. This provides a relatively high level of assurance that the providers are adhering to generally accepted practices for the security of their systems, but it does not address the extent of controls offered to customers.
- Security is a shared responsibility. Customers need to correctly configure controls, and they may need to supply additional controls beyond what their providers offer. Furthermore, providers vary in their degree of transparency as to how services are architected, although customers typically have access to third-party assessment reports under a nondisclosure agreement (NDA).
- Monthly compute availability service-level agreements (SLAs) of 99.95% and higher are generally the norm. They are typically higher than availability SLAs for managed hosting. Service credits for outages in a given month are typically capped at 100% of the monthly bill; however, some providers have caps as low as 25%. This availability percentage is typically non-negotiable, because it is based on an engineering estimate of the underlying infrastructure reliability.
- Single-instance compute SLAs have become common for providers in this Magic Quadrant. It might be more accurate to say that there are usually two SLAs — one for the compute service, and one for individual instances. Some providers have a compute availability SLA that requires customers to use compute capabilities in at least two fault domains (sometimes known as “availability zones” or the like).
- Many providers have additional SLAs. These cover network availability and performance, customer service responsiveness and other service aspects.
- Infrastructure resources are not normally automatically replicated into multiple data centers. Customers are responsible for their own business continuity. Some providers offer optional disaster recovery solutions.
- All providers offer per-second metering of virtual machines (VMs). Some can offer shorter metering increments, which can be more cost-effective for short-term batch jobs. Unless otherwise noted, providers charge on a per-VM basis.
- Providers are increasingly offering bare-metal physical servers on a dynamic basis. These are priced by the second. Providers with a bare-metal option are noted as such.
- All the providers partner with carrier-neutral colocation exchanges. This enables customers to obtain connectivity from a variety of carriers that are located in these facilities. In addition, many customers require a small amount of supplemental colocation in low-latency proximity with their cloud provider. For example, they may have a large-scale database, specialized network equipment or legacy equipment, such as a mainframe.
- Some providers offer software marketplaces. In these marketplaces, software vendors specially license and package their software to run on that provider’s cloud IaaS offering. Marketplace software can be automatically installed, and can be billed through the provider, although the software vendor often provides support.
- All providers offer enterprise-class support with 24/7 customer service. This is provided via phone, email and chat, along with an account manager. Some offer a lower level of support, but allow customers to pay extra for enterprise-class support.
- All the providers will sign contracts with customers, can invoice and can consolidate bills from multiple accounts. All providers offer online sign-up and credit card billing, because they recognize that enterprise buyers prefer contracts and invoices. Some will sign “zero dollar” contracts that do not commit a customer to a certain volume.
- Some providers will sign a U.S. Health Insurance Portability and Accountability Act Business Associate Agreement (HIPAA BAA).
- Unless otherwise noted, all providers will sign the following contract addendums:
- An EU Data Protection Directive (95/46/EC) data-processing agreement (DPA), which includes the model clauses
- An EU General Data Protection Regulation (GDPR) DPA
- Managed and professional services are an optional but important accelerator for customer success. Almost all providers rely heavily on managed service providers (MSPs) and system integration (SI) partners for these services. However, most providers offer their own first-party professional services and some also offer first-party managed services offerings.
- All of the evaluated providers offer a portal, documentation, technical support, customer support and contracts in English. Some can provide one or more of these in languages other than English. Most providers can conduct business in local languages.
The service provider descriptions are accurate as of the time of publication. Our technical evaluation of service features took place between January 2020 and March 2020.
Format of the Vendor Descriptions
When describing each provider, we first summarize the nature of the company, then provide information about its industrialized cloud IaaS offerings in the following format:
- Locations: Cloud data center locations by country, languages in which the company does business and languages in which technical support can be conducted.
- Recommended Uses: These are the circumstances under which we recommend the provider. They are not the only circumstances in which it may be a useful provider, but they are the scenarios for which, in Gartner’s opinion, the provider is well-suited.
For a detailed technical description of CIPS offerings, along with a use-case-focused technical evaluation, see “Critical Capabilities for Cloud Infrastructure and Platform Services, Worldwide.”We also provide a detailed list of evaluation criteria in “Solution Criteria for Cloud Integrated IaaS and PaaS.” A detailed assessment of each provider against these criteria can be found in the Solution Scorecards. The results are also available in Gartner’s Cloud Decisions portal (see “Cloud Decisions’ Cloud Compare: Perform Real-Time IaaS Pricing and Performance Analysis”).
Magic Quadrant
Figure 1. Magic Quadrant for Cloud Infrastructure and Platform Services

Vendor Strengths and Cautions
Google is a Leader in this Magic Quadrant.
Locations: Google has multiple regions across Japan and the U.S., as well as a presence in Belgium, Singapore, Finland, Germany, the Netherlands, the U.K., India, Australia, Brazil, Canada and, Switzerland, as well as the Hong Kong and Taiwan markets.
Recommended Uses: Google has evolved by enhancing its strengths and attacking its limitations to providing a strong offering in every use case, other than the edge use case. Google has a future focus on building out hybrid capabilities and partnerships with telco providers.
Strengths
- Google’s open-source contributions, such as Kubernetes and TensorFlow, have been market-moving innovations that have changed the course of enterprise IT. Such innovations have served to enable other cloud service providers, but also brought developer “mind share” to Google Cloud Platform (GCP). Google’s long-term strategy is to bring additional open-source-focused partners into GCP as managed services.
- During the past year, GCP has experienced a noticeable increase in year-over-year market share in terms of IaaS and dbPaaS, albeit from a lower base, relative to other providers in this Magic Quadrant. Google has also made significant gains by closing a number of critical capability gaps between GCP and Microsoft Azure, its nearest competitor in terms of market share and capabilities.
- Gartner clients continue to associate GCP with its big data and data science capabilities, stemming from the use of services such BigQuery and Dataproc. However, the company is pressing into new territory with Anthos, GCP’s container and Kubernetes-based middleware layer, which is designed to support the development and deployment of cloud applications in a hybrid and multicloud model.
Cautions
- Some of Gartner’s clients remain cautious about Google’s commitment to serving the needs of enterprise clients when put in the context of SAP’s preference for Microsoft Azure, and GCP’s slowness in executing on some highly touted partnerships. GCP lacks enterprise-focused aPaaS capabilities and support for Oracle, and it continues to struggle with having an enterprise mindset in the field.
- From a financial perspective, GCP’s revenue is a small fraction of overall Google revenue and GCP’s criticality to the overall business is not as clear as its competitors. Furthermore, GCP’s success may erode the company’s overall healthy gross margins.
- Google’s much-vaunted network capabilities have been the source of a number of GCP outages during the last year, with devastating impact on customers. One outage was multiregional in scope, affecting GCP customers and Google consumer services, such as G Suite and YouTube. This resulted in complete GCP network unavailability for some customers.
More Relevant Stories for Your Company

Giving Customers More Choice: Google Cloud’s New Product and Pricing Options
Over the past several years, Google Cloud has made significant investments in our infrastructure product portfolio. We launched new Tau T2D VMs, which deliver 42% better price-performance vs. other leading cloud providers. We upgraded Cloud Storage to offer more flexibility to support customers’ enterprise and analytics workloads, with dual-region buckets
Evernote Ditches Private Cloud for Google Cloud and Improves Performance and Uptime
More than 200 million Evernote users now more securely store billions of notes and attachments—the equivalent of roughly 10 copies of every modern book ever published. The company’s private cloud was no longer enough to scale to support such a dynamic infrastructure, so Evernote migrated its service to Google Cloud

Google Announced Leader in 2021 Gartner Magic Quadrant for Cloud Infrastructure and Platform Services
For the fourth consecutive year, Gartner has positioned Google as a Leader in the 2021 Gartner Magic Quadrant for Cloud Infrastructure and Platform Services (formerly titled as Magic Quadrant for Cloud Infrastructure as a Service upto 2014 Infrastructure as a Service, or (IaaS). With our customers and communities adjusting to new ways

Two Ways to Deploy SAP HANA System on Google Cloud
Many of the world’s leading companies run on SAP—and deploying it on Google Cloud extends the benefits of SAP even further. Migrating your current SAP S/4HANA deployment to Google Cloud—whether it resides on your company’s on-premises servers or another cloud service—provides your organization with a flexible virtualized architecture that lets







