The four options you usually get

Every trainer who teaches cloud recognises all four.

A cloud simulator

A learner who has already used the real console sees the seams. A learner who has not is taught something that does not exist outside the classroom.

A shared sandbox

One learner deletes a network or exhausts an address range, and the exercise stops for the other twenty-nine. You debug your own lab rather than teach.

A learner's own account

Card details, a billing account per person, and a bill that runs long after the course ends. In several markets the learner cannot complete that step at all, and never starts.

Hand-built lab setup

A day of setup before every cohort, and scripts that drifted since the last one. The infrastructure is real, but you author it again for each delivery.

There is also cleanup, after everyone has gone home: finding what was left running, in whose account, and turning it off before it becomes an invoice.

What a lab session does

One session per cohort, run from the Lab sessions view of Managed Environments.

When a participant's clock starts, they get access to their project in the Google Cloud console: what was deployed, its logs, its storage buckets and its Cloud SQL database, built by ordinary Terraform. A banner on every RAD page shows them their time and credits left, with a link to open the project in the Google Cloud console. They cannot read secrets, change configuration, scale or create resources, and they cannot deploy anything themselves in a lab.

What the lab tier restricts

Org policies applied to the folder the lab projects are created in.

Guardrails

  • External IP addresses are denied
  • The default network is suppressed
  • Serial port access is disabled
  • Service-account key creation and upload are blocked
  • Public storage buckets are prevented
  • Public Cloud SQL IP addresses are refused
  • The Google Cloud services that can be enabled are restricted to an allowlist
  • Resource locations are restricted to the permitted regions

Where it runs

  • RAD-managed regions8
  • Americasus-central1
  • Americasnorthamerica-south1
  • Americassouthamerica-west1
  • Europeeurope-north2
  • Middle Eastme-west1
  • Africaafrica-south1
  • Asiaasia-east1
  • Oceaniaaustralia-southeast2

One region in each of eight geographies, the cheapest available in that geography per the Cloud Billing Catalog API. africa-south1 is the only Google Cloud region on the African continent.

A deployment into a participant's own project keeps every region Google offers.

Spend visibility

  • Each tier carries a monthly Google Cloud budget that raises alerts as spend approaches and exceeds it. A budget notifies; it does not block an API call.
  • Enforcement is separate. A lab environment is switched off when it uses up its credits, or when its spending passes the session's overrun ceiling: 20% above the allowance by default, set by the trainer.
  • Each session's Settlement panel shows what was committed, consumed and refunded, and every movement appears in the trainer's credit history.

Who pays, and what comes back

Chosen per session when you create it, and fixed from then on.

What a trainer can and cannot do

An administrator grants the Trainer role. What it reaches is the lab sessions you run, and nothing else.

A trainer can

  • Build a module or solution into every participant's environment in one action
  • Follow each environment while it builds, then start clocks, extend time and add credits or participants
  • End selected environments early, or remove a participant, with their unused allowance returned to you
  • See each session's settlement, and keep every credit participants did not use
  • Duplicate a session for the next cohort, or export one as CSV

A trainer cannot

  • Read secrets on lab deployments — their configuration variables and generated passwords are withheld; you see only outputs with every sensitive value removed
  • See a participant's own deployments — access covers the lab environments in your sessions only
  • Change who pays after creating a session, or change its region
  • Edit a session once it has ended
  • Deploy on someone's behalf from the ordinary deploy form — participants are provisioned from a lab session

End of the session

Participants are emailed before their time ends, by default at 15 and 5 minutes, and once more when their lab has ended. End now closes the whole session at any time, and a session nobody provisions ends itself after 14 days.

Administrators can manage every trainer's sessions; credits they add still come from the trainer, who is told who acted. Finance can end a session to stop its spending but cannot change it.

A multi-application capstone

The catalogue carries 60+ pre-composed solutions, and a lab session can build a solution into every environment in the same way as a single module.

Applications, in order

A solution holds between two and eight applications, provisioned up to four at a time into one project. A member that consumes another member's Terraform outputs waits for that deployment to finish; the rest start as soon as the solution is confirmed.

Pairs are wired

Where a producer-and-consumer pair is wired, a solution writes the producer's Terraform outputs into the consumer's configuration when it finishes. Connections in other solutions are made by hand. This wiring is a beta capability; verify it in a pilot.

Torn down in reverse

Teardown runs the dependency graph backwards, so the shared project is destroyed after the things living inside it rather than before them. For a cohort that is the difference between a clean end of term and a set of half-deleted estates left to chase.

A capstone solution is charged as one reservation across all its members, with a bundle discount of 15% for 3–4 modules, 20% for 5–6 and 25% for 7 or more. Paid, like any lab environment, from the session's allowance.

The written curriculum already exists

Page counts from docs.radmodules.dev.

340+ hands-on deployment labs

Each one ends in something running rather than in a diagram. They map onto the same catalogue your cohort deploys from, so the lab a participant reads and the form they fill in are the same subject, step for step, throughout.

520+ module configuration guides

One for each of the 340+ application options, plus 175+ shared application-layer guides those options build on. They list the variables the deploy form asks about and what each one does, which makes them useful as pre-reading.

40+ certification study guides

Aligned to seven Google Cloud certification tracks: ACE, PCA, PCD, PCDE, PCNE, PDE and PSE. Each guide defines deployment profiles built from the foundation modules and maps the exam domains onto them for teaching.

The brochure is the version to send a head of faculty or a budget holder: what the lab tier restricts, and how a course is costed per seat. There is also a programme write-up, From Certified to Capable, for the curriculum itself.

Before you plan a cohort

RAD is in beta, and lab sessions are the newest part of it.