Google Cloud Solution N Tier Serverless Web App

Assists in developing a secure n-tier serverless web application based on best practices and architecture guidance. Use when users need agentic assistance with designing and creating a multi-product solution in Google Cloud for a secure n-tier serverless web application. Don't use when designing VM or GKE-based architectures or when not using Google Cloud.

Secure n-tier serverless web application with strict private application tiers

This skill guides agents through the workflow of designing and implementing a secure serverless web application with as many architectural design layers as specified by the user. It uses Cloud Run for the serverless layers and Cloud SQL for PostgreSQL as the data layer. A three-tier web application might be represented in three architectural layers: a Cloud Run presentation layer, a Cloud Run application layer, and a Cloud SQL for PostgreSQL database layer.

The architecture enforces strict physical and network isolation across all tiers (T1 to TN):

Tier 1 presentation tier (frontend / reverse proxy): Public-facing UI rendering/gateway service (Cloud Run). Exposes the entry point via Cloud Load Balancing and routes requests downstream to internal tiers privately via Direct VPC Egress.
Tier 2..N application tier (internal microservices / business logic): Private application services (Cloud Run). 100% isolated from the internet (Ingress: VPC-internal, INGRESS_TRAFFIC_INTERNAL_ONLY), reachable exclusively via upstream VPC routing (egress = "ALL_TRAFFIC" with Private Google Access on the subnet for *.run.app URLs).
Data tier: Private Cloud SQL for persistent data and Memorystore for Redis for caching, reachable exclusively from authorized application tiers.

Asset Path	Purpose & Usage
`assets/main.tf`	Single Source of Truth for Terraform (HCL). Contains all security boundaries, Cloud Run v2 configs, PSC endpoints, DNS private zones, and firewall rules.
`assets/output-template.md`	Standardized Solution Architecture report markdown structure.
`references/non-negotiable-architectural-rules.md`	Non-negotiable security rules, audit checklist, and product mappings.
`references/related-guidance.md`	Supplemental architecture guidance for non-standard or multi-region requirements.

Google Cloud Solution N Tier Serverless Web App

Secure n-tier serverless web application with strict private application tiers

General guidance to the LLM

1. Direct Resource Map (Zero-Search File Access)

2. Direct Inline Generation (No Subagent Delegation)

3. One-Shot Clean Artifact Writing

4. Technical Completeness Checklist

Workflow

Phase 1: Requirements discovery and analysis

Phase 2: Solution design

Phase 3: Implementation plan

Phase 4: Solution validation