Skip to content

Assured Workloads Basics

Set up and manage Google Cloud Assured Workloads compliance folders for regulated data.

Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
7 files

What it does

Once installed, the agent can help create, list, inspect, update and delete Google Cloud Assured Workloads V1 folders, which are compliance-controlled environments for regimes such as FedRAMP, DoD IL levels, ITAR, CJIS, healthcare, and regional data boundaries. It follows a checklist: verify prerequisites and IDs, validate parameters with a bundled script, ask for your confirmation before any change, then run gcloud or Python client commands. Helper scripts also diagnose common errors and manage configuration updates.

Great for

  • Cloud engineers setting up compliant Google Cloud environments for government or regulated workloads
  • Teams needing a guided, confirmation-based workflow for Assured Workloads operations
  • Administrators who need to list or inspect existing Assured Workloads workloads

Skip it if

  • Brownfield assessments or custom compliance frameworks, which the skill says should use other skills instead
  • Non-Google Cloud environments or non-compliant folders, since the skill is scoped to Assured Workloads V1
  • Users without organization-level IAM roles and billing access, because creation will fail and mutating actions carry real cost and compliance consequences

Try asking

  • “Create a FedRAMP Moderate Assured Workloads folder in us-central1 under my organization”
  • “List all Assured Workloads workloads in my organization's europe-west location”
  • “Diagnose why my Assured Workloads create operation failed with an ERROR_CODE message”
  • “Show available configuration updates for my existing workload and apply them after I confirm”
Step-by-step guide: how to use Assured Workloads BasicsInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.

    assured-workloads-basics.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip assured-workloads-basics.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip assured-workloads-basics.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Always review the validation output and the exact gcloud command before confirming a create, update or delete, since these change live cloud resources.
  • Provide your organization, billing account and folder IDs yourself; the skill is designed not to guess them.
  • Use a test organization or sandbox project first to learn the workflow before applying it to production compliance folders.

What's inside

  • references/attribution.md
  • references/regimes.md
  • scripts/diagnose_error.py
  • scripts/manage_workload_updates.py
  • scripts/restrict_allowed_resources.py
  • scripts/validate_params.py
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.