
Serverless N-Tier Web App Designer
Designs and scaffolds secure multi-tier Cloud Run and Cloud SQL apps on Google Cloud with private networking
- Repository
- google/skills
- Stars
- 21,782
- Licence
- Apache-2.0
- Files
- 5 files
What it does
When installed, the agent follows a fixed Google Cloud pattern for building a secure web application split into several layers: a public Cloud Run frontend, private Cloud Run backend services that are unreachable from the internet, and a private Cloud SQL for PostgreSQL database with Redis caching. The agent produces architecture reports, security checklists, and Terraform (infrastructure-as-code) and gcloud commands that follow the skill's network isolation and firewall rules. The skill's files reference a Terraform template (assets/main.tf) that is not included in the provided file list.
Great for
- Cloud engineers designing private, multi-tier serverless apps on Google Cloud
- Teams with European data residency or sovereignty requirements who need regional deployments
- Developers who want a starting Terraform draft and an architecture report to review with their security team
Skip it if
- Projects on VMs, GKE, or non-Google Cloud platforms, which the skill says it should not be used for
- Production deployments without expert review, since generated Terraform and firewall rules must be validated before applying and the skill mandates specific settings (e.g., POSTGRES_18) that may not suit every environment
- Non-technical users looking for a simple website builder
Try asking
- “Design a three-tier serverless web app on Cloud Run with a private Cloud SQL database in europe-west1”
- “Create a security checklist for a zero-trust private VPC serving Cloud Run microservices”
- “Generate Terraform for internal-only Cloud Run backend services using Private Service Connect”
- “Write a solution architecture report for a regional, EU-sovereign serverless application”
Install in 3 steps
- 1
Download the skill
The ZIP contains the 5 original files, the Apache-2.0 licence and an attribution note.
google-cloud-solution-n-tier-serverless-web-app.zip - 2
Add it to your agent
Claude Code (all projects)
mkdir -p ~/.claude/skills && unzip google-cloud-solution-n-tier-serverless-web-app.zip -d ~/.claude/skills/Claude Code / Agent SDK (this project only)
mkdir -p .claude/skills && unzip google-cloud-solution-n-tier-serverless-web-app.zip -d .claude/skills/Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.
- 3
Ask for the task
No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.
Get better results
- Review every generated gcloud command and Terraform file before running it, especially firewall and IAM rules, since the agent may execute commands with your credentials.
- Specify your region, tier count, and compliance requirements up front so the agent can apply the regional and data residency rules correctly.
- Note that the skill instructs the agent to print full code and to avoid subagents; check that the assets/main.tf template is present in your install, as the instructions depend on it.
What's inside
- assets/output-template.md
- references/attribution.md
- references/non-negotiable-architectural-rules.md
- references/related-guidance.md
- SKILL.md
Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.