BigQuery Data Recovery Methods

Links to BigQuery's time travel docs and Google Cloud's backup / DR strategy for data recovery.

BigQuery query to specify timezone and search with WHERE clause

A BigQuery Standard SQL WHERE clause filtering a date range with an explicit timezone.

Solution for Google Apps Script 'Exception: 1 日にサービス premium gmail を実行した回数が多すぎます。' (Too many executions of premium gmail service per day)

Fixing the Google Apps Script premium gmail daily execution limit error by tuning run intervals.

Google Data Studio Blended Data Not Recommended for Production Environment

Avoid Data Studio blended data in production — prep tables/views on the source and let Data Studio just display.

Rough calculation of Cloud DNS pricing

A rough Cloud DNS pricing estimate for a standard website — about $5 per month.

Cloud Identity Free Edition Registration Method

How to sign up for Cloud Identity Free Edition to create a GCP organization without Google Workspace.

How to Set Up Basic Authentication with Firebase Hosting

Set up Basic Authentication for Firebase Hosting by pairing it with Cloud Functions.

Completely Delete and Make Private Sites Published on Firebase Hosting

Take a Firebase Hosting site offline with firebase hosting:disable while keeping the project intact.

G Suite Customer Support Contact Information

G Suite customer support is hard to find from the admin dashboard — here's the link and my take on it.

[G Suite] Email and Group Message Sending Limits

Official G Suite help links for email and Google Groups sending limits, plus a DAEMON error tip.

Letting AI Agents Use the Google Cloud CLI Safely — Drop the Keys, Lock It Down with Impersonation and a Command Broker

Hand an AI agent a shell and Google Cloud credentials at the same time, and a single prompt injection can turn into a misfired gcloud command that escalates privileges or exfiltrates data. Short-lived credentials and least privilege, which is Google's official guidance, are the right direction. But service account keys persist dangerously when leaked, and tool-side deny rules do not survive adversarial evasion. Working from the premise that the only trustworthy enforcement boundaries are IAM, organization policy, and OS sandboxes, we layer defenses across authentication, authorization, execution, approval, and audit so that seizing a single input never reaches production.

Sample Code for Loading Avro Files to BigQuery with Cloud Storage + Cloud Functions

Sample Cloud Functions code that loads Avro files from Cloud Storage into BigQuery.

Default Values for npm @google-cloud/bigquery Retry Options autoRetry and maxRetries

Default values of autoRetry and maxRetries in @google-cloud/bigquery, with sample overrides.

How to Transfer Billing Accounts Between Google Cloud Organizations

Moving a Google Cloud billing account across organizations directly, without parent-child orgs.

How to Send Google Cloud Billing Alerts to Slack

Sending Google Cloud budget alerts to Slack via Zapier, or Pub/Sub + Cloud Functions.

IAM and Resource Management to Check First After Adopting Google Cloud Organization — Preventing Project Sprawl and Personal-Account Dependencies

The moment you finish provisioning a Google Cloud Organization linked to Google Workspace or Cloud Identity, the entire domain has Project Creator and Billing Account Creator by default. That default exists so the first admin cannot lock themselves out, and it is not a recommended steady state. If you leave it, you end up with 'My First Project' scattered directly under the Organization, external services still authenticating as former employees via OAuth, and billing no one can trace. This post walks through the IAM to inspect on day one, a safe procedure to narrow the roles without cutting yourself off, folder and naming conventions, cautions when moving existing projects into folders, angles for auditing external-service integrations, and a checklist you can hand to the next admin who joins the team.

Granting Google Cloud Access by Team — Access Groups and Folders as Two Axes

"Folders or group addresses?" is a false choice. Folders scope permissions, groups identify principals, and the right design uses both axes together.

How to Install Google Cloud SDK [macOS Edition]

Move the Google Cloud SDK tarball to your home directory, extract it, and run install.sh and gcloud init.

Creating Infrastructure Diagrams with Miro

Where to grab AWS, GCP, and Azure icon assets for infrastructure diagrams in Miro.

How to Create a Data Pipeline to Transfer Data from Mixpanel to Google BigQuery

Setting up Mixpanel Data Pipelines to stream events into BigQuery.

[Python] UnicodeDecodeError: 'ascii' codec can't decode byte 0xe3

Resolving a UnicodeDecodeError in a GAE Python handler by encoding the POSTed value to UTF-8.

Data Transfer from Amazon S3 to BigQuery

Gotchas from moving data from Amazon S3 to BigQuery via the BigQuery Data Transfer Service.

Shopify's Infrastructure is Google Cloud Platform (GCP)

A quick note that Shopify runs its infrastructure on Google Cloud Platform, sourced from Shopify's engineering blog.

Setting Up SPF, DKIM, and DMARC

Setting up SPF and DKIM for a Google Workspace domain and verifying PASS in Gmail message headers.

Search Like SQL with Spreadsheet + Google Apps Script (GAS) + QUERY Function

Sample GAS code that uses the QUERY function to search a Google Spreadsheet like SQL.

Fixed Google Vertex AI Error Code 429 (Resource Exhausted) by Changing Location to `global`

Suddenly encountering error code 429 during Vertex AI development can be frustrating when you're told 'resources are exhausted.' This article introduces a method that solved this problem by simply changing the API endpoint location from `us-central1` to `global`.