General Google Cloud
Weekly, source-backed updates for cross-cutting Google Cloud changes that don't sit inside one of the other domains (for example platform-wide security, identity, billing, regions, or console changes) — plus notable moves across the wider industry. Newest first.
Week of Oct 12 – Oct 18, 2026
What changed in Google Cloud
- Cloud Billing spend cap budgets, which pause usage of eligible services in a project when estimated spend exceeds the budget, are now generally available, after a preview that started on July 27, 2026. They are limited to first-party (direct) Google Cloud billing accounts, not reseller billing accounts; enforcement is not instant and overages are still billed. — Cloud Billing release notes, Oct 13; spend cap docs
- Projects with producer VPC spokes linked to Network Connectivity Center hubs now incur hourly usage fees, after Google fixed an issue that had left them unbilled. — Network Connectivity Center release notes, Oct 12
- The deadline for migrating Google SecOps SOAR APIs to the Chronicle API moved from November 30, 2026 to March 31, 2027. — Google SecOps release notes, Oct 12
- Assured Controls rules in the Workspace Admin console can target Access Management and Access Approvals policies at specific Google Drive files through classification labels, not only by organizational unit or group. — Google Workspace Updates, Oct 12
- Google Meet calls now use post-quantum cryptography, starting with laptop web clients and meeting room hardware, with mobile support to follow. — Google Workspace Updates, Oct 12
Week of Oct 4 – Oct 11, 2026
What changed in Google Cloud
- Revoking active sessions and short-lived credentials for Workforce Identity Federation users across all clients, through the gcloud CLI or REST API, is now generally available. — IAM release notes, Oct 6
- Security Command Center's Artifact guard with CI/CD integration is deprecated and shuts down on October 30, 2026. — Security Command Center release notes, Oct 6
- Google SecOps features built on the Chronicle API, including feeds, parsers, rules, data tables and SOAR resources, now have Terraform providers and Google Cloud client libraries. — Google SecOps release notes, Oct 5
- Google Docs can now open, edit and collaborate on Markdown (
.md) files without converting them, and Google Drive renders Markdown previews, rolling out from October 5. — Google Workspace Updates, Oct 5
Week of Sep 27 – Oct 3, 2026
What changed in Google Cloud
- Network Connectivity Center's Partner Cross-Cloud Interconnect for AWS is now generally available. — Network Connectivity Center release notes, Sep 29
- Google Cloud VMware Engine's Bring Your Own License management, which lets you register and manage portable VMware Cloud Foundation license keys across projects from the Google Cloud console, is now generally available. — VMware Engine release notes, Oct 1
Week of Sep 20 – Sep 26, 2026
What changed in Google Cloud
- IAM now supports SCIM as the source of user and group claims for Looker OAuth sign-in workflows, in preview, including Extended Session Length support. — IAM release notes, Sep 21
- The API Keys API now has a remote Model Context Protocol server, in preview, letting AI applications create, inspect, restrict, and manage the lifecycle of API keys in Google Cloud projects. — API Keys release notes, Sep 25
- Cloud Asset Inventory added support for Migration Center resource types across its export, list, history, query, feed, and search APIs. — Cloud Asset Inventory release notes, Sep 23
Week of Sep 6 – Sep 12, 2026
What changed in Google Cloud
- The Identity and Access Management (IAM) Model Context Protocol server is now generally available, letting AI applications connect to inspect and manage custom roles and deny policies across resources. — IAM release notes, Sep 10
- IAM's Policy Assist API is now available in preview, letting you request Gemini-generated IAM role suggestions programmatically. — IAM release notes, Sep 9
- A Policy Assist remote MCP server and a Policy Assist REST API are now available in preview, letting external AI agents and applications request Gemini-assisted IAM role suggestions. — Policy Intelligence release notes, Sep 9
Industry
- Commentary: GitLab shipped a critical patch release (19.3.2, 19.2.6, and 19.1.8) fixing an unauthenticated path-traversal vulnerability in the repository commits API that allowed arbitrary file read, among roughly 17 other security issues, and CISA added it to its Known Exploited Vulnerabilities catalog the next day — teams running self-managed GitLab alongside GCP infrastructure should patch promptly. — GitLab patch release notes, Sep 10