Introduction
The Associate Cloud Engineer (ACE) is Google Cloud’s flagship associate-level certification — and the most-recommended starting point for anyone pursuing GCP credentials seriously. Unlike the Cloud Digital Leader (which is business/strategy-focused), ACE is technical. It validates that you can deploy applications, monitor operations, and manage enterprise solutions on Google Cloud.
This guide covers the current ACE exam objectives, the five domains with their weights, hands-on skills you must build, costs, and a realistic 8–12 week prep plan for working professionals.
Who ACE Is For
ACE is the right fit if you:
- Have 6+ months of GCP hands-on experience (or 1+ year of general cloud or system administration)
- Know basic Linux and at least one scripting language (Bash, Python)
- Have used
gcloudCLI, even briefly - Want to move into cloud engineering, DevOps, or junior architect roles on Google Cloud
If you’re brand-new to cloud, consider GCP Cloud Digital Leader or AWS Cloud Practitioner first, then come back to ACE.
ACE Exam Specifications
| Attribute | Detail |
|---|---|
| Exam code | Associate Cloud Engineer |
| Format | Multi-choice and multi-select |
| Questions | 50–60 |
| Duration | 120 minutes |
| Passing score | Not published (estimated ~70–80%) |
| Cost | $125 USD |
| Languages | English, Japanese, Spanish, Portuguese |
| Delivery | Online proctored (Kryterion) or test center |
| Validity | 3 years |
Google doesn’t publish a fixed passing percentage — you get pass/fail with a sectional breakdown. Plan for 80%+ on mocks to be safe.
ACE Exam Domains (Current 2026 Objectives)
| Domain | Weight |
|---|---|
| Setting up a cloud solution environment | ~17% |
| Planning and configuring a cloud solution | ~17% |
| Deploying and implementing a cloud solution | ~25% |
| Ensuring successful operation of a cloud solution | ~20% |
| Configuring access and security | ~21% |
Domain 1: Setting up a Cloud Solution Environment
- Projects, folders, organizations: resource hierarchy
- Billing accounts: linking, budgets, alerts, billing exports to BigQuery
- APIs and services: enabling, quotas, service accounts
- Cloud SDK:
gcloud,gsutil,bq,kubectl— installation and configuration
Domain 2: Planning and Configuring a Cloud Solution
- Compute selection: Compute Engine vs. App Engine (Standard/Flex) vs. Cloud Run vs. Cloud Functions vs. GKE
- Networking: VPCs, subnets, firewall rules, Cloud NAT, Cloud Load Balancing options (Global vs. Regional, L4 vs. L7)
- Storage selection: Cloud Storage classes, Persistent Disk types, Filestore
- Database selection: Cloud SQL vs. AlloyDB vs. Spanner vs. Firestore vs. Bigtable vs. BigQuery
Domain 3: Deploying and Implementing a Cloud Solution
The largest domain:
- Compute Engine: instance creation, instance templates, MIGs, preemptible/spot VMs, custom images
- GKE: cluster types (Standard vs. Autopilot), node pools, deployments, services, ingress, ConfigMaps, Secrets, scaling
- Cloud Run: services vs. jobs, revisions, traffic splitting, concurrency
- App Engine: standard vs. flexible, versions, traffic migration
- Cloud Functions: triggers (HTTP, Pub/Sub, Cloud Storage), runtimes
- Deployment Manager / Terraform for IaC
Domain 4: Ensuring Successful Operation
- Cloud Monitoring: workspaces (now Metrics Scope), dashboards, alerting policies, uptime checks
- Cloud Logging: log sinks, log routers, exclusion filters, exporting to BigQuery
- Error Reporting and Cloud Trace
- Cost optimization: committed use discounts (CUDs), sustained use discounts, rightsizing recommendations
Domain 5: Configuring Access and Security
- IAM: primitive vs. predefined vs. custom roles, policy bindings, conditional bindings
- Service accounts: default vs. user-managed, key rotation, workload identity for GKE
- Identity: Cloud Identity, Google Workspace integration, SSO via Workforce Identity Federation
- Encryption: Google-managed keys, customer-managed encryption keys (CMEK), customer-supplied (CSEK)
- Network security: firewall rules, hierarchical firewall policies, Cloud Armor
What the Real Exam Feels Like
Three patterns recur across ACE questions:
gcloudcommand interpretation. You’ll see commands and have to identify what they do, or pick the right command for a scenario.- Service selection. “Which compute option is best for X?” requires nuanced understanding of pricing, scaling, and operational overhead.
- IAM granularity. Several questions test whether you know primitive vs. predefined vs. custom roles and when each is appropriate.
Hands-On Skills to Build
Before booking, you should be able to do these without checking docs:
- Create a project, link a billing account, and enable APIs via
gcloud - Deploy a managed instance group with a load balancer and health check
- Create a regional VPC with subnets in two regions and configure a Cloud NAT
- Deploy a workload to GKE Autopilot via
kubectl applyand expose it with an Ingress - Deploy a containerized app to Cloud Run with traffic-splitting
- Set up an alerting policy on CPU utilization with an email notification channel
- Create a custom IAM role granting only
compute.instances.list - Export billing data to BigQuery and run a basic cost query
Each skill maps directly to one or more exam questions.
Recommended 8–12 Week Study Plan
Weeks 1–2: Resource hierarchy, IAM, billing
- Organizations, folders, projects, billing accounts
- IAM model deep dive
- Service accounts and workload identity
Weeks 3–4: Compute and storage
- Compute Engine, MIGs, App Engine, Cloud Run, Cloud Functions
- GKE cluster basics, deployments, services
- Cloud Storage classes and lifecycle
Weeks 5–6: Networking and load balancing
- VPC, subnets, firewall rules
- Cloud NAT, Cloud DNS
- Load balancing options and decision tree
Weeks 7–8: Operations and security
- Cloud Monitoring and Logging
- CMEK, Cloud Armor, hierarchical firewall policies
- Cost optimization (CUDs, sustained use, rightsizing)
Weeks 9–12: Practice exams
- 3+ full-length mocks from Sailor.sh’s GCP ACE mock exam bundle
- Targeted re-study of weak domains
- Build at least 3 of the 8 hands-on skills end-to-end
Free Resources
- Google Cloud Skills Boost (formerly Qwiklabs) — official hands-on labs, with periodic free credits
- Google Cloud Free Tier: $300 credit + always-free tier
- Official ACE exam guide PDF — the canonical objectives
- Coursera “Preparing for Google Cloud Certification: Cloud Engineer” specialization
- Sailor.sh GCP ACE mock exam bundle — realistic, exam-format practice
Salary and Career Impact
ACE is one of the highest-ROI Google Cloud certifications relative to study time:
- US average: $105K–$140K for “Cloud Engineer + ACE”
- UK average: £55K–£85K
- India average: ₹10L–₹22L
ACE is also the prerequisite mindset (though not a formal prerequisite) for Professional Cloud Architect, Professional Cloud DevOps Engineer, and Professional Data Engineer.
ACE vs. Other Cloud Engineering Certs
| Certification | Provider | Cost | Format | Validity |
|---|---|---|---|---|
| GCP ACE | $125 | 120 min, 50–60 Q | 3 years | |
| AWS Solutions Architect Associate | AWS | $150 | 130 min, 65 Q | 3 years |
| AWS Developer Associate | AWS | $150 | 130 min, 65 Q | 3 years |
| AZ-104 | Microsoft | $165 | 120 min | 1 year (free renewal) |
ACE is the cheapest and arguably the most operations-focused of these four. AWS SAA is more architecture-heavy; AZ-104 is broader in scope.
Most Common Reasons People Fail ACE
- Memorizing services, not scenarios. ACE rewards “which service fits this requirement,” not “what is Cloud Run.”
- Skipping
gcloudpractice. You must read CLI commands fluently. - Weak IAM understanding. Primitive vs. predefined vs. custom is heavily tested.
- Confusing load balancer types. Global vs. regional, L4 vs. L7, internal vs. external — make a cheat sheet.
- Treating ACE as an architect exam. It’s an operator exam: focus on doing, not designing.
After You Pass
Strong next moves:
- Professional Cloud Architect: GCP architect-track flagship
- Professional Cloud DevOps Engineer: DevOps + SRE on GCP
- Professional Data Engineer: data and analytics careers
- Multi-cloud: AWS Solutions Architect Associate or AZ-104 for cross-cloud breadth
Frequently Asked Questions
Q: Is ACE worth it in 2026? A: Yes — Google Cloud is the fastest-growing of the three major clouds in 2024–2026, and ACE remains the most-recognized GCP credential.
Q: How hard is ACE compared to AWS SAA? A: Roughly comparable difficulty. AWS SAA covers more services; ACE is more operations- and CLI-focused.
Q: Do I need GCP work experience to pass ACE? A: Not formally. With 6–12 weeks of dedicated study and the free tier, candidates without GCP work experience routinely pass.
Q: How long is ACE valid? A: 3 years. You can retake the exam or pursue a higher cert to extend validity.
Q: What’s the best practice resource for ACE? A: A combination of Google Cloud Skills Boost labs and realistic mock exams. Sailor.sh’s GCP ACE mock exam bundle covers all five domains with exam-format questions and explanations.
Ready to Start?
ACE is one of the most achievable yet career-relevant cloud certifications you can earn in 2026. Spend 8–12 weeks combining hands-on labs with realistic practice exams, and the exam itself becomes a victory lap.
Start with a free GCP ACE practice test on Sailor.sh to identify weak domains, then work through the full GCP ACE mock exam bundle until you consistently score 80%+.