Google Cloud Armor pricing
This document explains Google Cloud Armor and Google Cloud Armor Managed Protection pricing details. This pricing is active.
| Standard Tier | Plus Tier | |
|---|---|---|
| Billing model | Pay as you go | Subscription |
| Subscription price | N/A | $3,000/month (includes up to 100 protected resources) |
| Protected resources | N/A | $30/protected resource per month after initial 100 |
|
|
All included |
| Data processing fee | None | Yes; see the following section. |
| Time commitment | None | One year |
| Google Cloud Armor bot management | Billed in accordance with the reCAPTCHA Enterprise pricing model | Billed in accordance with the reCAPTCHA Enterprise pricing model |
Protected resources include the following backend types in each enrolled project; the backends are counted as protected resources for all covered endpoint and load balancer types in the enrolled project.
| Endpoint type | Protected resource (backend type) |
|---|---|
| HTTP(S) Load Balancing |
|
| External SSL Proxy Load Balancing | Backend service |
| External TCP Proxy Load Balancing | Backend service |
| External TCP/UDP Network Load Balancing |
|
| Protocol forwarding | Target instance |
| Public IP address (VM) | Instance |
Data processing fee
The Managed Protection Plus data processing fee meters the data egressed to the internet from all protected resources for every project that is enrolled in Managed Protection Plus. The data processing fee is billed at the billing account level, aggregating usage across all protected resources in all projects enrolled in Managed Protection Plus.
Prices are per GB egressed to the internet directly or through Carrier Peering, and are in addition to other network egress fees. For example, for workloads behind a supported Google Cloud load balancer, the data processing fee meters the bits egressed to the internet through the enrolled load balancer endpoints but does not meter the associated inter-region or inter-zone traffic by the underlying workload. The charge is $0.05 per GiB egressed for the first 100 TiB and $0.04 per GiB for the next 400 TiB. If the content being served is using Cloud CDN and is considered cacheable, then the data processing fee for Cloud CDN is applied for that content. The following table contains complete pricing.
| TiB egressed | Cloud Load Balancing | Cloud CDN & Media CDN | Instance | Cloud DNS |
|---|---|---|---|---|
| 0-100 | $0.05 | $0.025 | $0.05 | Included |
| 101-500 | $0.04 | $0.020 | $0.04 | Included |
| 501-1000 | $0.03 | $0.015 | $0.03 | Included |
| 1001+ | Contact account team | $0.010 | Contact account team | Included |
If a backend service has a Google Cloud Armor security policy associated with it, you can use the custom headers feature with that backend service without any additional charge for the custom headers feature.
If you pay in a currency other than USD, the prices listed in your currency on Google Cloud Platform SKUs apply.
What's next
- Read the Google Cloud Armor documentation.
- Try the Pricing calculator.
- Learn about Google Cloud Armor solutions and use cases.