Armor pricing

Google Cloud Armor pricing

This document explains Google Cloud Armor and Google Cloud Armor Enterprise pricing details. This pricing is active.

	Cloud Armor Standard	Cloud Armor Enterprise Paygo	Annual
Billing model	Pay as you go	Pay as you go	Subscription
Subscription price	N/A	$0.273972603 / 1 hour	$4.109589041 / 1 hour
		Includes up to 2 protected resources. Billed to the project.	Includes up to 100 protected resources across all projects. Billed to the billing account with the active subscription.
Protected resources	N/A	0 month to 2 month $0.00 (Free) / 1 hour, per 1 month / project 2 month and above $0.273972603 / 1 hour, per 1 month / project	$0.04109589 / 1 hour
Requests (globally scoped security policies)	$0.75 / 1,000,000 count	All included	All included
Requests (regionally scoped security policies)	$0.60 / 1,000,000 count	All included	All included
Security policies	$0.006849315 / 1 hour	All included	All included
Rules	$0.001369863 / 1 hour	All included	All included
Data processing fee	None	Yes; see the following section	Yes; see the following section
Time commitment	None	None	One year
Cloud Armor bot management	Billed in accordance with the reCAPTCHA pricing model	Billed in accordance with the reCAPTCHA pricing model	Billed in accordance with the reCAPTCHA pricing model

Note: If you create a hierarchical security policy in a project that isn't enrolled in Cloud Armor Enterprise, your project is automatically enrolled in Cloud Armor Enterprise Paygo. For more information about hierarchical security policy automatic enrollment behavior, see hierarchical security policies

Protected resources include the following backend types in each enrolled project; the backends are counted as protected resources for all covered endpoint and load balancer types in the enrolled project. Note that global external Application Load Balancers, regional external Application Load Balancers, regional internal Application Load Balancers, and global external proxy Network Load Balancers are considered to be protected resources regardless of whether you have attached a security policy to them.

Endpoint type	Protected resource (backend type)
External Application Load Balancer	Backend service Backend bucket
External proxy Network Load Balancer	Backend service
External passthrough Network Load Balancer	Backend service (regional) Target pool
Protocol forwarding	Target instance
Public IP address (VM)	Instance

Note: When you enable advanced network DDoS protection for a particular region, all public virtual machine instances in the region are counted against your Cloud Armor Enterprise protected resources total.

Data processing fee

The Cloud Armor Enterprise data processing fee meters the data transferred to the internet from all protected resources for every project that is enrolled in Cloud Armor Enterprise. When you use Cloud Armor Enterprise Annual, the data processing fee is billed at the project level, but usage is aggregated across all protected resources in all projects enrolled in Cloud Armor Enterprise Annual. When you use Cloud Armor Enterprise Paygo, the data processing fee is billed and usage is aggregated at the project level. The Cloud Armor Enterprise data processing fee is separate from the Cloud Load Balancing data processing fee.

Prices are per GiB transferred to the internet directly or through Carrier Peering, and are in addition to other data transfer fees. For example, for workloads behind a supported Google Cloud load balancer, the data processing fee meters the bits data transferred to the internet through the enrolled load balancer endpoints but does not meter the associated inter-region or inter-zone traffic by the underlying workload. The charge is $0.05 per GiB data transferred for the first 100 TiB and $0.04 per GiB for the next 400 TiB. If the content being served is using Cloud CDN and is considered cacheable, then the data processing fee for Cloud CDN is applied for that content. The following table contains complete pricing.

Cloud Armor Enterprise Paygo


Cloud Load Balancing & Compute Engine instance	0 gibibyte to 102,400 gibibyte $0.075 / 1 gibibyte, per 1 month / project 102,400 gibibyte to 512,000 gibibyte $0.06 / 1 gibibyte, per 1 month / project 512,000 gibibyte and above $0.05 / 1 gibibyte, per 1 month / project
Cloud CDN & Media CDN	0 gibibyte to 102,400 gibibyte $0.0375 / 1 gibibyte, per 1 month / project 102,400 gibibyte to 512,000 gibibyte $0.03 / 1 gibibyte, per 1 month / project 512,000 gibibyte to 1,024,000 gibibyte $0.025 / 1 gibibyte, per 1 month / project 1,024,000 gibibyte and above $0.02 / 1 gibibyte, per 1 month / project
Cloud DNS	Included

Cloud Armor Enterprise Annual


Cloud Load Balancing & Compute Engine instance	0 gibibyte to 102,400 gibibyte $0.05 / 1 gibibyte, per 1 month / account 102,400 gibibyte to 512,000 gibibyte $0.04 / 1 gibibyte, per 1 month / account 512,000 gibibyte and above $0.03 / 1 gibibyte, per 1 month / account
Cloud CDN & Media CDN	0 gibibyte to 102,400 gibibyte $0.025 / 1 gibibyte, per 1 month / account 102,400 gibibyte to 512,000 gibibyte $0.02 / 1 gibibyte, per 1 month / account 512,000 gibibyte to 1,024,000 gibibyte $0.015 / 1 gibibyte, per 1 month / account 1,024,000 gibibyte and above $0.01 / 1 gibibyte, per 1 month / account
Cloud DNS	Included

Note: Rules utilizing reCAPTCHA in the match condition or in the action are not treated any differently by Cloud Armor; usage billed still depends on whether you are enrolled with the Standard or Cloud Armor Enterprise pricing model. However, reCAPTCHA usage is subject to reCAPTCHA billing.

If a backend service has a Cloud Armor security policy associated with it, you can use the custom headers feature with that backend service without any additional charge for the custom headers feature.

If you pay in a currency other than USD, the prices listed in your currency on Google Cloud Platform SKUs apply.

What's next

Read the Google Cloud Armor documentation.
Try the Pricing calculator.
Learn about Google Cloud Armor solutions and use cases.

Request a custom quote

With Google Cloud's pay-as-you-go pricing, you only pay for the services you use. Connect with our sales team to get a custom quote for your organization.