This document explains Google Cloud Armor and Google Cloud Armor Enterprise pricing details. This pricing is active.
Cloud Armor Standard
Cloud Armor Enterprise
Paygo
Annual
Billing model
Pay as you go
Pay as you go
Subscription
Subscription price
N/A
Protected resources
N/A
Requests (globally scoped security policies)
All included
All included
Requests (regionally scoped security policies)
All included
All included
Security policies
All included
All included
Rules
All included
All included
Data processing fee
None
Yes; see the following section
Yes; see the following section
Time commitment
None
None
One year
Cloud Armor bot management
Billed in accordance with the reCAPTCHA pricing model
Billed in accordance with the reCAPTCHA pricing model
Billed in accordance with the reCAPTCHA pricing model
Note: If you create a hierarchical security policy in a project that isn't enrolled in Cloud Armor Enterprise, your project is automatically enrolled in Cloud Armor Enterprise Paygo. For more information about hierarchical security policy automatic enrollment behavior, see hierarchical security policies
Protected resources include the following backend types in each enrolled project; the backends are counted as protected resources for all covered endpoint and load balancer types in the enrolled project. Note that global external Application Load Balancers, regional external Application Load Balancers, regional internal Application Load Balancers, and global external proxy Network Load Balancers are considered to be protected resources regardless of whether you have attached a security policy to them.
Endpoint type
Protected resource (backend type)
External Application Load Balancer
External proxy Network Load Balancer
Backend service
External passthrough Network Load Balancer
Protocol forwarding
Target instance
Public IP address (VM)
Instance
Note: When you enable advanced network DDoS protection for a particular region, all public virtual machine instances in the region are counted against your Cloud Armor Enterprise protected resources total.
The Cloud Armor Enterprise data processing fee meters the data transferred to the internet from all protected resources for every project that is enrolled in Cloud Armor Enterprise. When you use Cloud Armor Enterprise Annual, the data processing fee is billed at the project level, but usage is aggregated across all protected resources in all projects enrolled in Cloud Armor Enterprise Annual. When you use Cloud Armor Enterprise Paygo, the data processing fee is billed and usage is aggregated at the project level. The Cloud Armor Enterprise data processing fee is separate from the Cloud Load Balancing data processing fee.
Prices are per GiB transferred to the internet directly or through Carrier Peering, and are in addition to other data transfer fees. For example, for workloads behind a supported Google Cloud load balancer, the data processing fee meters the bits data transferred to the internet through the enrolled load balancer endpoints but does not meter the associated inter-region or inter-zone traffic by the underlying workload. The charge is $0.05 per GiB data transferred for the first 100 TiB and $0.04 per GiB for the next 400 TiB. If the content being served is using Cloud CDN and is considered cacheable, then the data processing fee for Cloud CDN is applied for that content. The following table contains complete pricing.
Cloud Armor Enterprise Paygo
| Cloud Load Balancing & Compute Engine instance |
0 gibibyte to 102,400 gibibyte
$0.075 / 1 gibibyte, per 1 month / project
102,400 gibibyte to 512,000 gibibyte
$0.06 / 1 gibibyte, per 1 month / project
512,000 gibibyte and above
$0.05 / 1 gibibyte, per 1 month / project
|
|---|---|
| Cloud CDN & Media CDN |
0 gibibyte to 102,400 gibibyte
$0.0375 / 1 gibibyte, per 1 month / project
102,400 gibibyte to 512,000 gibibyte
$0.03 / 1 gibibyte, per 1 month / project
512,000 gibibyte to 1,024,000 gibibyte
$0.025 / 1 gibibyte, per 1 month / project
1,024,000 gibibyte and above
$0.02 / 1 gibibyte, per 1 month / project
|
| Cloud DNS |
Included |
Cloud Armor Enterprise Annual
| Cloud Load Balancing & Compute Engine instance |
0 gibibyte to 102,400 gibibyte
$0.05 / 1 gibibyte, per 1 month / account
102,400 gibibyte to 512,000 gibibyte
$0.04 / 1 gibibyte, per 1 month / account
512,000 gibibyte and above
$0.03 / 1 gibibyte, per 1 month / account
|
|---|---|
| Cloud CDN & Media CDN |
0 gibibyte to 102,400 gibibyte
$0.025 / 1 gibibyte, per 1 month / account
102,400 gibibyte to 512,000 gibibyte
$0.02 / 1 gibibyte, per 1 month / account
512,000 gibibyte to 1,024,000 gibibyte
$0.015 / 1 gibibyte, per 1 month / account
1,024,000 gibibyte and above
$0.01 / 1 gibibyte, per 1 month / account
|
| Cloud DNS |
Included |
Note: Rules utilizing reCAPTCHA in the match condition or in the action are not treated any differently by Cloud Armor; usage billed still depends on whether you are enrolled with the Standard or Cloud Armor Enterprise pricing model. However, reCAPTCHA usage is subject to reCAPTCHA billing.
If a backend service has a Cloud Armor security policy associated with it, you can use the custom headers feature with that backend service without any additional charge for the custom headers feature.
If you pay in a currency other than USD, the prices listed in your currency on Google Cloud Platform SKUs apply.