Google Cloud's network security service that protects internet-facing applications against DDoS attacks and acts as a WAF, with rules for the OWASP Top 10 (SQL injection, XSS), geo-blocking, and rate limiting. It integrates with Cloud Load Balancing.
In CDL it is the answer to DDoS attacks and web exploits. Question: a public application receives DDoS attacks or SQL injection attempts → Cloud Armor. Do not confuse it with VPC firewall rules, which only filter by IP, port, and protocol.
Cloud Armor is a concept that can show up on the exam. Check the full guide to see it in context.