Cloud Run — Auto-scaling containerized app, zero idle cost
Cloud SQL (PostgreSQL) — Managed HIPAA-eligible database with automated backups
Cloud Storage — HIPAA-eligible document vault, signed URLs only
Cloud Armor — DDoS protection + WAF
Secret Manager — Encrypted API keys, never in code
Cloud CDN — Static assets served globally, <50ms load time