The Zero-Cost Cloud Engineer Part 4: Cloud Storage, Secret Manager, and the Legacy Access Trap

The Zero-Cost Cloud Engineer Part 4: Hybrid Storage, Secrets, and the Legacy VM Trap In our previous tutorials, we secured an internet-less Compute Engine VM, established centralized logging, and decoupled our architecture with Pub/Sub. Now, we hit the next major architectural bottleneck: Our 30GB Hard Drive limit. If you allow users to upload files directly to your VM's block storage, you will quickly max out your Free Tier limits, crashing your OS. Resilient architectures offload files to Object Storage (Google Cloud Storage) and never hardcode connection properties. This tutorial covers integrating Google Cloud Storage (GCS) and Secret Manager into a Spring Boot application, entirely zero-cost. Step 1: Provisioning Hybrid Storage In Google Cloud Storage (GCS), you don't have "folders"; you have "Buckets" filled with "Objects." For the Always Free tier, GCP gives you 5 GB-months of Standard Storage per month. 🚨 The FinOps Trap (Soft Delete): A "GB-month" calculates storage sequentia