Vertex AI in Google Cloud: One Workshop for Models, Agents, and Machine Learning in Production

Vertex AI in Google Cloud: One Workshop for Models, Agents, and Machine Learning in Production

A thorough, plain-English guide to Google's unified AI platform, covering the model catalog, generative AI and agents, training your own models, pipelines and feature management, serving and monitoring, evaluation, security, cost, and the habits that take AI from a clever demo to a dependable service.

Imagine a huge, well-equipped workshop for building anything that needs a brain. On one wall hangs a catalog of ready-made brains from many makers, which you can borrow, test, and customize. In one corner is a bench for teaching a brand-new brain from your own examples. Nearby is a drawing board for assembling assistants that can plan, use tools, and talk to each other. Along another wall are the tools for the long haul: a shelf of reusable ingredients, an assembly line that repeats the same careful steps every time, a loading dock that ships finished brains to customers, and a row of gauges that warn you when something starts behaving oddly. Vertex AI is that workshop on Google Cloud. This guide walks through every part of it, explains why each part exists, and shows how to use the whole thing with care.

1What Vertex AI Really Is

Before diving into the parts, we need a clear picture of the problem the platform solves and a note about its changing name.

The problem of AI in the real world

Building a working AI feature is rarely just a matter of having a clever model. A real project needs data to be prepared, models to be chosen or trained, experiments to be tracked, results to be evaluated fairly, and finished models to be served to users with low delay and high reliability. After launch, the model must be watched, because the world changes and a model that was accurate last spring may be quietly wrong this autumn. Doing all of this with a pile of separate tools means a lot of glue code, inconsistent security, and surprises in production.

What the platform gives you

Vertex AI is Google Cloud’s managed platform for the whole lifecycle of machine learning and generative AI. It brings together access to a large catalog of models, tools for prompting and tuning them, a framework and runtime for building AI agents, services for training your own models, and the operational machinery of MLOps: pipelines, a feature store, a model registry, endpoints, monitoring, and evaluation. Everything runs inside your Google Cloud project, under the same identity, networking, and governance controls as your other services.

Simple Analogy

Think of a full-service kitchen supply company. You can buy a prepared meal and serve it today, which is like calling a ready-made model. You can adjust a recipe to suit your guests, which is like tuning. You can cook from scratch with your own ingredients, which is like custom training. And the company also provides the delivery trucks, the fridge thermometers, and the health inspectors, which are the operations tools. You pick the level of effort you need.

A note on the name

Reports from Google Cloud Next in April 2026 describe Vertex AI as being renamed or evolved into the Gemini Enterprise Agent Platform, with the Agentspace product folded in and the focus repositioned around agents. Sources describing the change also state that the underlying APIs, Model Garden, training pipelines, and endpoints did not change, and that many practitioners and documents still simply say Vertex AI. Because naming and packaging evolve, this guide uses the familiar name Vertex AI and describes the capabilities, and you should confirm current product names and documentation paths on the official pages.

Unified
One platform from data to deployment
Generative
Models, prompting, tuning, and agents
Operational
Pipelines, serving, and monitoring built in
i
Good to Know

Vertex AI is an AI platform, not a single model. It offers many models and many ways to build, from calling a ready-made model with one request to training and operating your own. Choosing the lightest approach that meets your need is usually the wisest strategy.

2Core Concepts and Vocabulary

AI has a lot of jargon. These are the words you will hear in nearly every Vertex AI conversation, each explained from scratch.

Term 1

Model

A program that has learned patterns from data and can make predictions or generate content, such as text, images, or classifications.

Term 2

Foundation Model

A very large, general-purpose model trained on huge amounts of data that can be adapted to many tasks.

Term 3

Prompt

The instruction and context you give a generative model, such as a question, a task description, or examples to follow.

Term 4

Tuning

Adapting a pre-trained model to your own data or style so that it performs better on your specific task.

Term 5

Grounding and RAG

Giving a model trusted information to base its answers on, usually by retrieving relevant documents first, to reduce made-up answers.

Term 6

Agent

A system built on a model that can plan steps, call tools, use data, and take actions to accomplish a goal.

Term 7

Training

The process of teaching a model by showing it many examples so it learns to make good predictions.

Term 8

Inference

Using a trained model to produce a result for new input. This is what happens every time a user asks for a prediction.

Term 9

Endpoint

A hosted address where a deployed model receives requests and returns predictions.

Term 10

Feature

A measurable input to a model, such as a customer’s average purchase value, prepared and stored for reuse.

Term 11

Pipeline

An automated, repeatable sequence of steps, such as preparing data, training, evaluating, and deploying a model.

Term 12

Drift

A change over time in the data a model sees or in the relationship it learned, which can quietly reduce accuracy.

How the words fit together

You start with a model, either a foundation model from the catalog or one you train yourself. You steer it with prompts, improve it with tuning, and ground it with trusted data. If the task needs action, you wrap the model in an agent that can use tools. When it is ready, you deploy it to an endpoint to run inference for users. Features feed the model with well-prepared inputs, pipelines make the process repeatable, and monitoring watches for drift after launch.

Simple Analogy

Think of hiring a new employee. A foundation model is a well-educated graduate. A prompt is the instruction you give them for today’s task. Tuning is on-the-job training for your company’s style. Grounding is handing them the right reference manuals. An agent is giving them tools and permission to act. Monitoring is the regular performance review.

!
Common Confusion

Training and inference are not the same thing. Training happens occasionally and teaches the model. Inference happens constantly and uses it. They have different costs, different hardware needs, and different failure modes, so plan for them separately.

3Platform Architecture: The Map of the Workshop

Vertex AI has many parts. A good mental map organizes them by what you are trying to do.

Organized by the job to be done

The easiest way to understand the platform is to group its parts by stage. Early on, you explore and prototype. Then you choose or build a model. Then you build the application or agent around it. Then you deploy and operate it. Each stage has its own tools, and they connect to one another through shared storage, shared identity, and a common registry.

flowchart LR
    D["Data in storage and warehouse"] --> P["Prepare and explore"]
    P --> M{"Choose a path"}
    M -->|"Use ready-made"| G["Model Garden and prompting"]
    M -->|"Adapt"| T["Tuning"]
    M -->|"Build own"| C["AutoML or custom training"]
    G --> A["Applications and agents"]
    T --> A
    C --> R["Model Registry"]
    R --> E["Endpoints for serving"]
    A --> E
    E --> O["Monitoring and evaluation"]
    O -->|"Feedback"| P
        
FIG 1 — The stages of an AI project and where Vertex AI tools fit

The main areas

AreaKey partsWhat it is for
Models and promptingModel Garden, studio for prompt experimentsChoosing models and trying them quickly
Generative applications and agentsAgent builder tools, agent runtime, search and groundingBuilding assistants, search, and agent workflows
Model developmentAutoML, custom training, notebooks, experiment trackingCreating models from your own data
MLOpsPipelines, feature store, model registry, evaluationMaking the process repeatable and governed
Serving and operationsEndpoints, batch prediction, monitoring, explainabilityRunning models reliably and watching them
Simple Analogy

Think of a large hospital with departments for diagnosis, treatment, surgery, and follow-up care. Each department has its own specialists and equipment, yet patient records and staff identities are shared. Vertex AI is organized in the same way: specialized areas with a common backbone.

The common backbone

1

Shared identity and permissions

All parts use Google Cloud identity and access management, so roles and service accounts apply consistently.

2

Shared storage and data services

Training data, artifacts, and results typically live in object storage and the data warehouse.

3

Shared registry and metadata

Models, versions, experiments, and lineage are tracked centrally so you can trace how a model was produced.

4

Shared networking and security controls

Private connectivity, encryption keys, and service perimeters apply across the platform.

!
Check Current Components

Product names, groupings, and features change often in the AI space. Confirm the current list of components and their availability in your region on the official documentation before designing around a specific feature.

4Model Garden and Generative AI

For most new projects, the best starting point is not training anything. It is choosing a model that already exists.

The model catalog

Model Garden is a catalog where you can discover, test, customize, and deploy models. It contains Google’s own foundation models, including the Gemini family and models for generating images, video, speech, and music, as well as models from partner companies and popular open models. The catalog is large and growing, with reports of well over a hundred models. Having many options in one place lets you compare models for your task without managing separate accounts and contracts for each.

Family 1

Google foundation models

General-purpose models for text, code, images, and mixed inputs, offered in different sizes for different cost and speed trade-offs.

Family 2

Generative media models

Models that create images, video, speech, and music from descriptions.

Family 3

Partner models

Models from other leading AI companies offered through the same platform, with unified billing and governance.

Family 4

Open models

Popular openly available models that you can deploy and customize in your own project.

Family 5

Task-specific models

Smaller models built for particular jobs such as embeddings for search, translation, or classification.

Prompting and the studio

A studio-style workspace lets you try prompts interactively, adjust settings such as how creative or precise the model should be, compare outputs from different models, and save prompts as reusable assets. Good prompting is a skill of its own. Clear instructions, relevant context, examples of the desired output, and explicit formatting requests all improve results. Treat prompts like code: version them, test them against a fixed set of examples, and change them deliberately.

Choosing the right model

NeedLean towardWhy
Complex reasoning and long documentsLarger, more capable modelAccuracy matters more than speed
High volume, simple tasks, tight budgetSmaller, faster modelLower cost and delay per request
Creating images or videoGenerative media modelPurpose-built for that output
Semantic search and similarityEmbedding modelTurns text into comparable numbers
Strict data control or special licensingOpen model deployed in your projectYou control hosting and customization
Simple Analogy

Choosing a model is like choosing a vehicle. A large truck carries a lot but is expensive to run for a simple errand. A small car is cheap and quick for city trips. You do not buy a freight train to deliver a pizza, and you do not use a scooter to move a house.

Tuning to fit your needs

When prompting alone is not enough, tuning adapts a model to your data. You provide examples of inputs and desired outputs, and the platform adjusts the model so it follows your style, terminology, or task format more reliably. Tuning is worth considering after you have tried careful prompting and grounding, because it adds cost, requires good-quality examples, and creates a model version you must manage. Many needs are met with prompting and grounding alone.

i
Practical Tip

Climb the ladder one rung at a time: first better prompts, then grounding with your own data, then tuning, and only then training from scratch. Each rung costs more time and money than the one before.

!
Models Are Retired

Model versions are released and retired over time. Pin the model version you tested, track retirement notices, and plan to re-test before moving to newer versions, since behavior can change.

5Grounding, Search, and Retrieval-Augmented Generation

A model on its own knows only what it learned in training. To answer questions about your own business, it needs access to your information.

The problem of made-up answers

Generative models are fluent, but they can state false things with great confidence. This is often called hallucination. It happens because the model predicts plausible text, not verified facts. For business use, where wrong answers cost money or trust, the standard remedy is grounding: instead of asking the model to answer from memory, you give it the relevant, trusted information alongside the question, and instruct it to answer only from that.

How retrieval-augmented generation works

The common pattern is retrieval-augmented generation, usually called RAG. Your documents are split into pieces, converted into numerical representations called embeddings that capture meaning, and stored in a searchable index. When a user asks a question, the system finds the pieces most relevant to it, adds them to the prompt, and asks the model to answer using them. The model’s answer can include references to the source pieces, so users can verify it.

flowchart TD
    DOC["Your documents"] --> CH["Split into pieces"]
    CH --> EM["Create embeddings"]
    EM --> IDX["Searchable index"]
    Q["User question"] --> QE["Embed the question"]
    QE --> S["Find most relevant pieces"]
    IDX --> S
    S --> PR["Build prompt with question and pieces"]
    PR --> MD["Generative model"]
    MD --> ANS["Answer with sources"]
        
FIG 2 — The flow of retrieval-augmented generation
Simple Analogy

Think of an open-book exam. Instead of asking a student to recall everything from memory, you let them look up the relevant pages in the textbook and cite them. They answer more accurately, and you can check their sources.

Platform support for search and grounding

Vertex AI provides managed search and retrieval services that handle much of this plumbing: connecting to your data stores, indexing documents, running semantic search, and returning grounded answers. It also supports grounding with web search results for questions about current events, and with your own enterprise data for private information. These managed services let teams build question-answering and enterprise search experiences without building and operating a search system from scratch.

Source 1

Enterprise documents

Policies, manuals, wikis, and files stored in your cloud storage or business applications.

Source 2

Structured data

Tables in the warehouse, queried to answer questions about numbers and records.

Source 3

Web content

Public information, used when questions need fresh facts that no training data contains.

Source 4

Business applications

Systems such as ticketing, customer records, and messaging, reached through connectors or tools.

!
Respect Permissions

A search system that indexes every document and answers for every user can reveal information people should not see. Make sure retrieval respects each user’s access rights, and keep sensitive data out of indexes that are broadly available.

i
Quality Tip

Retrieval quality drives answer quality. Clean documents, sensible chunk sizes, good metadata, and testing with real questions often improve results more than switching to a bigger model.

6Agents and the Agent Toolkit

The newest and fastest-growing part of the platform is about agents: systems that do not just answer, but act.

What an agent is

A simple model call takes input and returns output. An agent wraps a model in a loop. It reads a goal, decides what to do next, calls a tool such as a database lookup or a booking service, looks at the result, and repeats until the goal is met or it needs help. Agents can use search, call business systems, run code, and even delegate to other agents. This makes them powerful, and it also makes them riskier, since they can take actions with real consequences.

flowchart TD
    G["Goal from user"] --> PL["Agent plans next step"]
    PL --> TL{"Needs a tool?"}
    TL -->|"Yes"| CALL["Call tool or data source"]
    CALL --> OBS["Read the result"]
    OBS --> PL
    TL -->|"No"| ANS["Compose answer"]
    ANS --> CHK{"Needs human approval?"}
    CHK -->|"Yes"| H["Ask a person"]
    CHK -->|"No"| OUT["Deliver result"]
    H --> OUT
        
FIG 3 — A simple agent loop with an optional human checkpoint

The toolkit

Tool 1

Agent Development Kit

An open, code-first framework for building agents in several popular programming languages, with support for multiple agents working together.

Tool 2

Low-code agent designer

A visual canvas for designing agent workflows without writing much code, aimed at faster prototyping.

Tool 3

Agent library

A collection of ready-made agent samples and tools to start from instead of beginning with a blank page.

Tool 4

Managed agent runtime

Infrastructure for deploying and scaling agents, with sessions, memory, and enterprise security features, so you do not run servers yourself.

Tool 5

Agent-to-agent protocol

An open standard that lets agents built by different teams or vendors discover each other and cooperate.

Simple Analogy

A plain model is like an expert you can phone for advice. An agent is like an assistant you hand a task, who then makes calls, checks records, books appointments, and reports back. The assistant is far more useful, and also needs clearer limits on what they may do alone.

Building agents responsibly

1

Start with a narrow job

Give an agent one well-defined task and a small set of tools, and expand only after it proves reliable.

2

Limit permissions

Give the agent its own identity with the narrowest access needed, so a mistake cannot cause wide damage.

3

Require approval for risky actions

Put a human checkpoint before actions that spend money, delete data, or contact customers.

4

Log every step

Record the plans, tool calls, and results so behavior can be reviewed, debugged, and audited.

5

Evaluate with realistic scenarios

Test the agent against many realistic tasks, including tricky and hostile inputs, before and after each change.

!
Prompt Injection

Agents that read emails, web pages, or documents can be tricked by hidden instructions inside that content. Treat all retrieved content as untrusted data, never as commands, and limit what tools the agent can use after reading untrusted material.

7Training Your Own Models: AutoML and Custom Training

Sometimes no ready-made model fits. When your problem is specific to your data, you train your own.

When training makes sense

Training your own model is worthwhile when you have a prediction task that foundation models are not built for, such as forecasting demand from your own sales history, scoring the risk of customer churn, detecting defects in your factory images, or ranking products for your own shoppers. It is also appropriate when you need a small, fast, cheap model for a narrow job, or when data cannot be sent to a general model for policy reasons.

Two main routes

Route 1

AutoML

You provide labeled data, and the platform tries approaches and builds a model for you, with little or no code. Suited to common tasks on tabular, image, text, and video data.

Route 2

Custom training

You bring your own training code, in popular frameworks, and the platform provides managed machines, accelerators, and orchestration. You get full control.

The training workflow

1

Prepare and split data

Clean the data and divide it into training, validation, and test sets, so the model is judged on examples it has never seen.

2

Explore in a notebook

Use managed notebooks for early experiments and quick analysis before committing to a full training job.

3

Run a training job

Launch a managed job on the chosen machines and accelerators, with logs and metrics collected automatically.

4

Tune hyperparameters

Use automated search to try many settings, such as learning rate, and find the best combination.

5

Track experiments

Record settings, data versions, and results for each run so you can compare and reproduce them.

6

Evaluate and register

Measure the model on held-out data, and if it meets your bar, store it in the model registry with its lineage.

Simple Analogy

Training a model is like coaching an athlete. You prepare a training plan, run practice sessions, keep a diary of what worked, try different routines, and finally hold a test match against opponents the athlete has never faced. Only if the test match goes well does the athlete join the team.

Compute choices

Training can be slow on ordinary processors. The platform offers machines with graphics processors and Google’s own tensor accelerators, and supports distributed training that spreads one job across many machines. Larger jobs finish faster but cost more per hour, so the aim is to balance speed against budget. Distributed frameworks are also supported for scaling Python workloads.

!
Data Leakage and Overfitting

If test data accidentally influences training, results look wonderful and then collapse in production. Keep a strict separation between training and test data, and be suspicious of results that seem too good.

i
Practical Tip

Start with a simple baseline model before anything fancy. If a basic approach nearly meets your need, you save weeks of effort and gain a benchmark that any complex model must beat.

8MLOps: Pipelines, Feature Store, and Model Registry

Getting one good model is an achievement. Getting a good model again and again, safely, is a discipline called MLOps.

Pipelines

A pipeline turns the steps of an ML workflow into an automated, repeatable process: fetch data, validate it, transform it, train, evaluate, and, if results meet the bar, register or deploy the model. Because each step is defined explicitly and runs the same way every time, pipelines remove the “it worked on my laptop” problem, make results reproducible, and allow retraining on a schedule or when new data arrives. Each run records its inputs, outputs, and settings, giving you a trail to follow.

flowchart LR
    S["Trigger: schedule or new data"] --> V["Validate data"]
    V --> TR["Transform and create features"]
    TR --> TN["Train model"]
    TN --> EV["Evaluate against threshold"]
    EV --> D{"Meets the bar?"}
    D -->|"Yes"| RG["Register model version"]
    D -->|"No"| ST["Stop and alert team"]
    RG --> DP["Deploy to endpoint"]
        
FIG 4 — An automated training pipeline with a quality gate

Feature Store

Features are the prepared inputs that models learn from and predict with. In many organizations, every team computes the same features slightly differently, and the version used in training differs from the version used in production. This mismatch, called training-serving skew, silently harms accuracy. A feature store centralizes feature definitions and values, so teams reuse them, the same logic feeds both training and live prediction, and fresh values can be served with low delay.

Model Registry

The model registry is the catalog of your trained models. It stores versions, links each to the data, code, and settings that produced it, records evaluation results, and tracks which version is deployed where. This makes it possible to answer questions that matter in audits and incidents: which model made this decision, how was it trained, and which version should we roll back to?

MLOps 1

Experiments

Track and compare training runs, settings, and metrics, so improvements are evidence-based.

MLOps 2

Pipelines

Automate and standardize the workflow so it is repeatable and auditable.

MLOps 3

Feature Store

Share and reuse features, and keep training and serving consistent.

MLOps 4

Model Registry

Version, govern, and trace models through their lifecycle.

MLOps 5

Evaluation

Measure model quality against clear criteria before and after deployment.

MLOps 6

Monitoring

Watch live models for skew, drift, and errors, and alert when quality slips.

Simple Analogy

Pipelines are the factory assembly line, the feature store is the shared parts warehouse so every line uses identical parts, and the registry is the product catalog with serial numbers and test certificates. Together they turn craft work into reliable manufacturing.

!
Skew Is Silent

Training-serving skew produces no errors, only slightly worse predictions that nobody can explain. Compute features once, in one place, for both training and serving, whenever you can.

i
Practical Tip

Automate retraining only after you have automated evaluation. A pipeline that retrains and deploys without a quality gate can ship a worse model faster than any human ever could.

9Serving: Endpoints, Batch Prediction, and Scaling

A model creates value only when it is used. Serving is how predictions reach applications and people.

Online prediction through endpoints

An endpoint is a hosted address where a deployed model answers requests with low delay. You deploy a model version to an endpoint, choose the machine type and the minimum and maximum number of replicas, and the platform scales between them as traffic changes. Multiple model versions can sit behind one endpoint, with traffic split between them, which allows gradual rollouts: send a small share of requests to the new version, compare its behavior, and increase the share if all is well.

Batch prediction

Not every task needs an instant answer. Scoring a million customers overnight, or generating descriptions for a whole catalog, is better done as a batch job. Batch prediction reads a large set of inputs from storage or the warehouse, runs the model across them using temporary resources, writes the results back, and shuts down. It is usually much cheaper than keeping an endpoint running for work that is not time sensitive.

NeedBetter choiceWhy
User waits for an answerOnline endpointLow delay, always ready
Score a large dataset overnightBatch predictionCheaper, no always-on cost
Occasional, unpredictable callsEndpoint with low minimum replicas, or a managed model APIPay for what you use
Strict latency during peaksEndpoint with warm minimum replicasAvoids cold starts
Generative request with no hosting wishManaged model APINo deployment to operate
flowchart TD
    REQ["Prediction requests"] --> EP["Endpoint"]
    EP --> V1["Model version A, 90 percent of traffic"]
    EP --> V2["Model version B, 10 percent of traffic"]
    V1 --> RES["Responses"]
    V2 --> RES
    RES --> MON["Compare quality and latency"]
    MON --> DEC{"Version B better?"}
    DEC -->|"Yes"| SHIFT["Shift more traffic to B"]
    DEC -->|"No"| ROLL["Roll back to A"]
        
FIG 5 — Gradual rollout of a new model version with split traffic
Simple Analogy

Online serving is a restaurant kitchen open all day, ready for any order. Batch prediction is a catering job: you prepare a thousand meals in one big session and then close the kitchen. Choose according to whether guests are waiting at the table.

Scaling and performance

Lever 1

Replica range

Minimum replicas protect latency and maximum replicas cap cost and protect downstream systems.

Lever 2

Machine and accelerator choice

Bigger or accelerated machines reduce latency for heavy models but raise hourly cost.

Lever 3

Model size and optimization

Smaller or optimized models respond faster and cost less, sometimes with little loss in quality.

Lever 4

Batching of requests

Grouping several requests together can raise throughput for models that benefit from it.

Lever 5

Caching and reuse

Reusing answers for repeated inputs avoids paying to compute the same result again.

!
Idle Endpoints Cost Money

A deployed endpoint with machines running costs money even when nobody calls it. Remove or shrink endpoints that are not in use, especially in experiments and test projects.

10Evaluation, Monitoring, and Responsible AI

Launching a model is the middle of the story, not the end. Evaluation and monitoring keep it trustworthy.

Evaluating before launch

Evaluation means measuring how well a model does its job using agreed criteria and test data. For traditional prediction models, this means metrics such as accuracy, precision, recall, or error size, measured on held-out data. For generative models, evaluation is harder, because there is often no single right answer. The platform offers evaluation tools that compare models on your own prompts, score outputs against criteria such as correctness, helpfulness, and safety, and use both automated judges and human review. The most valuable evaluation sets come from your real use cases, including difficult and unusual inputs.

Monitoring after launch

Once deployed, models face a changing world. Customer behavior shifts, new products appear, data pipelines break, and seasons change. Monitoring compares live inputs and outputs with what the model saw during training, and raises alerts when they diverge. It also tracks practical signals such as latency, error rates, and cost. Without monitoring, a model can silently degrade for months.

Signal 1

Input drift

The statistics of incoming data move away from the training data, such as new value ranges or missing fields.

Signal 2

Prediction drift

The distribution of the model’s outputs shifts, which can reveal a problem before outcomes are known.

Signal 3

Training-serving skew

Features at serving time differ from those used in training, often due to pipeline differences.

Signal 4

Quality against outcomes

When true results become known, compare them with predictions to measure real accuracy.

Signal 5

Latency, errors, and cost

Operational health indicators that reveal capacity or configuration problems.

Signal 6

Safety and content signals

For generative systems, track harmful, off-topic, or policy-violating outputs and user feedback.

flowchart TD
    L["Live traffic"] --> LOG["Log inputs and outputs"]
    LOG --> CMP["Compare with training baseline"]
    CMP --> AL{"Drift or quality drop?"}
    AL -->|"No"| OK["Continue monitoring"]
    AL -->|"Yes"| INV["Investigate cause"]
    INV --> FIX{"Data issue or model issue?"}
    FIX -->|"Data issue"| DP["Fix data pipeline"]
    FIX -->|"Model issue"| RT["Retrain or tune and re-evaluate"]
    DP --> OK
    RT --> OK
        
FIG 6 — A monitoring loop that triggers investigation and retraining
Simple Analogy

A model in production is like a ship at sea. A pre-launch inspection shows the ship is sound, but the weather changes and parts wear out, so the crew keeps checking gauges and charts throughout the voyage. Monitoring is the ongoing watch.

Responsible AI practices

AI systems can be unfair, can leak information, and can produce harmful content. Responsible practice includes testing for bias across groups, using explanation tools to understand why a model made a prediction, applying content safety filters to generative outputs, keeping a human in the loop for high-stakes decisions, documenting model purpose and limits, and giving users a way to report problems. Safety settings on generative models can be configured, and they should be tested rather than assumed.

!
Do Not Skip Human Oversight

For decisions about people, such as credit, hiring, health, or safety, automated predictions should support human judgment, not replace it. Define clearly who reviews, who can override, and how errors are corrected.

i
Evaluation Tip

Build a fixed evaluation set from real, difficult examples and run it every time you change a prompt, model, or retrieval setup. Without a repeatable test, improvements are guesses.

11Security, Privacy, and Governance

AI systems handle valuable data and make consequential decisions. Securing them takes both familiar cloud controls and some AI-specific thinking.

Familiar cloud controls

Because Vertex AI runs inside your Google Cloud project, it uses the same foundations as the rest of the cloud. Identity and access management controls who can create datasets, run training, deploy models, and call endpoints. Each pipeline, training job, and agent should run as its own service account with only the permissions it needs. Data and models are encrypted at rest and in transit, with the option to use customer-managed encryption keys. Private connectivity options let traffic stay off the public internet, and service perimeters can restrict data from leaving defined boundaries. Audit logs record who did what.

Control 1

Least-privilege identities

Separate service accounts for training, pipelines, serving, and agents, each with narrow roles.

Control 2

Encryption and customer-managed keys

Protect data, models, and artifacts, with your own keys where policy requires them.

Control 3

Private networking and perimeters

Keep traffic private and restrict data movement with service perimeters.

Control 4

Data residency

Choose regions deliberately so that data, training, and serving stay where rules require.

Control 5

Audit logging

Record administrative actions and access for compliance and investigations.

Control 6

Content safety controls

Configurable filters and safeguards for what generative models accept and produce.

AI-specific risks

1

Sensitive data in prompts and logs

Users paste personal or confidential data into prompts. Decide what may be sent, what is logged, and how long logs are kept.

2

Prompt injection and jailbreaks

Hostile text can try to override instructions. Treat model inputs from untrusted sources as hostile and limit tool power.

3

Data leakage through retrieval

Search over documents can reveal content to users who should not see it unless permissions are enforced.

4

Training data exposure

Tuned models can reflect their training examples, so avoid training on data you would not want echoed back.

5

Over-trusted outputs

People may treat fluent answers as facts. Show sources, add warnings, and verify important results.

Simple Analogy

Securing an AI system is like running a research library. You control who enters, which rooms they may use, which books may leave, and you keep a visitor log. You also train staff not to follow instructions written on slips of paper slipped inside a book, which is the equivalent of prompt injection.

!
Understand the Data Terms

Review the service terms about how your prompts, outputs, and tuning data are handled, stored, and used. Terms and options differ across products and change over time, so confirm them in the official documentation and involve your legal and compliance teams.

12Cost, Limits, and Trade-offs

AI can be astonishingly cheap or surprisingly expensive, depending on choices. Understanding the cost drivers keeps surprises away.

How costs arise

Costs differ by activity. Calling a managed generative model is typically billed by the amount of text, images, or other content processed, often measured in units of input and output. Training is billed by the machines, accelerators, and time used. Deployed endpoints are billed for the machine hours of their replicas, whether busy or idle. Managed agent runtimes are billed for the compute resources they consume. Search and retrieval services may be billed per query. Storage, data processing, and network transfer add their own charges. Rates change often, so use the official pricing pages and calculators.

Cost 1

Model usage

Charged by the volume of content processed. Larger models and longer prompts cost more.

Cost 2

Training compute

Charged by machine type, accelerators, and hours. Large or repeated experiments can add up fast.

Cost 3

Serving capacity

Endpoint replicas cost money continuously, so right-size and remove what is unused.

Cost 4

Search and retrieval

Indexing and querying documents may be billed by storage and query volume.

Cost 5

Data and network

Storage, data preparation, and moving data between regions add charges.

Cost 6

People and evaluation

Human review, labeling, and engineering time are often the largest cost of all.

Ways to keep costs sensible

1

Match model size to the task

Use smaller, faster models for simple tasks and reserve large models for hard ones.

2

Keep prompts lean

Send only the context needed. Very long prompts and large retrieved passages multiply cost.

3

Cache repeated work

Reuse answers and context for repeated or similar requests where it is safe to do so.

4

Use batch for non-urgent work

Run large jobs in batch mode, where pricing is often lower than interactive calls.

5

Set budgets and alerts

Define spending limits and alerts per project, so a runaway job or loop is caught quickly.

Advantages and trade-offs

Advantages

  • One platform from experimentation to production
  • Large catalog of models from many providers
  • Managed infrastructure for training, serving, and agents
  • Built-in MLOps for repeatability and governance
  • Integration with Google Cloud data, security, and networking
  • Tools for grounding, search, and enterprise agents

Disadvantages / Trade-offs

  • Breadth can be overwhelming, with many overlapping options
  • Costs can grow quickly without budgets and right-sizing
  • Names and packaging change often, so documents age fast
  • Tight integration can raise switching costs
  • Generative outputs still need evaluation and human oversight

Where it sits among alternatives

OptionBest forMain difference
Vertex AIEnd-to-end AI and ML on Google CloudUnified platform with models, agents, and MLOps
In-warehouse MLModels built directly where tabular data livesSimpler for analysts, narrower scope
Pre-trained task APIsCommon tasks such as translation or speechVery simple, less customization
Self-managed infrastructureMaximum control and special hardware needsYou run and secure everything
Other clouds’ AI platformsTeams standardized on another cloudDifferent ecosystems and integrations
!
Check Current Pricing and Limits

Prices, quotas, supported regions, and model availability change frequently in this field. Confirm them on the official pricing and quotas pages before finalizing a plan.

13Design Patterns and Anti-patterns

Good patterns make AI systems dependable. Anti-patterns make them expensive demos that fail in production.

Patterns worth adopting

Climb the ladder: prompt, ground, tune, train

Begin with prompting a ready-made model, add grounding with your data, tune only if needed, and train from scratch only when nothing else fits. Each step is added only when the previous one proves insufficient.

Evaluation set first

Build a fixed set of realistic test cases before developing, and run it on every change. Decisions about models, prompts, and retrieval then rest on evidence.

Quality gates in pipelines

Make pipelines deploy a model only if it beats the current one on agreed metrics, and alert people when it does not.

Gradual rollout with split traffic

Send a small share of traffic to a new model version, compare against the old one, and shift traffic only as confidence grows, keeping rollback one step away.

Narrow agents with human checkpoints

Give each agent a small job, its own identity, limited tools, and approval steps for risky actions, and log everything it does.

Anti-patterns to avoid

ANTI-PATTERN-01 Avoid
Problem

The team jumps straight to training or tuning a custom model without trying a ready-made model with good prompts and grounding.

Why It’s Harmful

Weeks of effort and large compute bills are spent to solve a problem that a prompt and a few documents could have solved, and the custom model then needs permanent upkeep.

Correct Approach

Prototype with ready-made models first, measure against an evaluation set, and escalate only when measured results fall short.

ANTI-PATTERN-02 Avoid
Problem

A demo that impressed stakeholders is shipped directly to production with no evaluation set and no monitoring.

Why It’s Harmful

Real users ask unexpected questions, quality problems appear in public, and nobody can tell whether changes help or hurt.

Correct Approach

Create a realistic evaluation set, run it on every change, and monitor quality, safety, latency, and cost after launch.

ANTI-PATTERN-03 Avoid
Problem

Features are computed one way for training and another way in the live application.

Why It’s Harmful

Training-serving skew silently lowers accuracy, and the cause is hard to find because nothing visibly breaks.

Correct Approach

Use a shared feature definition, ideally through a feature store, so training and serving use identical logic.

ANTI-PATTERN-04 Avoid
Problem

An agent is given broad credentials and many powerful tools, and it reads untrusted content such as emails and web pages.

Why It’s Harmful

Hidden instructions in content can trick the agent into misusing its tools, leaking data, or taking costly actions.

Correct Approach

Give agents narrow identities and minimal tools, treat retrieved content as untrusted data, and require approval for risky actions.

ANTI-PATTERN-05 Avoid
Problem

Endpoints, notebooks, and training clusters are left running after experiments end.

Why It’s Harmful

Idle machines bill continuously and the cost goes unnoticed until the monthly invoice arrives.

Correct Approach

Shut down or delete unused resources, schedule notebook shutdown, set budgets and alerts, and label resources by owner and purpose.

ANTI-PATTERN-06 Avoid
Problem

A model is trained once and left unchanged and unmonitored for years.

Why It’s Harmful

Data and behavior drift, so accuracy decays quietly, and decisions based on the model grow worse without anyone noticing.

Correct Approach

Monitor drift and quality, define retraining triggers, and keep a pipeline ready to refresh and re-evaluate the model.

“A model is not finished when it is deployed. It is finished when it is retired, and until then it needs a watchful eye.”

14Best Practices and Common Mistakes

A checklist of habits that experienced teams build into every AI project, and the traps that catch newcomers.

Best practices

1

Define the problem and success metric first

State the business goal and how you will measure it before choosing any model or tool.

2

Start with the simplest approach

Try a ready-made model with careful prompting and grounding before tuning or training.

3

Invest in data quality

Clean, well-labeled, representative data matters more than clever algorithms.

4

Build a repeatable evaluation

Keep a fixed, realistic test set and run it after every change to prompts, models, or retrieval.

5

Automate with pipelines and gates

Make workflows reproducible and block deployment of models that do not meet the bar.

6

Secure by design

Use per-workload service accounts, private networking, appropriate encryption, and careful handling of sensitive data in prompts and logs.

7

Roll out gradually

Use traffic splitting and quick rollback so every change reaches users in a controlled way.

8

Monitor quality, drift, safety, and cost

Watch live behavior, alert on problems, and retrain or adjust when signals shift.

9

Keep humans in charge of high-stakes decisions

Use AI to support judgment, with clear review and override processes.

Common mistakes

!
Mistake: Trusting fluent answers

Assuming that confident, well-written output is correct. Ground answers in trusted data, show sources, and verify important results.

!
Mistake: Testing on training data

Measuring performance on examples the model has already seen, which gives wildly optimistic results. Always hold out data for testing.

!
Mistake: Ignoring model version changes

Letting an application drift onto a new model version without re-testing. Behavior can change, so pin versions and re-evaluate before upgrading.

!
Mistake: Skipping cost controls

Running large experiments and always-on endpoints with no budgets or alerts, and discovering the bill afterward.

!
Mistake: Putting sensitive data everywhere

Sending personal or confidential information into prompts, logs, and training sets without a policy. Decide what is allowed and enforce it.

!
Mistake: Treating launch as the finish line

Deploying and moving on. Without monitoring and a maintenance plan, quality quietly decays.

A short pre-launch review

QuestionWhat a good answer looks like
How do we know it works?A realistic evaluation set with agreed metrics and thresholds
What data does it see and store?A documented policy for prompts, logs, and training data
Who can call it and what can it touch?Per-workload identities with narrow permissions, and private access where needed
What if a new version is worse?Gradual rollout with split traffic and quick rollback
How will we notice decay?Monitoring for drift, quality, safety, latency, and cost with alerts
Who is accountable for errors?Named owners and a human review path for high-stakes decisions

15Real-World and Industry Scenarios

These illustrative scenarios, drawn from common industry patterns, show how the ideas combine in practice.

A bank building a policy question-answering assistant

A bank wants employees to ask questions about internal policies. It indexes approved policy documents, uses retrieval-augmented generation so answers cite their sources, and enforces document permissions in retrieval. A fixed evaluation set of real employee questions guards against regressions, and logs exclude sensitive customer data. Human reviewers sample answers weekly.

A retailer forecasting demand with custom models

A retailer trains forecasting models on its own sales history, with features such as promotions and holidays kept in a feature store so training and serving agree. A scheduled pipeline retrains weekly, evaluates against the current model, and deploys only if accuracy improves. Batch prediction produces the forecast each night, and monitoring flags drift when new stores open.

A manufacturer inspecting products with images

A factory trains an image model to spot defects using labeled photos from its production line. AutoML provides a quick first model, and custom training later improves accuracy on rare defects. The model is deployed to an endpoint with warm replicas for fast responses, and a human inspector reviews borderline cases.

A software company adding assistants to its product

A software company uses a ready-made generative model with grounding on its documentation to power an in-product help assistant. It starts with prompting, adds retrieval, and never needs tuning. Smaller models handle simple questions, reserving a larger one for hard cases, which keeps cost low.

An operations team deploying a narrow support agent

A support team builds an agent that looks up order status, drafts replies, and proposes refunds. The agent has its own narrow identity, can read orders but cannot issue refunds without human approval, and treats customer messages as untrusted data. Every step is logged, and the agent is evaluated against hundreds of recorded support cases before each release.

What these scenarios share

Each team chose the lightest approach that met the need, built an evaluation set before scaling, protected data and permissions deliberately, rolled out gradually, and watched quality and cost after launch. None treated a clever demo as a finished product.

16Frequently Asked Questions

Short, direct answers to questions that come up again and again.

Q1What is Vertex AI?

It is Google Cloud’s managed platform for generative AI and machine learning, covering model access, prompting, tuning, agent building, training, pipelines, serving, and monitoring. Newer materials describe it being renamed to a platform focused on agents, so confirm current names on the official pages.

Q2Do I need to train my own model?

Often not. Many needs are met by a ready-made model with good prompts and grounding on your data. Train your own when the task is specific to your data and ready-made models cannot do it well.

Q3What is Model Garden?

A catalog where you can discover, test, customize, and deploy models, including Google’s models, partner models, and open models.

Q4How do I stop a model from making things up?

You cannot eliminate it completely, but you can reduce it by grounding answers in trusted documents, instructing the model to use only that information, showing sources, and evaluating against realistic questions.

Q5What is the difference between tuning and training?

Tuning adapts an existing pre-trained model to your data or style. Training builds a model from scratch for your task. Tuning is usually cheaper and faster, while training offers full control.

Q6What is an agent?

A system built on a model that plans steps, calls tools and data sources, and takes actions to reach a goal. Agents are powerful and need narrow permissions, logging, and human checkpoints for risky actions.

Q7Why do I need pipelines and a feature store?

Pipelines make workflows repeatable and auditable, and a feature store keeps features consistent between training and serving, preventing silent accuracy loss from training-serving skew.

Q8When should I use batch prediction instead of an endpoint?

Use batch when results are not needed instantly, such as scoring a large dataset overnight. It avoids paying for always-on capacity.

Q9How do I know my model is getting worse?

Monitor input and prediction drift, compare predictions with real outcomes when available, and track latency, errors, and safety signals. Alerts should trigger investigation and, if needed, retraining.

Q10How should I secure an AI application?

Use least-privilege service accounts, private networking, encryption, careful handling of sensitive data in prompts and logs, enforced permissions in retrieval, and defenses against prompt injection. Review the data handling terms for each service.

Q11Why is my bill higher than expected?

Common causes are large models used for simple tasks, very long prompts, idle endpoints, repeated large experiments, and heavy retrieval. Set budgets, alerts, and labels, and review usage regularly.

Q12Can I use models from other providers?

Yes. Model Garden offers partner and open models alongside Google’s models, with availability that changes over time, so check the current catalog.

Q13Does the naming change break existing projects?

Sources describing the April 2026 change state that existing APIs, endpoints, and Model Garden did not change. Even so, confirm current names, documentation paths, and any migration notes in the official documentation.

17Summary and Key Takeaways

Vertex AI is Google Cloud’s unified platform for generative AI and machine learning, covering the whole path from idea to production. It offers a large catalog of models through Model Garden, tools for prompting and tuning, managed search and grounding for answers based on your own data, and a toolkit and runtime for building and operating agents. When no ready-made model fits, AutoML and custom training build models from your own data on managed compute, while pipelines, a feature store, a model registry, and evaluation make the process repeatable and governed. Endpoints serve models online with scalable replicas and traffic splitting, batch prediction handles large offline jobs, and monitoring watches for drift, skew, quality loss, and safety problems. Security rests on least-privilege identities, private networking, encryption, careful data handling, enforced retrieval permissions, and defenses against prompt injection. Costs depend on model usage, compute, endpoint capacity, retrieval, and people, so right-sizing and budgets matter. Reports from April 2026 describe the platform being renamed around agents while keeping existing APIs and endpoints, so confirm current naming in the official documentation. Teams that succeed climb from prompting to grounding to tuning to training only as needed, build evaluation sets first, roll out gradually, keep humans in charge of high-stakes decisions, and monitor continuously.

Key Takeaways

  • One platform, many paths — use ready-made models, prompting, grounding, tuning, agents, or custom training, and pick the lightest approach that meets the need.
  • Ground answers in trusted data — retrieval-augmented generation with enforced permissions reduces made-up answers and lets users check sources.
  • Evaluate before you scale — build a realistic evaluation set early and rerun it on every change to prompts, models, or retrieval.
  • Make ML repeatable — pipelines with quality gates, a shared feature store, and a model registry keep training and serving consistent and traceable.
  • Serve and roll out carefully — choose online endpoints or batch prediction by need, split traffic for gradual rollouts, and right-size replicas to control cost.
  • Secure agents and data — give each workload and agent a narrow identity, treat retrieved content as untrusted, require approval for risky actions, and protect sensitive data in prompts and logs.
  • Watch after launch — monitor drift, quality, safety, latency, and cost, keep humans in charge of high-stakes decisions, and confirm product names and prices in the official documentation as they change.