Google Cloud Armor helps users to protect applications and websites against denial of service and web attacks. And Google Cloud Armor Enterprise is the higher-tiered application protection service that helps protect web applications and services from distributed denial-of-service (DDoS) attacks and other threats from the internet. Cloud Armor Enterprise helps protect applications deployed on Google Cloud, on-premises, or on other infrastructure providers.

Google Cloud Armor Standard includes a pay-as-you go pricing model with always-on protection from volumetric and protocol-based DDoS attacks, with automated inline mitigations in real time and with no latency impact across the following infrastructure types:

Global external Application Load Balancer (HTTP/HTTPS)
Classic Application Load Balancer (HTTP/HTTPS)
Regional external Application Load Balancer (HTTP/HTTPS)
Global external proxy Network Load Balancer (TCP/SSL)
Cloud CDN
Media CDN

The standard edition of the solution also features an integration with Cloud CDN and Media CDN, with access to Google Cloud Armor web application firewall (WAF) rule capabilities, including preconfigured WAF rules for OWASP Top 10 protection.

Cloud Armor Enterprise includes all of the features of the standard edition, and adds:

Choice of pricing models: Cloud Armor Enterprise Annual or Paygo
Bundled Google Cloud Armor WAF usage, including rules, policy, and requests
Third-party named IP address lists
Google Threat Intelligence for Google Cloud Armor
Adaptive Protection for Layer 7 endpoints
Advanced network DDoS protection for pass-through endpoints—external passthrough Network Load Balancers, protocol forwarding, and public IP addresses for virtual machine (VM) instances
(Cloud Armor Enterprise Annual only): Access to DDoS bill protection and DDoS response team services (additional conditions apply, see Eligibility for DDoS response team)
Access to DDoS attack visibility

All Google Cloud projects that include an external Application Load Balancer or an external proxy Network Load Balancer are automatically enrolled in Google Cloud Armor Standard. After subscribing to Cloud Armor Enterprise at the billing account level, users can choose to enroll individual projects attached to the billing account in Cloud Armor Enterprise.