AI agents on Google Cloud data: free kit, real limits stay in IAM
In brief
According to InfoQ, Google has made Data Agent Kit generally available after a summer preview. The kit is free and open source. It lets coding tools including Cursor, Claude Code and VS Code reach more than fifteen Google Data Cloud services, and the general release adds BigQuery Graph, Bigtable and Managed Service for Apache Spark. Built-in guides advise the agent; according to Google, write limits belong in IAM.
Source : InfoQ - « Google’s Data Agent Kit Hits GA, Splitting Agent Guardrails Between Skills and IAM »
What it changes for an SME
This mainly concerns SMEs that already run data work on Google Cloud and let staff use AI coding assistants. The kit costs nothing beyond the Google Cloud services the agent consumes. Built-in guidance can tell the agent to wait for consent before destructive queries, but according to Google that is advice only; a read-only service account or an IAM deny policy is what actually blocks writes. If you do not use Google Cloud data services, this release does not change your time, cost or compliance.
What you can do
- Check whether any coding assistant in your team is already connected to Google Cloud data projects.
- If it is, confirm those agents run under a read-only account unless a named person has approved write access.
- Review IAM deny policies and who can still drop tables or delete storage buckets.
Let's talk about the time you could save.
In 20 minutes, we find where AI could save you time or money. Free, no commitment.