Is it Google or the client of Google Cloud can control the firewall and block IP's ?
Because in my country we can't access Khan Academy website as example, we got "error 403 forbidden".
So, who control Google Cloud platform filtering ?
See the screen shot :
Suggest doing routing checks eg from a linux based machine terminal (or mac with these tools installed using brew):
mtr khanacademy.org
which at the last hop is blocked by their router for ICMP - giving '?' (ask to unblock temporarily) but goes to 205.251.244.195 as the network point prior to this.
Also do a whois:
whois khanacademy.org
giving a postal code 94042 which is Mountain View CA - I think the same as Google.
Unexpected, though they do hosting is that
whois 205.251.244.195
shows to be Amazon