Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 247

Question

Your company is moving its continuous integration and delivery (CI/CD) pipeline to Compute Engine instances. The pipeline will manage the entire cloud infrastructure through code. How can you ensure that the pipeline has appropriate permissions while your system is following security best practices?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: • Create multiple service accounts, one for each pipeline with the appropriate minimal Identity and Access Management (IAM) permissions.• Use a secret manager service to store the key files of the service accounts.• A... A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources. Secret Manager stores and controls access to secrets such as API keys and credentials.

Google Cloud Associate Cloud Engineer ACE — Question 247