Google Cloud Professional Cloud Developer PCD — Topic 1 Question 191

Question

You have an application deployed in Google Kubernetes Engine (GKE). You need to update the application to make authorized requests to Google Cloud managed services. You want this to be a one-time setup, and you need to follow security best practices of auto-rotating your security keys and storing them in an encrypted store. You already created a service account with appropriate access to the Google Cloud service. What should you do next?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Assign the Google Cloud service account to your GKE Pod using Workload Identity. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Developer PCD — Question 191