Google Cloud Professional Cloud Developer PCD — Topic 1 Question 96

Question

You have written a Cloud Function that accesses other Google Cloud resources. You want to secure the environment using the principle of least privilege. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create a new service account that has a custom IAM role to access the resources. The deployer is given permission to act as the new service account. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud Developer PCD — Question 96