Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 220

Question

You manage one of your organization's Google Cloud projects (Project A). A VPC Service Control (SC) perimeter is blocking API access requests to this project, including Pub/Sub. A resource running under a service account in another project (Project B) needs to collect messages from a Pub/Sub topic in your project. Project B is not included in a VPC SC perimeter. You need to provide access from Project B to the Pub/Sub topic in Project A using the principle of least privilege. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Configure an ingress policy for the perimeter in Project A, and allow access for the service account in Project B to collect messages. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 220