Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 251

Question

Your organization has a centralized identity provider that is used to manage human and machine access. You want to leverage this existing identity management system to enable on-premises applications to access Google Cloud without hard coded credentials. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Enable Workload Identity Federation. Create a workload identity pool and specify the on-premises identity provider as a workload identity pool provider. Create an attribute mapping to map the on-premises identity prov... Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. A service account provides an identity for workloads to access Google Cloud APIs securely. This option needs the least custom development effort.

Google Cloud Professional Cloud Security Engineer PCSE — Question 251