Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 254

Question

Your organization has applications that run in multiple clouds. The applications require access to a Google Cloud resource running in your project. You must use short-lived access credentials to maintain security across the clouds. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a workload identity pool with a workload identity provider for each external cloud. Set up a service account and add an IAM binding for impersonation. Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud Security Engineer PCSE — Question 254