Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 346

Question

A batch job running on Compute Engine needs temporary write access to a Cloud Storage bucket. You want the batch job to use the minimum permissions necessary to complete the task. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a service account with the storage.objectCreator role. Use service account impersonation in the batch job's code. Google Cloud Batch schedules and runs batch jobs at scale without managing infrastructure. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 346