Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 242

Question

You recently discovered that your developers are using many service account keys during their development process. While you work on a long term improvement, you need to quickly implement a process to enforce short-lived service account credentials in your company. You have the following requirements: • All service accounts that require a key should be created in a centralized project called pj-sa. • Service account keys should only be valid for one day. You need a Google-recommended solution that minimizes cost. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Enforce an org policy constraint allowing the lifetime of service account keys to be 24 hours. Enforce an org policy constraint denying service account key creation with an exception on pj-sa. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Associate Cloud Engineer ACE — Question 242