Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 26

Question

You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Associate Cloud Engineer ACE — Question 26