Google Cloud Professional Cloud Developer PCD — Topic 1 Question 104

Question

You are developing a microservice-based application that will be deployed on a Google Kubernetes Engine cluster. The application needs to read and write to a Spanner database. You want to follow security best practices while minimizing code changes. How should you configure your application to retrieve Spanner credentials?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Configure the appropriate service accounts, and use Workload Identity to run the pods. Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Developer PCD — Question 104