Google Cloud Professional Cloud Developer PCD — Topic 1 Question 148

Question

You are developing a microservice-based application that will run on Google Kubernetes Engine (GKE). Some of the services need to access different Google Cloud APIs. How should you set up authentication of these services in the cluster following Google-recommended best practices? (Choose two.)

Accepted Answer

Correct answer: B, E. The correct answer is B, E. Option B: Enable Workload Identity in the cluster via the gcloud command-line tool. Option E: Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity. Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud Developer PCD — Question 148