Google Cloud Professional Cloud Developer PCD — Topic 1 Question 256

Question

Your team is creating a serverless web application on Cloud Run. The application needs to access images stored in a private Cloud Storage bucket. You want to give the application Identity and Access Management (IAM) permission to access the images in the bucket, while also securing the services using Google-recommended best practices. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Enforce public access prevention for the desired bucket. Create and update the Cloud Run service to use a user-managed service account. Grant the Storage Object Viewer IAM role on the bucket to the service account. Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud Developer PCD — Question 256