Google Cloud Professional Cloud DevOps Engineer PCDOE — Topic 1 Question 103

Question

A third-party application needs to have a service account key to work properly. When you try to export the key from your cloud project, you receive an error: “The organization policy constraint iam.disableServiceAccounKeyCreation is enforced.” You need to make the third-party application work while following Google-recommended security practices. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Add a rule to set the iam.disableServiceAccountKeyCreation policy to off in your project, and create a key. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud DevOps Engineer PCDOE — Question 103