Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 257

Question

You are running code in Google Kubernetes Engine (GKE) containers in Google Cloud that require access to objects stored in a Cloud Storage bucket. You need to securely grant the Pods access to the bucket while minimizing management overhead. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create a service account. Grant bucket access to the Pods by using Workload Identity Federation for GKE. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 257