Google Professional Cloud DevOps Engineer Question 1
Select 3Google Cloud PlatformYou are designing the resource hierarchy for a new organization in Google Cloud. The organization requires multiple teams to manage their projects independently, but with centralized billing and consistent IAM policies for auditing purposes. What considerations should you prioritize when defining the resource hierarchy?
- A
Create an organization node to enable centralized management of resources and policies.
- B
Assign all projects directly under the organization node to simplify resource management.
- C
Use folders to group projects for each team, enabling delegation of IAM roles and policies at the folder level.
- D
Avoid using folders to keep the hierarchy flat and reduce complexity.
- E
Ensure that billing accounts are linked at the organization level to maintain centralized billing.
Show answer and explanation
Correct answers: A, C, E
Explanation
When designing a resource hierarchy in Google Cloud, creating an organization node is a foundational step that allows centralized management of resources, IAM policies, and billing. To satisfy the requirement for independent team management, folders should be used to group projects for each team, enabling delegation of IAM roles and policies at the folder level. Centralized billing is achieved by linking billing accounts at the organization level, ensuring financial control and visibility across the organization. Avoiding folders or assigning all projects directly under the organization node would not meet the independence and delegation requirements.
- A. Correct.
Creating an organization node is critical for centralized management of resources, IAM policies, and auditing across the organization. Without it, you lose the ability to apply centralized policies.
- B. Incorrect.
Assigning all projects directly under the organization node can simplify management but does not support the requirement for independent team management. Using folders is better for delegation.
- C. Correct.
Using folders for each team allows IAM roles and policies to be delegated at the folder level, meeting the requirement for independent team management while maintaining consistency.
- D. Incorrect.
Avoiding folders can reduce complexity but does not align with the need for independent team management and delegation of policies. Folders provide an effective way to group projects logically.
- E. Correct.
Linking billing accounts at the organization level ensures centralized billing, which is part of the requirements. It also helps maintain financial control and visibility across the organization.