Google Associate Cloud Engineer Question 129
Select 3Google Cloud PlatformYou are tasked with deploying a new containerized application using Cloud Run. The application requires access to a Cloud SQL database. Which steps must you take to ensure the application can securely connect to the database?
- A
A. Configure a VPC connector to enable private IP access to the Cloud SQL instance.
- B
B. Enable Cloud SQL Admin API in your Google Cloud project.
- C
C. Set up a service account with appropriate IAM roles and bind it to your Cloud Run service.
- D
D. Use the Cloud SQL Auth proxy to handle authentication and connectivity.
- E
E. Add the Cloud SQL instance connection name to your Cloud Run service configuration.
Show answer and explanation
Correct answers: B, C, E
Explanation
To securely connect a Cloud Run application to a Cloud SQL database, you need to enable the necessary APIs, configure IAM permissions with a service account, and specify the Cloud SQL instance connection name in the service configuration. These steps ensure that the application can authenticate and establish a connection with the database. Using the Cloud SQL Auth proxy is not required for Cloud Run, as it is handled by the platform when the service is configured correctly.
- A. Incorrect.
Option A: Configuring a VPC connector is not necessary for Cloud Run to access Cloud SQL unless you want private IP access. Cloud Run can connect to Cloud SQL using the public IP if the proper configurations are set.
- B. Correct.
Option B: Enabling the Cloud SQL Admin API is required for managing and accessing Cloud SQL instances.
- C. Correct.
Option C: Setting up a service account with appropriate IAM roles (such as Cloud SQL Client) is essential for granting the necessary permissions for your Cloud Run service to access the Cloud SQL database.
- D. Incorrect.
Option D: Using the Cloud SQL Auth proxy is not applicable when deploying on Cloud Run; Cloud Run handles authentication automatically if configured correctly.
- E. Correct.
Option E: Adding the Cloud SQL instance connection name to your Cloud Run service configuration is necessary to establish a connection between Cloud Run and the Cloud SQL instance.