Google Associate Cloud Engineer Question 341
Select 2Google Cloud PlatformYou are a Google Cloud Associate Cloud Engineer tasked with ensuring that your development team has the necessary permissions to deploy applications to Compute Engine instances, but they should not have permission to manage billing accounts. How can you achieve this using IAM roles?
- A
Assign the roles/compute.admin role to the development team.
- B
Assign the roles/billing.user role to the development team.
- C
Create a custom role that includes the necessary permissions for deploying applications and exclude billing permissions.
- D
Assign the roles/iam.serviceAccountUser role to the development team.
- E
Assign the roles/viewer role to the development team.
Show answer and explanation
Correct answers: A, C
Explanation
To ensure the development team can deploy applications to Compute Engine without accessing billing accounts, you should assign the 'roles/compute.admin' role, which provides the necessary permissions for managing Compute Engine instances. Additionally, creating a custom role that includes only the necessary permissions for application deployment, while excluding billing permissions, is a recommended approach to adhere to the principle of least privilege.
- A. Correct.
This role allows the development team to fully manage Compute Engine instances, which includes deploying applications.
- B. Incorrect.
This role allows users to view billing information and link projects to billing accounts, which is not necessary for the development team in this scenario.
- C. Correct.
Creating a custom role allows you to tailor permissions specifically to the needs of the development team, ensuring they can deploy applications without accessing billing resources.
- D. Incorrect.
This role allows users to act as service accounts, which is not directly related to deploying applications to Compute Engine instances.
- E. Incorrect.
This role provides read-only access to all resources in a project, which is insufficient for deploying applications.