Google Professional Cloud Developer Question 426
Select 3Google Cloud PlatformYou are developing a serverless application on Google Cloud that needs to integrate with the Google Cloud Translation API to translate text between languages. To ensure secure and efficient integration, which of the following best practices should you follow?
- A
Use a service account and grant it the 'Cloud Translation API User' role.
- B
Hard-code the API key into your application code for quick access.
- C
Leverage the client libraries provided by Google Cloud for the Translation API.
- D
Use Application Default Credentials (ADC) in your application for authentication.
- E
Make direct HTTP requests to the Translation API without authentication to avoid overhead.
Show answer and explanation
Correct answers: A, C, D
Explanation
When integrating with Google Cloud APIs, it is essential to follow security and efficiency best practices. Using a service account with the proper role ensures secure access while adhering to the principle of least privilege. Leveraging client libraries and Application Default Credentials simplifies integration and ensures proper authentication. Hard-coding API keys or making unauthenticated requests should be avoided as they pose significant security and operational risks.
- A. Correct.
Correct: Using a service account with the appropriate role ensures secure and least-privileged access to the Translation API.
- B. Incorrect.
Incorrect: Hard-coding API keys is a security risk as it exposes sensitive credentials in your application code.
- C. Correct.
Correct: Google Cloud client libraries provide built-in support for authentication and error handling, making it easier to integrate with APIs.
- D. Correct.
Correct: Application Default Credentials (ADC) simplify authentication by automatically detecting credentials, especially in Google Cloud environments.
- E. Incorrect.
Incorrect: Direct HTTP requests without authentication are not allowed and would result in unauthorized access errors.