Exam: Cloud Digital Leader 0 Likes
Your organization needs to allow a production job to have access to a (Digital Leader)
Your organization needs to allow a production job to have access to a BigQuery dataset.
The production job is running on a Compute Engine instance that is part of an instance group.
What should be included in the IAM Policy on the BigQuery dataset?
A) The Compute Engine instance group.
B) The project that owns the Compute Engine instance.
C) The Compute Engine service account.
D) The Compute Engine instance.
Solution
Correct answer: C) The Compute Engine service account.
The Compute Engine instances within the instance group typically run using service accounts. When granting access to resources like BigQuery datasets, it's best practice to grant permissions to the service account that the Compute Engine instances are using. This ensures that any resources running on those instances, including the production job, inherit the necessary permissions to access the BigQuery dataset. Therefore, you should include the Compute Engine service account in the IAM policy on the BigQuery dataset.
Category: Google Cloud security and operations