You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also

Question

Options

• AAssign the auditor the IAM role roles/logging.privateLogViewer.
• BAssign the auditor the IAM role roles/logging.privateLogViewer.
• CAssign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission.
• DAssign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission.

• A
  4% (1)
• B
  81% (22)
• C
  11% (3)
• D
  4% (1)

Explanation

Google Cloud provides Cloud Audit Logs, which is an integral part of Cloud Logging. It consists of two log streams for each project: Admin Activity and Data Access. Admin Activity logs contain log entries for API calls or other administrative actions that modify the configuration or metadata of resources. Admin Activity logs are always enabled. There is no charge for your Admin Activity audit logs. Data Access logs record API calls that create, modify, or read user-provided data. Data Access audit logs are disabled by default because they can be large. logging.viewer: The logging.viewer role gives the security admin team the ability to view the Admin Activity logs. logging.privateLogViewer : The logging.privateLogViewer role gives the ability to view the Data

No community discussion yet for this question.