Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the…

Question

Options

• AEnable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud
• BTag all the instances with the same network tag.
• CSet up Cloud VPN between your Google Cloud VPC and the internal network of the operations
• DAsk the operations partner to generate SSH key pairs, and add the public keys to the VM

• A
  71% (37)
• B
  4% (2)
• C
  17% (9)
• D
  8% (4)

Explanation

To control which users and groups are allowed to use IAP TCP forwarding and which VM instances they're allowed to connect to, configure Identity and Access Management (IAM) Open the IAP admin page and select the SSH and TCP Resources tab. Open the IAP admin page Select the VM instances that you want to configure. Click Show info panel if the info panel is not visible. Click Add member and configure the following: New members: Specify the user or group you want to grant access. Select a role Select Cloud IAP > IAP-Secured Tunnel User. https://cloud.google.com/iap/docs/using-tcp-forwarding#grant-permission

No community discussion yet for this question.