You have an application running inside a Compute Engine instance. You want to provide the application with secure access to a BigQuery dataset. You must ensure that credentials are only valid for a sh

Question

Options

• AAttach a custom service account to the instance, and grant the service account the BigQuery
• BAttach a new service account to the instance every hour, and grant the service account the
• CAttach a custom service account to the instance, and grant the service account the BigQuery
• DAttach a new service account to the instance every hour, and grant the service account the

• A
  11% (4)
• B
  3% (1)
• C
  83% (29)
• D
  3% (1)

Explanation

Attaching a new service account to the instance every hour and granting the service account the BigQuery Data Viewer IAM role on the dataset ensures that the credentials are valid only for a short period of time and restrict access to the specific BigQuery dataset. This approach follows the principle of least privilege, minimizing the scope of access and ensuring secure and time- limited credentials.

No community discussion yet for this question.