CCAAK · Question #33
You need to create ACLs for an application that will produce to any topic that uses a prefix 'updated-working-hours-for-store-id-'. You have the following security requirements: - Security rules…
The correct answer is B. --add --allow-principal User:store_hrs --producer --topic updated-working-hours-for-store- --. Using the resource-pattern-type set to prefixed allows one ACL to cover all topics whose names begin with the specified prefix. This satisfies the requirement to explicitly name the user principal while avoiding the need to create hundreds of individual ACLs.
Question
You need to create ACLs for an application that will produce to any topic that uses a prefix 'updated-working-hours-for-store-id-'. You have the following security requirements:
- Security rules dictate each user principal must be explicitly named
when creating an ACL
- There are hundreds of topics and you need to create an ACL for each
topic You need to create ACLs in the most efficient manner while satisfying the security constraints. Which method should you use?
Options
- A--add --allow-principal User:store_hrs --producer --topic updated-working-hours-for-store- --
- B--add --allow-principal User:store_hrs --producer --topic updated-working-hours-for-store- --
- C--add --allow-principal User:store_hrs --producer --topic updated-working-hours-for-store- --
- D--add --allow-principal User:store_hrs --producer --topic updated-working-hours-for-store- --
How the community answered
(23 responses)- A4% (1)
- B83% (19)
- C4% (1)
- D9% (2)
Explanation
Using the resource-pattern-type set to prefixed allows one ACL to cover all topics whose names begin with the specified prefix. This satisfies the requirement to explicitly name the user principal while avoiding the need to create hundreds of individual ACLs.
Topics
Community Discussion
No community discussion yet for this question.