nerdexam
Google

PROFESSIONAL-CLOUD-DATABASE-ENGINEER · Question #195

Your company is migrating one of its monolithic applications to a microservices architecture on Google Cloud. The new architecture involves a user authentication service that runs on Google…

The correct answer is D. For GKE and Compute Engine services, create and grant dedicated IAM service accounts with. The recommended approach for Cloud SQL connectivity is to use IAM-based authentication with the Cloud SQL Auth Proxy. For applications (GKE, Compute Engine), you assign dedicated IAM service accounts with least-privilege roles and use Workload Identity for secure, scalable…

Managing database security and access

Question

Your company is migrating one of its monolithic applications to a microservices architecture on Google Cloud. The new architecture involves a user authentication service that runs on Google Kubernetes Engine (GKE) and needs to access Cloud SQL for PostgreSQL instances. Your developers need to access the databases for local development and debugging purposes. You need to design a centralized, secure, and scalable database connectivity and access management strategy for both application service interfaces and developers. What should you do-

Options

  • AConfigure the GKE and Compute Engine applications to use the Cloud SQL Auth Proxy for all
  • BEnable public IP addresses for all database instances and configure firewall rules to restrict access
  • CFor all service interfaces and developers, create unique database-native user and password
  • DFor GKE and Compute Engine services, create and grant dedicated IAM service accounts with

How the community answered

(32 responses)
  • A
    13% (4)
  • B
    6% (2)
  • C
    19% (6)
  • D
    63% (20)

Explanation

The recommended approach for Cloud SQL connectivity is to use IAM-based authentication with the Cloud SQL Auth Proxy. For applications (GKE, Compute Engine), you assign dedicated IAM service accounts with least-privilege roles and use Workload Identity for secure, scalable credential management. For developers, IAM authentication through the Cloud SQL Auth Proxy provides secure access without exposing database-native credentials. This ensures centralized, secure, and scalable database access management for both services and developers.

Topics

#Cloud SQL#IAM#Cloud SQL Auth Proxy#Secure Database Connectivity

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-DATABASE-ENGINEER Practice