You developed a Python script that retrieves information from files that are uploaded to Cloud Storage and writes the information to Bigtable. You have completed testing on your local environment and

Question

Options

• A
  1. Deploy your code to Cloud Run functions. Create a Cloud Storage trigger.
• B
  1. Deploy your code to Cloud Run functions. Create a Cloud Storage trigger.
• C
  1. Deploy your image to Cloud Run. Create a trigger in Cloud Scheduler that triggers the service
• D
  1. Deploy your image to Cloud Run. Create a trigger in Cloud Scheduler that triggers the service

• A
  3% (1)
• B
  5% (2)
• C
  81% (30)
• D
  11% (4)

Explanation

Google-recommended practice for authenticating workloads on Google Cloud is to attach a service account directly to the compute resource (Cloud Run service) rather than downloading and distributing service account key files. Option C deploys to Cloud Run and attaches the python-script service account to the Cloud Run service, which allows the runtime to use Application Default Credentials (ADC) automatically. Cloud Scheduler provides the event-driven trigger to invoke the service when new files arrive. Options A and B involve Cloud Run Functions and differ in whether a key file is downloaded - downloading and embedding a key file violates the principle of least privilege and key management best practices.

No community discussion yet for this question.