Your team is responsible for developing multiple microservices. These microservices are deployed in Cloud Run and connected to a Cloud SQL instance. You typically conduct tests in a local…

Question

Options

• AExport the data from the database to a Cloud Storage bucket. Create a database on your
• BCreate a Cloud VPN tunnel from your computer to your Google Cloud project, and connect to the
• CAdd your IP as an authorized network on the Cloud SQL instance.
• DCreate a VM in the same VPC as the Cloud SQL instance. Connect to the VM by using Identity-

• A
  6% (2)
• B
  3% (1)
• C
  12% (4)
• D
  79% (27)

Explanation

Google's recommended approach for accessing a private Cloud SQL instance (no external IP) from a local development environment is to use a VM in the same VPC as Cloud SQL, then tunnel through that VM using Identity-Aware Proxy (IAP) TCP forwarding. IAP provides authenticated, encrypted access without exposing any public IPs. The Cloud SQL Auth Proxy running on or tunneled through the VM handles the final connection. Option A (exporting data) loses real-time data. Option B (Cloud VPN) requires complex network configuration and is not recommended for individual developer access. Option C (adding an authorized network) would require re-enabling an external IP on Cloud SQL, which was intentionally removed.

No community discussion yet for this question.