Your company allows teams to self-manage Google Cloud projects, including project-level Identity and Access Management (IAM). You are concerned that the team responsible for the Shared VPC project mig

Question

Options

• AInstruct teams to only perform IAM permission management as code with Terraform.
• BEnable VPC Service Controls for the container.googleapis.com API service.
• CRevoke the resourcemanager.projects.updateLiens permission from all users associated
• DEnable the compute.restrictXpnProjectLienRemoval organization policy constraint.

• B
  6% (1)
• C
  11% (2)
• D
  83% (15)

Explanation

The compute.restrictXpnProjectLienRemoval organization policy constraint specifically restricts the removal of liens on projects associated with Shared VPC. By enabling this constraint, you ensure that only users with the appropriate permissions (in this case, resourcemanager.projects.updateLiens) can remove the lien and thus delete the This approach effectively protects the Shared VPC project from accidental deletion while adhering to the permissions model you've described, ensuring that only designated personnel can manage this critical aspect of your Google Cloud environment.

No community discussion yet for this question.