You are running a web application that connects to an AlloyDB cluster by using a private IP address in your default VPC. You need to run a database schema migration in your CI/CD pipeline by using…

Question

Options

• ASet up a Cloud Build private pool to access the database through a static external IP address.
• BCreate a service account that has permission to access the database. Configure Cloud Build to
• CAdd the database username and password to Secret Manager. When running the schema
• DAdd the database username and encrypted password to the application configuration file. Use

• A
  4% (1)
• B
  84% (21)
• C
  4% (1)
• D
  8% (2)

Explanation

This follows Google-recommended security practices by using a service account with the appropriate permissions instead of relying on static IP-based access control. Running the schema migration in a Cloud Build private pool ensures that the build process runs in a secure, private network environment with access to the AlloyDB cluster over a private IP. This minimizes exposure to public internet access while maintaining security and compliance.

No community discussion yet for this question.