You have a Cloud Storage bucket in Google Cloud project XYZ. The bucket contains sensitive data. You need to design a solution to ensure that only instances belonging to VPCs under project XYZ can…

Question

Options

• AConfigure Private Google Access to privately access the Cloud Storage service using private IP
• BConfigure a VPC Service Controls perimeter around project XYZ, and include
• CConfigure Cloud Storage with projectPrivate Access Control List (ACL) that gives permission to
• DConfigure Private Service Connect to privately access Cloud Storage from all VPCs under project

• A
  4% (1)
• B
  79% (22)
• C
  11% (3)
• D
  7% (2)

Explanation

By configuring a VPC Service Controls perimeter around project XYZ, you can create a secure boundary around the project and restrict access to Cloud Storage to only those instances that are within the VPCs under project XYZ. You can include storage.googleapis.com as a restricted service in the service perimeter, which will ensure that only authorized VPCs can access the Cloud Storage bucket containing sensitive data. https://cloud.google.com/vpc/docs/private-access-options https://cloud.google.com/vpc/docs/configure-private-service-connect-apis

No community discussion yet for this question.