Your company recently published a security policy to minimize the usage of service account keys. On-premises Windows-based applications are interacting with Google Cloud APIs. You need to implement…

Question

Options

• ASet up a workload identity pool with your corporate Active Directory Federation Service (ADFS).
• BSet up a workload identity pool with your corporate Active Directory Federation Service (ADFS).
• CSet up a workload identity pool with an OpenID Connect (OIDC) service on the same machine.
• DSet up a workload identity pool with an OpenID Connect (OIDC) service on the same machine.

• A
  83% (20)
• B
  4% (1)
• C
  8% (2)
• D
  4% (1)

Explanation

Workload Identity Pool: Using your corporate ADFS for identity federation is a common and secure way to manage identities and access to Google Cloud resources. Configure a Rule: Configuring a rule in the workload identity pool allows you to specify which principals (users or entities) in your corporate ADFS can impersonate the Google Cloud service account. This approach adheres to the principle of least privilege by allowing only specific users or entities to impersonate the service account.

No community discussion yet for this question.