You run a web application on top of Cloud Run that is exposed to the internet with an Application Load Balancer. You want to ensure that only privileged users from your organization can access the…

Question

Options

• AChange Cloud Run configuration to require authentication. Assign the role of Cloud Run Invoker
• BCreate a group of privileged users in Cloud Identity. Assign the role of Cloud Run User to the
• CChange the Ingress Control configuration of Cloud Run to internal and create firewall rules to
• DActivate Identity-Aware Proxy (IAP) on the Application Load Balancer backend. Assign the role of

• A
  8% (4)
• B
  4% (2)
• C
  17% (8)
• D
  71% (34)

Explanation

IAP for Authentication and Authorization: IAP provides a centralized way to control access to your Cloud Run service, ensuring that only authenticated users can reach it. It integrates seamlessly with Cloud Identity for user management and supports single sign-on (SSO) for a smooth user Role-Based Access Control: By assigning the IAP-secured Web App User role to the group of privileged users, you can precisely control who has access to the application.

No community discussion yet for this question.