Your organization has applications that run in multiple clouds. The applications require access to a Google Cloud resource running in your project. You must use short-lived access credentials to…

Question

Options

• ACreate a managed workload identity. Bind an attested identity to the Compute Engine workload.
• BCreate a service account key. Download the key to each application that requires access to the
• CCreate a workload identity pool with a workload identity provider for each external cloud. Set up a
• DCreate a VPC firewall rule for ingress traffic with an allowlist of the IP ranges of the external cloud

• A
  2% (1)
• B
  11% (5)
• C
  83% (38)
• D
  4% (2)

Explanation

Short-lived access credentials: Workload Identity Federation (WIF) allows you to issue short-lived access tokens to external applications, reducing the risk of credential theft and misuse. Multiple clouds: You can create a workload identity pool for each external cloud, allowing applications from different environments to access your Google Cloud resources securely. Centralized management: WIF provides a centralized way to manage access to your Google Cloud resources, simplifying administration and improving security. Impersonation: By setting up a service account and adding an IAM binding for impersonation, you can allow external applications to act as the service account, granting them the necessary permissions to access your Google Cloud resources.

No community discussion yet for this question.