PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #377
Your company is developing a new application for your organization. The application consists of two Cloud Run services, service A and service B. Service A provides a web-based user frontend. Service…
The correct answer is A. Create two separate service accounts. Grant one service account the permissions to execute. The most secure and least-privilege approach is to assign separate service accounts to each Cloud Run service - one for service A (frontend) and one for service B (backend). You then require authentication for service B and allow only service A’s service account to invoke it…
Question
Options
- ACreate two separate service accounts. Grant one service account the permissions to execute
- BCreate three separate service accounts. Grant one service account the permissions to execute
- CCreate a new service account with the permissions to run service A and service B. Require
- DUse the Compute Engine default service account to run service A and service B. Require
How the community answered
(26 responses)- A73% (19)
- B15% (4)
- C4% (1)
- D8% (2)
Explanation
The most secure and least-privilege approach is to assign separate service accounts to each Cloud Run service - one for service A (frontend) and one for service B (backend). You then require authentication for service B and allow only service A’s service account to invoke it. This isolates permissions, limits exposure, and enforces principle of least privilege between the two
Topics
Community Discussion
No community discussion yet for this question.