Associate Cloud Engineer

By Google · Question Mode

QuestionQ2

Configuring access and security

All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?

Explanation

Organization Policy controls WHAT resources can be created (resource restrictions), while IAM controls WHO can take actions (identity-based access). Creating a folder to organize projects and applying an organization policy constraint to restrict resource locations to US fulfills the requirement. Organization policies cascade to child resources and projects within the folder.

Community Discussion

No comments yet. Be the first to start the discussion!