Associate Cloud EngineerDemo

By Google · Question Mode

QuestionQ2

Configuring access and security

All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?

  • A Create a folder to contain all the dev projects. Create an organization policy to limit resources in US locations.
  • B Create an organization to contain all the dev projects. Create an Identity and Access Management (IAM) policy to limit the resources in US regions.
  • C Create an Identity and Access Management (IAM) policy to restrict the resources locations in the US. Apply the policy to all dev projects.
  • D Create an Identity and Access Management (IAM) policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles.
Explanation

Organization Policy controls WHAT resources can be created (resource restrictions), while IAM controls WHO can take actions (identity-based access). Creating a folder to organize projects and applying an organization policy constraint to restrict resource locations to US fulfills the requirement. Organization policies cascade to child resources and projects within the folder.

Community Discussion

No comments yet. Be the first to start the discussion!