Correct Answer: Only grant 'Owner' or 'Editor' roles to the Terraform Service Account; all humans get 'Viewer' roles
The 'Principle of Least Privilege' applied to people (humans) vs automated service accounts is the core of infrastructure-as-code governance....
Correct Answer
Only grant 'Owner' or 'Editor' roles to the Terraform Service Account; all humans get 'Viewer' roles
Why This Answer Is Correct
The 'Principle of Least Privilege' applied to people (humans) vs automated service accounts is the core of infrastructure-as-code governance.
This question evaluates your knowledge of Cloud IAM — a core concept tested in Professional Cloud Architect. Understanding Cloud IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
To improve security and reduce cost, you want to identify all Service Accounts in your organization that have not been used for the last 90 days. Which tool provide this information?
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Cloud IAM feature should you use?
A financial services client needs to ensure that their cloud-based application is compliant with residency requirements that specify data must never leave the European Union. How can they enforce this at the organization level?
An organization is migrating their on-premises identity system to GCP. They want to ensure that all their employees can use their existing enterprise credentials to log in to the Google Cloud Console. Which tool is necessary?
A company wants to analyze their GCP spend across different business departments. They have labeled each project with a 'department' tag. What is the most effective way to produce these reports?