
Ultimate access to all questions.
Your organization undergoes an annual audit wherein auditors review all Google Cloud Identity and Access Management (Cloud IAM) policy changes made in the past 12 months. To enhance efficiency and streamline the audit process, what would be the best approach to facilitate this review?
A
Create custom Google Stackdriver alerts and send them to the auditor
B
Enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor
C
Use cloud functions to transfer log entries to Google Cloud SQL and use ACLs and views to limit an auditor's view
D
Enable Google Cloud Storage (GCS) log export to audit logs into a GCS bucket and delegate access to the bucket
Explanation:
The best approach to streamline and expedite the audit process is to enable Logging export to Google BigQuery and use ACLs and views to scope the data shared with the auditor. BigQuery is a powerful tool for data analysis, allowing auditors to efficiently review the logs and generate necessary reports. Using ACLs and views ensures that only the relevant data is shared with auditors, maintaining security and compliance. This method is recommended in Google's documentation for handling external auditor scenarios.