Google Professional Cloud Developer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
Your team is developing a serverless web application on Cloud Run that requires access to images stored in a private Cloud Storage bucket. You need to grant the application IAM permissions to access the bucket's images while following Google's recommended security best practices. What steps should you take?
A
Enforce signed URLs for the desired bucket. Grant the Storage Object Viewer IAM role on the bucket to the Compute Engine default service account.
B
Enforce public access prevention for the desired bucket. Grant the Storage Object Viewer IAM role on the bucket to the Compute Engine default service account.
C
Enforce signed URLs for the desired bucket. Create and update the Cloud Run service to use a user-managed service account. Grant the Storage Object Viewer IAM role on the bucket to the service account.
D
Enforce public access prevention for the desired bucket. Create and update the Cloud Run service to use a user-managed service account. Grant the Storage Object Viewer IAM role on the bucket to the service account.