Google Professional Cloud DevOps Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
A third-party application requires a service account key to function correctly. When attempting to export the key from your Google Cloud project, you encounter the error: "The organization policy constraint iam.disableServiceAccountKeyCreation is enforced." How can you enable the third-party application to work while adhering to Google's recommended security best practices?
A
Enable the default service account key, and download the key.
B
Remove the iam.disableServiceAccountKeyCreation policy at the organization level, and create a key.
C
Disable the service account key creation policy at the project's folder, and download the default key.
D
Add a rule to set the iam.disableServiceAccountKeyCreation policy to off in your project, and create a key.