Ultimate access to all questions.
To grant team members the ability to export logs from Stackdriver Logging for a managed application, what steps should you take?
Explanation:
To grant team members the ability to export logs in Stackdriver Logging, the correct approach involves assigning the appropriate IAM roles that specifically allow for the management of log exports. Option A suggests granting the 'logging.configWriter' role, which is correct because this role provides the necessary permissions to create, update, and delete log sinks, which are essential for exporting logs. Option C is also correct because creating a custom IAM role with 'logging.sinks.list' and 'logging.sink.get' permissions would allow team members to view and manage log sinks, thereby enabling them to export logs. Options B and D are incorrect because Access Context Manager and Organizational Policies are not the right tools for granting permissions to export logs; they are more about defining access levels and enforcing organizational-wide policies, respectively.