Explanation:
To enable a Dataflow pipeline to deploy on a Shared VPC network, the service account executing the pipeline must have the compute.networkUser role. This role provides the necessary permissions to use the network and subnetwork. The Dataflow service agent does not require direct network access, and administrative roles like dataflow.admin do not grant network permissions. Therefore, the correct action is to assign the compute.networkUser role to the service account that executes the Dataflow pipeline.
Ultimate access to all questions.
No comments yet.
When setting up a Dataflow pipeline to process data from Cloud Storage into BigQuery using a Shared VPC network, what is the correct approach to enable the pipeline's deployment on the Shared VPC network?
A
Assign the dataflow.admin role to the Dataflow service agent.
B
Assign the compute.networkUser role to the service account that executes the Dataflow pipeline.
C
Assign the dataflow.admin role to the service account that executes the Dataflow pipeline.
D
Assign the compute.networkUser role to the Dataflow service agent.