Explanation:
The correct answer is B. App Engine Deployer, as it provides the necessary write access to create a new version without the ability to modify existing versions or configure traffic, aligning with the principle of least privilege.
Refer to the GCP documentation on App Engine Access Control for more details.
Ultimate access to all questions.
No comments yet.
As a project owner, you need to authorize a co-worker to deploy a new version of your application to App Engine following Google’s recommended practices. Which IAM role should you assign to your co-worker?
A
App Engine Code Viewer
B
App Engine Deployer
C
Project Editor
D
App Engine Service Admin