Answer-first summary for fast verification
Answer: App Engine Deployer
The correct answer is **B. App Engine Deployer**, as it provides the necessary write access to create a new version without the ability to modify existing versions or configure traffic, aligning with the principle of least privilege. - **Option A (App Engine Code Viewer)** is incorrect because it only grants read-only access. - **Option C (Project Editor)** is too broad and does not adhere to the principle of least privilege. - **Option D (App Engine Service Admin)** is incorrect as it does not allow for the deployment of new versions. Refer to the [GCP documentation on App Engine Access Control](https://cloud.google.com/appengine/docs/standard/access-control) for more details.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
As a project owner, you need to authorize a co-worker to deploy a new version of your application to App Engine following Google’s recommended practices. Which IAM role should you assign to your co-worker?
A
App Engine Code Viewer
B
App Engine Deployer
C
Project Editor
D
App Engine Service Admin
No comments yet.