
Ultimate access to all questions.
Your application is hosted on Compute Engine and utilizes application default credentials to interact with Google APIs. It requires permissions to write data to a specific Cloud Storage bucket. Adhering to Google's best practices, what is the most appropriate action to take?
A
Create a service account with an access scope and use ‘https://www.googleapis.com/auth/devstorage.write_only‘ as the access scope._
B
Create a service account with an access scope and use ‘https://www.googleapis.com/auth/cloud-platform‘ as the access scope.
C
Create a service account and assign it the IAM role ‘storage.objectCreator‘ for the specified bucket.
D
Create a service account and assign it the IAM role ‘storage.objectAdmin‘ for the specified bucket.