Home › GCP Associate Cloud Engineer › cloudcomputing › gcpsecurity › Which Google Cloud identity type is intended to …
Which Google Cloud identity type is intended to be ASSIGNED to a workload (e.g. a VM, a GKE pod, a Cloud Run service) so it can call other Google APIs without using a user's personal credentials?
AA service account
BAn organisation policy constraint
CA subnet
DA folder
Answer & Solution
Correct answer: A. A service account
Service accounts are the canonical non-human identity for workloads. Folders are hierarchy containers, subnets are networking, org policy constraints are governance rules.
Related questions
Which IAM principle does Google Cloud recommend when granting a service account access to Which Google Cloud feature provides a centralised reverse proxy that verifies the user's iAn organisation wants to enforce that only signed and approved container images can be depWorkload Identity Federation lets external (non-Google) identities (e.g. AWS IAM, GitHub AAn auditor needs to determine which user deleted a Cloud Storage bucket in a project last Which approach gives a GKE workload SHORT-LIVED credentials to access Google APIs WITHOUT Which Google Cloud product stores secrets (API tokens, passwords, certificates) with versiWhich Google Cloud service centrally manages cryptographic keys (creation, rotation, destr