Which GCP service controls who can do what on which resource — the fou…

Question

Which GCP service controls who can do what on which resource — the foundation of GCP's permission model?

Accepted Answer

B. Identity and Access Management (IAM)

IAM is the principal+role+resource permission model in GCP.
The other services aren't permission systems.

Answer

Cloud Memorystore

Answer

Cloud DNS

Answer

Cloud Armor

Which GCP service controls who can do what on which resource — the foundation of GCP's permission model?