Chapter 17
Configuring Access and Security
THIS CHAPTER COVERS THE FOLLOWING OBJECTIVES OF THE GOOGLE ASSOCIATE CLOUD ENGINEER CERTIFICATION EXAM:
5.1 Managing Identity and Access Management (IAM)- 5.2 Managing service accounts
- 5.3 Viewing audit logs for project and managed services
Google Cloud engineers can expect to spend a significant amount of time working with access controls. This chapter provides instruction on how to perform several common tasks, including managing identity and access management (IAM) assignments, creating custom roles, managing service accounts, and viewing audit logs.
It is important to know that the preferred way of assigning permissions to users, groups, and service accounts is through the IAM system. However, Google Cloud did not always have IAM. Before that, permissions were granted using what are now known as primitive roles, which are fairly coarse-grained. Primitive roles may have more permissions than you want an...
