Google Cloud Professional Cloud Security Engineer Practice Exam

At which level in the resource hierarchy should you set the Resource Location Restriction organization policy constraint?

1. Folder

2. Project

3. Organization

4. Resource

The correct answer is: Project

Setting the Resource Location Restriction organization policy constraint at the project level is considered appropriate because projects are the fundamental units of Google Cloud resources and provide a specific context for managing resources. By applying this constraint at the project level, you can enforce location restrictions on all resources created within that project. This ensures compliance with data residency and sovereignty requirements, allowing you to control where the data is stored and processed according to your organization's policies. Additionally, enforcing this constraint on a broader level, like the organization or folder level, could lead to overly broad restrictions that may affect multiple projects or resources in unintended ways. By limiting the constraint to a project, you provide more flexibility for teams working on different projects while still maintaining compliance with specific location requirements.