Google Cloud Professional Cloud Security Engineer Practice Exam

What action should be taken if encountering an error with log sinks and uniform bucket-level access in Cloud Storage?

1. Change the access control model for the bucket

2. Disable uniform bucket-level access

3. Create a new log sink

4. Change the location of the bucket

The correct answer is: Change the access control model for the bucket

When encountering an error with log sinks and uniform bucket-level access in Cloud Storage, the recommended action is to change the access control model for the bucket. This is because log sinks require specific permissions to write logs to your Cloud Storage bucket. If the current uniform bucket-level access settings do not grant the necessary permissions to the logging service, you will encounter errors. By changing the access control model, you can customize the permissions to ensure that the logging service has the appropriate access rights. This may involve adjusting IAM roles or fine-tuning the bucket policy to allow for the correct service accounts to write logs. Disabling uniform bucket-level access may seem like a potential workaround, but this could compromise the security model you are aiming for. Creating a new log sink or changing the location of the bucket are not typically solutions to permission errors, as these actions do not address the underlying access control issues causing the error with the existing log sink.