Google Cloud Professional Cloud Security Engineer Practice Exam

When defining access for a DevOps team to troubleshoot deployment issues, what access strategy should be employed?

1. Create an IAM policy with full administrative rights

2. Create a custom IAM role with extensive permissions

3. Create a custom IAM role with limited list/view permissions

4. Assign public access to the resources during the issue

The correct answer is: Create a custom IAM role with limited list/view permissions

Creating a custom IAM role with limited list/view permissions is the most appropriate access strategy for granting a DevOps team the ability to troubleshoot deployment issues. This approach strikes a balance between enabling the team to perform necessary tasks while minimizing security risks. By granting limited list/view permissions, the team can access relevant resources and logs to diagnose issues without being able to modify configurations or access sensitive data. This principle of least privilege is crucial in maintaining a secure environment, as it ensures that users have only the permissions they need to perform their jobs and nothing more. This strategy helps mitigate the risk of accidental changes or unauthorized access that could arise from broader permissions. It encourages adherence to robust security practices by providing a defined scope of access tailored to the team's troubleshooting needs, thereby fostering a more secure cloud infrastructure.