Google Cloud Professional Cloud Security Engineer Practice Exam

Which Identity-Aware Proxy role is necessary for an IAM user to access HTTPS resources?

1. IAP-Secured Web App User

2. IAP-Admin User

3. IAP-Secured Resource Owner

4. IAP-Viewer User

The correct answer is: IAP-Secured Web App User

The role required for an IAM user to access HTTPS resources through the Identity-Aware Proxy (IAP) is the "IAP-Secured Web App User." This role grants users the necessary permissions to access IAP-secured applications by allowing them to authenticate and authorize their requests based on their identity. The IAP-Secured Web App User role includes access to specific IAP resources, enabling the user to establish a secure connection to web applications that are protected by IAP. This is particularly important in a cloud environment where controlling access to applications based on user identity and context is a key aspect of security. In contrast, the other roles serve different purposes. The "IAP-Admin User" role is designed for administrative tasks, allowing users to manage IAP configurations and policies rather than just access resources. The "IAP-Secured Resource Owner" role would typically apply to users who own specific resources, enabling them to manage those resources securely. Lastly, the "IAP-Viewer User" role may provide read-only access to resources but does not grant the specific permissions needed to access the applications securely like the IAP-Secured Web App User role does. Thus, for a user to successfully connect and access applications via IAP