Topic 1 Question 118

Associate Cloud Engineer

Topic 1 Question 118
You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?
- Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
- Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to BETA while testing the role permissions.
- Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
- Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to BETA while testing the role permissions.
ユーザの投票
コメント(17)
- You need a custom role with permissions supported in prod and you want to publish the status of the role. https://cloud.google.com/iam/docs/custom-roles-permissions-support SUPPORTED The permission is fully supported in custom roles. TESTING The permission is being tested to check its compatibility with custom roles. You can include the permission in custom roles, but you might see unexpected behavior. Not recommended for production use. NOT_SUPPORTED The permission is not supported in custom roles. You can't use TESTING as it is not good for prod. And you need first version which should be ALPHA. Answer should be A.
  
  👍 81
  raksteer2020/07/13
- Correct Answer is (A):
  
  Testing and deploying Custom roles include a launch stage, which is stored in the stage property for the role. The launch stage is informational; it helps you keep track of whether each role is ready for widespread use.
  
  Each custom role can have one of the following launch stages:
  
  Launch stages ALPHA The role is still being developed or tested, or it includes permissions for Google Cloud services or features that are not yet public. It is not ready for widespread use. BETA The role has been tested on a limited basis, or it includes permissions for Google Cloud services or features that are not generally available. GA The role has been widely tested, and all of its permissions are for Google Cloud services or features that are generally available.
  
  👍 30
  ESP_SAP2020/08/24
- A:
  Supporting Points: a. The status of the custom rule is to be presented to the organization. And since this is yet in testing state, the custom rule state will be Alpha. b. The Support level, must be SUPPORTED so as to be used in production. If the support level is at TESTING, then in that case - the custom role must not be used as its results may change and unexpected behaviour may be expected.
  
  SUPPORTED The permission is fully supported in custom roles. TESTING The permission is being tested to check its compatibility with custom roles. You can include the permission in custom roles, but you might see unexpected behavior. Not recommended for production use. NOT_SUPPORTED The permission is not supported in custom roles. https://cloud.google.com/iam/docs/custom-roles-permissions-support
  
  👍 3
  SSunny2021/03/11
シャッフルモード

ユーザの投票

コメント(17)