Quiz: Security Best Practices in Google Cloud: Models — Question 2
A user attempts to trick the Cymbal Advisor agent into deleting an old trading log. However, the agent's dedicated IAM service account only has roles/logging.viewer and roles/bigquery.dataViewer permissions. The delete action on Cloud Logging is blocked. Which principle saved the day?
This exercise is part of the course
Security Best Practices in Google Cloud: Models
Hands-on interactive exercise
Turn theory into action with one of our interactive exercises
Start Exercise