What should you do?

You manage an application that is writing logs to Stackdriver Logging. You need to give some team members the ability to export logs.

What should you do?
A . Grant the team members the IAM role of logging.configWriter on Cloud IAM.
B . Configure Access Context Manager to allow only these members to export logs.
C . Create and grant a custom IAM role with the permissions logging.sinks.list and logging.sink.get.
D . Create an Organizational Policy in Cloud IAM to allow only these members to create log exports.

Answer: A

Explanation:

https://cloud.google.com/logging/docs/access-control

The logging.configWriter role grants permissions to create, update, and delete log exports. This is the correct role to give team members who need to export logs2.

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments